This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/pregM6BDoh2HWEQHPv67MtqnAfQ.roa
File:                     pregM6BDoh2HWEQHPv67MtqnAfQ.roa (raw, json)
Hash identifier:          De/BoyOlsQu9RdcTHEChfgcsiNtul5qAGlcozd5f7DQ=
Subject key identifier:   A6:B7:A0:33:A0:43:A2:1D:87:58:44:07:3E:FE:BB:32:DA:A7:01:F4
Certificate issuer:       /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Certificate serial:       019B7E38F950E03B2A0C873FD7BB39B8BA69
Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/pregM6BDoh2HWEQHPv67MtqnAfQ.roa
Signing time:             Fri 02 Jan 2026 10:20:21 +0000
ROA not before:           Fri 02 Jan 2026 10:20:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43061
IP address blocks:        77.94.128.0/19 maxlen: 19
                          2a02:d90::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:f9:50:e0:3b:2a:0c:87:3f:d7:bb:39:b8:ba:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
        Validity
            Not Before: Jan  2 10:20:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a6b7a033a043a21d875844073efebb32daa701f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:63:11:32:e2:d4:6b:2a:49:51:3b:38:88:a4:
                    c4:81:b4:1b:e7:53:16:e4:65:8d:91:2a:37:a1:e5:
                    2e:20:17:14:15:1e:f2:d8:cd:19:41:df:02:6b:a3:
                    61:10:d6:48:4a:4f:f8:a1:b2:e9:0d:08:38:39:05:
                    5b:d4:99:e4:e8:30:e9:07:41:e0:96:ec:8a:0a:24:
                    52:19:b2:a2:7e:d1:00:0b:ff:33:cd:f0:85:db:87:
                    3f:73:cf:78:9e:74:22:d3:40:b7:84:36:e1:ea:ee:
                    0c:5f:ad:1c:9a:b8:9b:f1:64:86:88:e9:f9:a8:10:
                    49:97:4e:10:a8:38:75:ed:52:2d:6c:8e:a7:66:87:
                    27:bd:82:19:ab:e5:e2:dd:2c:9d:e6:27:49:ce:e6:
                    42:b7:27:3a:ab:68:b5:84:17:39:c8:1b:4b:77:ea:
                    26:3e:36:47:61:a7:40:c9:a2:6c:eb:42:50:71:d3:
                    ca:f1:a5:a1:ab:67:85:77:75:67:25:0a:68:e3:dc:
                    e0:c5:f4:de:ea:a0:3e:1e:79:0e:60:bd:57:56:fa:
                    f6:d3:6f:dd:53:f3:cb:cb:a1:6c:83:2c:99:05:73:
                    21:91:c3:6e:b0:4e:3e:24:3f:09:f5:66:0e:d4:fa:
                    61:71:50:2f:97:3b:35:86:fd:5c:6d:be:eb:2c:e8:
                    db:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B7:A0:33:A0:43:A2:1D:87:58:44:07:3E:FE:BB:32:DA:A7:01:F4
            X509v3 Authority Key Identifier:
                keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/pregM6BDoh2HWEQHPv67MtqnAfQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.94.128.0/19
                IPv6:
                  2a02:d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:14:58:40:b6:ed:37:ed:0c:bb:34:70:7a:7c:a0:8e:4c:b9:
         f7:57:d3:9c:43:9f:de:25:97:86:f5:a7:e1:09:a9:04:b3:81:
         31:6e:5c:7f:ca:56:92:92:51:33:40:a9:e0:a2:ae:b2:f8:c0:
         26:b2:9c:c8:46:fd:c9:be:80:75:43:1b:dd:f6:c2:40:3b:c9:
         97:f6:38:1f:fe:4d:10:80:23:c7:c2:3e:6f:8a:7e:82:a7:bb:
         b4:d1:d5:05:9f:6d:cb:a6:98:0e:91:b0:c0:8a:8d:85:52:55:
         eb:21:ac:1d:d0:09:42:0f:53:df:6a:8f:22:10:72:6f:08:ff:
         b2:35:e7:f3:47:b1:45:2b:30:59:21:2d:49:53:80:e8:87:e7:
         c4:3d:61:cc:c9:da:4c:f1:06:e5:df:91:85:65:e7:9f:4e:4b:
         31:fd:74:84:ad:57:d1:86:b2:ec:92:3f:5b:b1:d1:3e:58:86:
         f9:81:2f:13:68:dc:15:be:ce:d9:0d:0e:46:89:33:80:c9:62:
         93:f4:2c:20:84:df:81:aa:c2:b4:ff:66:02:7f:e8:2c:b7:e0:
         27:d7:0f:06:0c:07:ed:eb:82:31:67:4f:7e:cd:6f:4b:2f:89:
         7e:ba:07:d6:93:ba:88:26:ba:3a:d8:6e:88:ec:a7:df:e0:49:
         3b:24:b3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:10:09 2026 by rpki-client