This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/E6T7ZYtNFsDiieVS0hbCmrrXBHs.roa
File:                     E6T7ZYtNFsDiieVS0hbCmrrXBHs.roa (raw, json)
Hash identifier:          FoPG6dVyzwLVkXmSRMrejZ4jHtCGpIoYrs3nixOj+9E=
Subject key identifier:   13:A4:FB:65:8B:4D:16:C0:E2:89:E5:52:D2:16:C2:9A:BA:D7:04:7B
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       019B7E38AB81160159E432B41F94A42A95E3
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/E6T7ZYtNFsDiieVS0hbCmrrXBHs.roa
Signing time:             Fri 02 Jan 2026 10:20:01 +0000
ROA not before:           Fri 02 Jan 2026 10:20:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47690
IP address blocks:        77.47.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:ab:81:16:01:59:e4:32:b4:1f:94:a4:2a:95:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jan  2 10:20:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13a4fb658b4d16c0e289e552d216c29abad7047b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:d3:d8:1d:77:d6:fb:c5:0f:28:2e:0c:c7:
                    6e:e0:e6:4d:2b:fc:0b:d0:74:f8:7d:cf:03:94:a1:
                    00:bf:35:c3:1b:10:08:90:e3:98:d5:a9:11:56:5a:
                    91:ed:9a:b5:3a:71:65:48:a2:fc:5e:22:a2:c9:46:
                    d3:c4:53:d1:c6:7c:02:15:fb:82:0b:12:50:ce:c0:
                    ac:b3:36:d0:bf:e0:dc:74:ff:33:93:fd:ab:8c:86:
                    2b:c6:a7:b5:e2:5d:0b:b9:ff:a6:9b:62:05:f7:dc:
                    9e:c5:92:66:af:fd:2d:9a:27:f4:27:d1:0f:16:94:
                    3f:ee:90:cc:b8:88:97:f4:d7:ab:71:2e:f8:99:3e:
                    21:f6:af:1d:35:19:60:6e:0a:d3:1d:7b:1e:b8:20:
                    87:74:36:75:c5:c9:8e:98:a0:22:c3:8f:1d:e0:e7:
                    cc:e5:0d:05:6d:4c:e9:a7:9e:06:cc:b3:c4:1a:b8:
                    5a:55:68:bb:7f:28:47:81:29:5e:48:a7:2a:72:e5:
                    d3:ed:62:6f:24:6f:ac:9a:f6:ac:81:5b:c0:8b:d3:
                    67:c8:3d:a4:32:54:e3:08:e2:82:03:2b:5d:f3:7e:
                    11:f6:b2:00:ee:f1:c6:90:86:d4:6d:e9:df:ec:6c:
                    1e:da:68:de:12:2b:63:f6:79:f9:ff:ef:de:53:e8:
                    d3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A4:FB:65:8B:4D:16:C0:E2:89:E5:52:D2:16:C2:9A:BA:D7:04:7B
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/E6T7ZYtNFsDiieVS0hbCmrrXBHs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:de:a9:64:51:2e:6c:df:5e:23:28:0a:4a:ed:3c:8a:27:43:
         bb:fd:c8:de:fe:31:0b:ef:66:5a:13:a8:71:07:e9:3f:ea:79:
         94:2c:24:8b:c3:33:4f:1d:a3:73:65:1c:4f:2a:5a:6f:96:34:
         ff:d4:bc:32:0d:70:f4:ca:e7:46:f5:ca:18:e3:01:e4:46:b2:
         71:d2:2e:6d:9b:12:a3:29:54:e6:06:e1:ad:78:7c:03:8a:b3:
         a2:c4:d3:37:14:09:8a:41:1d:34:24:25:60:79:fe:60:ac:83:
         fc:97:8a:5a:a7:e1:7f:6c:23:c1:8f:89:8b:7a:ea:88:61:69:
         bd:d4:f9:3b:88:74:e2:59:7d:9e:24:be:bc:b9:a5:c5:d7:f1:
         ba:f7:20:8e:a7:ba:5f:2d:bb:18:75:50:b4:77:e6:d4:35:a3:
         0f:94:7d:71:8a:e7:c6:21:8b:79:ad:78:34:c8:06:d5:70:73:
         63:4f:8c:6e:fb:6f:80:08:49:8f:fa:d8:ab:8c:e6:1d:37:3b:
         ce:9f:c2:59:91:3a:3e:e9:bd:52:1e:de:07:96:a6:13:c6:32:
         a9:fb:e5:ad:67:ad:45:7e:00:4a:69:18:19:2e:ed:c0:64:05:
         6e:e5:19:e8:ef:ad:47:c6:eb:1a:1c:b8:d9:0f:83:3d:ec:4b:
         07:f0:00:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+OKuBFgFZ5DK0H5SkKpXjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjYwMTAyMTAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2E0ZmI2NThiNGQxNmMwZTI4OWU1NTJkMjE2YzI5YWJhZDcwNDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo/T2B131vvFDyguDMdu4OZNK/wL
0HT4fc8DlKEAvzXDGxAIkOOY1akRVlqR7Zq1OnFlSKL8XiKiyUbTxFPRxnwCFfuC
CxJQzsCsszbQv+DcdP8zk/2rjIYrxqe14l0Luf+mm2IF99yexZJmr/0tmif0J9EP
FpQ/7pDMuIiX9NercS74mT4h9q8dNRlgbgrTHXseuCCHdDZ1xcmOmKAiw48d4OfM
5Q0FbUzpp54GzLPEGrhaVWi7fyhHgSleSKcqcuXT7WJvJG+smvasgVvAi9NnyD2k
MlTjCOKCAytd834R9rIA7vHGkIbUbenf7Gwe2mjeEitj9nn5/+/eU+jT4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBOk+2WLTRbA4onlUtIWwpq61wR7MB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvRTZUN1pZdE5Gc0RpaWVWUzBoYkNtcnJYQkhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTS/4MA0G
CSqGSIb3DQEBCwUAA4IBAQBo3qlkUS5s314jKApK7TyKJ0O7/cje/jEL72ZaE6hx
B+k/6nmULCSLwzNPHaNzZRxPKlpvljT/1LwyDXD0yudG9coY4wHkRrJx0i5tmxKj
KVTmBuGteHwDirOixNM3FAmKQR00JCVgef5grIP8l4pap+F/bCPBj4mLeuqIYWm9
1Pk7iHTiWX2eJL68uaXF1/G69yCOp7pfLbsYdVC0d+bUNaMPlH1xiufGIYt5rXg0
yAbVcHNjT4xu+2+ACEmP+tirjOYdNzvOn8JZkTo+6b1SHt4HlqYTxjKp++WtZ61F
fgBKaRgZLu3AZAVu5Rno761HxusaHLjZD4M97EsH8AA/
-----END CERTIFICATE-----
Generated at Sat Jan 10 04:59:35 2026 by rpki-client