This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/HSZgDWGzoYUE-eOkoFFO6TWqRvM.roa
File:                     HSZgDWGzoYUE-eOkoFFO6TWqRvM.roa (raw, json)
Hash identifier:          z8ecTHraKJuJfx2Nzr6QIZs1OJQlHdMTivk8yRc4Ssw=
Subject key identifier:   1D:26:60:0D:61:B3:A1:85:04:F9:E3:A4:A0:51:4E:E9:35:AA:46:F3
Certificate issuer:       /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial:       019B797DE471BF73B6B9F307E70A53D2DBD4
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/HSZgDWGzoYUE-eOkoFFO6TWqRvM.roa
Signing time:             Thu 01 Jan 2026 12:17:32 +0000
ROA not before:           Thu 01 Jan 2026 12:17:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200551
IP address blocks:        77.73.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7d:e4:71:bf:73:b6:b9:f3:07:e7:0a:53:d2:db:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
        Validity
            Not Before: Jan  1 12:17:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1d26600d61b3a18504f9e3a4a0514ee935aa46f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:22:e3:54:02:e7:d0:ff:e2:bf:b5:b1:bb:
                    c7:8d:17:0c:9c:94:4e:d6:8c:ad:ce:01:79:41:41:
                    6c:81:24:a6:f1:8b:93:14:a8:08:62:33:69:29:87:
                    c6:77:69:ff:d0:fd:b7:7d:72:32:95:87:e3:b8:44:
                    db:43:f2:fb:1e:d5:78:5d:28:1f:01:13:ee:4d:df:
                    13:30:4f:b0:3a:36:51:48:e3:fd:a8:bf:7a:76:2e:
                    4f:47:5d:cd:55:4d:ab:16:35:b7:ec:cc:2a:ed:fe:
                    52:b6:06:95:bf:a8:2e:59:0e:ee:f0:68:df:57:75:
                    fa:74:55:9b:a3:27:93:53:23:46:61:a8:7b:bd:71:
                    43:15:aa:24:20:d5:aa:6c:7f:9d:11:bc:f6:f9:04:
                    23:fd:4d:0c:80:e8:37:f6:b9:43:16:8f:64:c0:04:
                    bf:f8:d9:24:d8:a6:d5:f3:79:9d:97:20:19:db:4f:
                    50:b0:35:86:fc:98:8c:30:41:12:60:f4:83:23:3a:
                    cc:65:8c:2d:ac:37:a8:1c:4a:22:a2:5c:d5:52:89:
                    ea:dc:69:e3:80:64:cb:e7:9e:ae:76:05:17:d7:7e:
                    22:f3:72:95:d2:f6:cf:9b:a7:42:97:5a:dc:2b:fa:
                    07:a1:eb:f2:64:94:53:72:eb:31:85:a7:fa:cf:51:
                    d5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:26:60:0D:61:B3:A1:85:04:F9:E3:A4:A0:51:4E:E9:35:AA:46:F3
            X509v3 Authority Key Identifier:
                keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/HSZgDWGzoYUE-eOkoFFO6TWqRvM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.73.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:70:27:10:bd:c6:7c:4e:61:01:26:bb:f9:4d:83:67:77:f5:
         79:6a:f0:20:5f:8d:cb:1c:a4:c4:32:b7:14:7a:a7:44:58:ec:
         79:08:91:9c:83:ee:d2:53:02:53:b3:62:5f:2c:32:47:be:86:
         34:a8:3f:f7:ae:eb:b2:ce:f8:bf:38:2d:28:c9:f5:37:a0:5d:
         b2:09:ae:0b:9a:1a:21:86:03:45:4c:71:c0:ce:af:2e:ed:e5:
         d3:15:54:20:01:f6:cb:b9:f7:af:1a:a7:62:d1:81:2a:6f:84:
         0a:fe:6e:3a:da:b7:e8:da:3a:e9:20:04:a0:13:a7:75:3b:4f:
         ef:99:0f:47:f8:65:9a:3f:b6:62:71:5c:30:d3:00:ee:d9:a6:
         79:63:f8:ed:a4:05:82:5c:51:d3:f1:a6:13:ab:46:43:c9:3d:
         ce:ed:d4:d8:e9:17:4d:5c:5a:3c:44:21:d8:a5:f4:2a:fc:d8:
         e7:08:c6:f8:48:b3:25:ff:0a:19:a5:72:5e:63:e3:ab:24:34:
         8e:08:3c:03:e7:88:d1:2c:a7:68:cc:10:30:43:63:b5:3c:3c:
         76:3d:2d:dd:68:14:a6:5a:8e:2e:0f:4c:69:e3:0a:48:b7:d5:
         8c:e2:ae:6b:56:55:96:99:18:8b:2d:fb:8d:26:0b:5b:20:42:
         2e:d8:65:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5feRxv3O2ufMH5wpT0tvUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNGUxOWEyMjc1ODE2YTI4ZTVlODBjOGY5YTI4Y2M1YTFk
OWMwZDUwHhcNMjYwMTAxMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDI2NjAwZDYxYjNhMTg1MDRmOWUzYTRhMDUxNGVlOTM1YWE0NmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog8i41QC59D/4r+1sbvHjRcMnJRO
1oytzgF5QUFsgSSm8YuTFKgIYjNpKYfGd2n/0P23fXIylYfjuETbQ/L7HtV4XSgf
ARPuTd8TME+wOjZRSOP9qL96di5PR13NVU2rFjW37Mwq7f5StgaVv6guWQ7u8Gjf
V3X6dFWboyeTUyNGYah7vXFDFaokINWqbH+dEbz2+QQj/U0MgOg39rlDFo9kwAS/
+Nkk2KbV83mdlyAZ209QsDWG/JiMMEESYPSDIzrMZYwtrDeoHEoiolzVUonq3Gnj
gGTL556udgUX134i83KV0vbPm6dCl1rcK/oHoevyZJRTcusxhaf6z1HVgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB0mYA1hs6GFBPnjpKBRTuk1qkbzMB8GA1UdIwQY
MBaAFGFOGaInWBaijl6AyPmijMWh2cDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lNThlMjctY2FmZC00MTdjLTk1ZDAt
ODcwNTQ0Y2FhZmFiLzEvSFNaZ0RXR3pvWVVFLWVPa29GRk82VFdxUnZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lNThlMjctY2FmZC00MTdjLTk1ZDAtODcwNTQ0Y2FhZmFi
LzEvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUlfMA0G
CSqGSIb3DQEBCwUAA4IBAQBBcCcQvcZ8TmEBJrv5TYNnd/V5avAgX43LHKTEMrcU
eqdEWOx5CJGcg+7SUwJTs2JfLDJHvoY0qD/3ruuyzvi/OC0oyfU3oF2yCa4Lmhoh
hgNFTHHAzq8u7eXTFVQgAfbLufevGqdi0YEqb4QK/m462rfo2jrpIASgE6d1O0/v
mQ9H+GWaP7ZicVww0wDu2aZ5Y/jtpAWCXFHT8aYTq0ZDyT3O7dTY6RdNXFo8RCHY
pfQq/NjnCMb4SLMl/woZpXJeY+OrJDSOCDwD54jRLKdozBAwQ2O1PDx2PS3daBSm
Wo4uD0xp4wpIt9WM4q5rVlWWmRiLLfuNJgtbIEIu2GWf
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:26:48 2026 by rpki-client