This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/13bSAbvbvGDWUO5yvtSsKXnlK94.roa
File:                     13bSAbvbvGDWUO5yvtSsKXnlK94.roa (raw, json)
Hash identifier:          DXldFZAd6AGXUWvxh5LvcSzCrQoe+CYXwhAGhk24KDA=
Subject key identifier:   D7:76:D2:01:BB:DB:BC:60:D6:50:EE:72:BE:D4:AC:29:79:E5:2B:DE
Certificate issuer:       /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial:       019B7B367D48DBCF1CA3DDDE166E1E12337B
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/13bSAbvbvGDWUO5yvtSsKXnlK94.roa
Signing time:             Thu 01 Jan 2026 20:18:47 +0000
ROA not before:           Thu 01 Jan 2026 20:18:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     398464
IP address blocks:        77.247.116.0/22 maxlen: 22
                          185.217.166.0/24 maxlen: 24
                          195.64.122.0/24 maxlen: 24
                          2a10:d501::/32 maxlen: 32
                          2a10:d503::/32 maxlen: 32
                          2a10:d505::/32 maxlen: 32
                          2a14:2500::/29 maxlen: 29
                          2a14:2700::/29 maxlen: 29
                          2a14:2b00::/29 maxlen: 29
                          2a14:2d00::/29 maxlen: 29
                          2a14:2f00::/29 maxlen: 29
                          2a14:3300::/29 maxlen: 29
                          2a14:3500::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:7d:48:db:cf:1c:a3:dd:de:16:6e:1e:12:33:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
        Validity
            Not Before: Jan  1 20:18:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d776d201bbdbbc60d650ee72bed4ac2979e52bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f1:bd:7b:4e:ea:04:2e:b0:3d:ae:e2:6f:da:
                    0d:3d:9f:e3:2a:e7:74:c9:22:59:61:63:f2:7d:a3:
                    02:e1:87:cc:3b:fc:3d:69:a1:49:09:5f:ea:57:6c:
                    d5:fe:55:20:d7:1d:22:c6:ce:2a:80:76:2f:8a:db:
                    0e:bc:fa:5d:ef:27:76:c5:76:59:6d:0b:ff:cf:2b:
                    87:99:d8:c9:c2:4f:80:88:d2:90:01:8e:62:da:f3:
                    5e:a7:bd:7d:72:f9:4c:93:da:a6:ce:54:63:36:d0:
                    23:42:84:af:bb:0b:1e:81:be:cf:92:63:f0:ad:78:
                    ad:84:6c:c0:96:0f:4a:08:89:f8:82:ea:ec:cd:ba:
                    40:10:e5:6c:bc:ec:68:47:ab:d5:72:9f:e3:b5:76:
                    81:3a:16:88:99:c8:9d:53:db:d5:0e:95:93:32:20:
                    56:59:ef:5f:5d:60:73:e0:c3:d7:e4:b9:45:dd:63:
                    bf:20:43:41:0d:fa:c6:a4:3e:0d:cb:10:96:93:d5:
                    52:5e:a9:83:d9:51:6f:9d:46:cb:91:44:05:9d:10:
                    ab:16:41:23:e1:11:f3:79:07:e2:21:56:62:47:e3:
                    db:cc:46:94:33:16:7d:63:ab:b3:29:e1:de:f7:2a:
                    c7:52:9a:60:67:99:6c:c0:c6:5b:3a:23:72:9f:9b:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:76:D2:01:BB:DB:BC:60:D6:50:EE:72:BE:D4:AC:29:79:E5:2B:DE
            X509v3 Authority Key Identifier:
                keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/13bSAbvbvGDWUO5yvtSsKXnlK94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.247.116.0/22
                  185.217.166.0/24
                  195.64.122.0/24
                IPv6:
                  2a10:d501::/32
                  2a10:d503::/32
                  2a10:d505::/32
                  2a14:2500::/29
                  2a14:2700::/29
                  2a14:2b00::/29
                  2a14:2d00::/29
                  2a14:2f00::/29
                  2a14:3300::/29
                  2a14:3500::/29

    Signature Algorithm: sha256WithRSAEncryption
         07:92:76:c5:e0:7d:35:0a:8f:23:09:2e:1e:0f:4c:fe:5f:d8:
         5c:ea:74:21:a3:7c:b5:29:8a:da:c8:1b:36:39:da:c9:08:12:
         c6:46:e6:95:f7:53:95:02:e2:0e:d1:c7:15:38:df:a5:2b:69:
         cd:9f:97:1f:71:df:1b:32:c4:0b:dc:cb:9e:15:68:a8:66:6d:
         86:af:dc:86:e2:b6:35:53:f2:75:9e:a5:1c:de:7b:82:a4:a6:
         9b:be:09:7c:86:71:eb:ef:4b:8f:4e:1b:02:c3:1d:ca:01:d8:
         d9:28:ec:1a:1f:bf:48:5b:39:63:24:c1:5e:1a:9a:ac:2a:12:
         14:83:17:5e:35:71:c2:de:92:3d:35:56:a0:5e:9b:ee:14:11:
         03:4a:5d:c0:76:d8:dc:f0:ca:57:93:02:35:a7:2a:cd:cf:ab:
         d3:de:50:63:86:1e:ad:5c:87:c2:49:1a:7b:89:23:02:12:bb:
         57:89:c5:1e:31:bf:49:87:76:ed:76:10:c1:25:67:5a:44:5d:
         61:73:bd:5d:7d:7d:d4:88:3e:db:11:06:89:9b:c3:cc:19:26:
         94:e2:35:4b:04:65:9e:ea:9a:ec:72:be:e8:91:d6:a0:29:71:
         0c:ec:ac:57:7d:da:1e:92:db:68:f9:98:a8:50:ed:d3:92:a0:
         6b:4d:e4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:45:56 2026 by rpki-client