This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/77RsSzfUsz2EQmFGRgifsIe6xkM.roa
File:                     77RsSzfUsz2EQmFGRgifsIe6xkM.roa (raw, json)
Hash identifier:          DxwmTTExsbyJiDxQSl6EpGWmSeAqeR8beoKxc8tnMqc=
Subject key identifier:   EF:B4:6C:4B:37:D4:B3:3D:84:42:61:46:46:08:9F:B0:87:BA:C6:43
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       019B7C13475FA2F1577B6EEAEC986611A9D7
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/77RsSzfUsz2EQmFGRgifsIe6xkM.roa
Signing time:             Fri 02 Jan 2026 00:19:56 +0000
ROA not before:           Fri 02 Jan 2026 00:19:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     273274
IP address blocks:        45.67.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 18:47:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:47:5f:a2:f1:57:7b:6e:ea:ec:98:66:11:a9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  2 00:19:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=efb46c4b37d4b33d8442614646089fb087bac643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:69:95:20:7a:0b:2f:9c:54:6b:32:4b:be:71:
                    28:1b:69:4c:22:76:b1:9e:b4:80:58:9a:a8:7f:1d:
                    e8:bd:c0:f0:bd:c7:5b:06:6b:39:26:be:90:c1:75:
                    69:17:a6:18:38:ee:5e:13:ab:c1:31:61:e9:1c:b5:
                    8f:eb:fb:17:93:7a:a1:4d:4d:41:71:b5:4c:7e:e0:
                    f0:87:9f:bf:e2:05:ac:75:26:61:d1:35:46:64:80:
                    31:e2:e9:b7:92:40:5e:04:0a:25:25:24:94:6a:3b:
                    03:60:e9:60:31:b4:00:53:71:c2:98:73:d9:85:1d:
                    7f:7b:6d:94:8a:56:9e:5e:a5:79:e5:7f:ff:a6:64:
                    04:3e:ba:fd:ec:3e:09:15:d0:d7:e5:44:13:48:d9:
                    da:ab:77:1e:71:e6:fb:b7:56:e4:3e:68:35:87:3b:
                    39:ad:cf:d9:ab:ae:d0:d9:c5:5f:2f:e1:f1:c7:d9:
                    a3:39:92:82:44:40:75:7c:34:61:a7:ac:f4:2a:4d:
                    cd:f0:fa:e7:a6:49:f8:09:42:5b:c7:ac:bf:8b:b5:
                    5b:56:63:9b:88:46:8e:fc:18:9a:4e:f1:67:54:c1:
                    ba:fd:8e:46:5b:04:18:36:39:de:cb:4c:3c:a6:37:
                    72:8d:f5:8e:f6:99:b6:3d:7d:bf:fa:9b:ef:b4:13:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B4:6C:4B:37:D4:B3:3D:84:42:61:46:46:08:9F:B0:87:BA:C6:43
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/77RsSzfUsz2EQmFGRgifsIe6xkM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:6c:b0:87:54:e9:cc:f0:cc:b2:c0:23:27:da:5d:88:88:8b:
         c1:61:a0:0b:4b:4b:e0:fe:98:7a:2a:14:2c:e3:db:fe:de:f4:
         fb:4f:7a:93:ab:a3:df:7c:69:41:da:a5:1c:d3:79:d1:ec:54:
         e1:05:b6:ec:b1:17:01:1c:1c:a2:dd:86:06:48:95:8e:8f:e6:
         3d:48:6e:fd:b4:4d:00:14:8d:76:ca:02:7d:f8:93:34:a0:73:
         99:ea:39:a5:41:5d:a1:58:85:fd:e5:f9:a4:9d:4c:48:c6:e8:
         4d:90:3a:76:b3:d8:6a:92:20:d2:c3:9c:eb:70:f0:ac:fc:1a:
         2c:69:f4:02:a4:47:14:a6:61:7c:28:52:78:f8:f3:98:f6:76:
         e2:5d:fe:b7:d3:5c:e4:44:28:28:6d:68:5f:d6:5d:4e:40:2d:
         5f:2c:58:ae:be:17:63:2b:b1:2b:15:6f:4e:18:49:96:a5:38:
         2c:a4:50:69:01:ee:57:b3:66:4e:f7:b7:14:55:d8:cc:a2:bf:
         48:2b:26:e0:c7:76:2e:9b:72:44:c8:71:82:f2:a6:58:23:fc:
         35:81:67:5c:7d:ca:92:f8:48:b4:9f:a1:42:74:89:9e:d9:ce:
         d3:1d:c9:5d:d2:be:5f:cd:50:9a:62:f1:89:56:39:e2:f7:0d:
         72:1c:19:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:38:56 2026 by rpki-client