This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/JjXMuecgBzxuqyS3slTwiSnr5mE.roa
File:                     JjXMuecgBzxuqyS3slTwiSnr5mE.roa (raw, json)
Hash identifier:          wyze/y0gn9suGrltw+Ca8tC8dvYUzoHSpwIJPVVFCho=
Subject key identifier:   26:35:CC:B9:E7:20:07:3C:6E:AB:24:B7:B2:54:F0:89:29:EB:E6:61
Certificate issuer:       /CN=713af8b790ac0923b24307ee008f261d10d9560b
Certificate serial:       019B7F814ABA8D1C611C80ECAA547C8FB40C
Authority key identifier: 71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/JjXMuecgBzxuqyS3slTwiSnr5mE.roa
Signing time:             Fri 02 Jan 2026 16:18:58 +0000
ROA not before:           Fri 02 Jan 2026 16:18:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210115
IP address blocks:        77.87.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:81:4a:ba:8d:1c:61:1c:80:ec:aa:54:7c:8f:b4:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713af8b790ac0923b24307ee008f261d10d9560b
        Validity
            Not Before: Jan  2 16:18:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2635ccb9e720073c6eab24b7b254f08929ebe661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:86:0a:9d:ee:9a:d7:f8:28:b0:1b:aa:59:
                    2d:70:72:a3:d6:a8:f0:3f:be:ec:27:d3:b0:f3:69:
                    ec:3d:6b:a1:00:cb:4d:6e:f7:4a:b7:e3:b4:c7:9e:
                    cb:b1:0a:a8:19:c7:ae:5c:50:39:3f:33:33:d0:1d:
                    97:bd:d5:1c:8b:70:86:b7:61:57:10:2d:9f:8a:77:
                    6f:8d:1a:dc:a4:7b:87:ab:d3:80:de:4e:7f:e2:a1:
                    c0:ce:c3:ce:2b:86:9c:43:fe:6f:87:ab:23:df:43:
                    3d:ea:f3:b8:3d:36:db:42:b3:a3:7f:49:03:d0:4f:
                    f9:6c:dd:d1:7d:40:ba:fc:20:a0:17:61:90:09:b0:
                    e7:2c:ef:83:c4:eb:5c:cb:ee:ed:88:90:26:e9:e1:
                    e0:20:ce:1a:aa:b0:78:91:04:fa:69:5c:dc:a6:90:
                    e0:b5:b7:6d:fe:d2:c3:e7:f3:9a:0b:b8:d6:b0:2c:
                    bf:1f:2a:a5:61:c7:f9:69:7f:55:e9:ea:cd:bf:30:
                    ca:3a:b4:34:c8:37:69:a9:91:58:40:c0:4e:50:39:
                    5f:20:0a:13:65:a4:cb:bc:fc:19:05:4c:69:36:39:
                    7e:9d:aa:3a:86:44:c6:e5:37:3b:ae:b5:a0:be:84:
                    73:62:e6:56:47:37:ac:2f:84:d5:b6:80:e4:68:ed:
                    a8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:35:CC:B9:E7:20:07:3C:6E:AB:24:B7:B2:54:F0:89:29:EB:E6:61
            X509v3 Authority Key Identifier:
                keyid:71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/JjXMuecgBzxuqyS3slTwiSnr5mE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.87.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:d5:4f:11:19:8d:15:ab:c2:8b:8d:32:8b:ca:b5:f2:ca:a0:
         c0:04:5f:91:4c:67:d0:df:ce:c8:15:a4:10:79:3e:c3:c9:fc:
         72:63:25:d1:5b:1e:49:77:91:44:22:bf:73:fa:d8:f4:55:cc:
         87:8f:73:2d:14:7e:56:0d:46:92:80:58:08:03:ff:f6:24:15:
         a2:4f:3d:80:ed:47:8b:11:bf:76:76:73:e2:5f:7a:7c:a5:4d:
         72:f6:cd:3c:da:72:eb:15:03:be:ed:68:ba:55:be:40:ea:d0:
         e2:1c:ba:0b:81:20:76:78:ea:6b:da:ba:5b:09:86:b3:5b:24:
         41:64:fe:35:59:74:99:c5:31:3b:e8:a7:7f:4a:d9:07:48:b7:
         c5:de:db:a5:2b:9b:3f:8f:5a:61:82:a9:a6:62:55:22:b5:88:
         6f:98:67:8a:22:60:d1:b5:b6:08:d0:7f:23:ff:ca:00:56:9c:
         25:00:73:5c:b9:28:c3:f4:a7:96:61:79:05:56:92:99:d5:97:
         7b:6c:1b:96:c1:ab:35:8d:c5:3b:58:7e:ae:0f:f5:38:f8:f6:
         9d:78:48:45:ce:f8:4e:04:4f:09:49:4e:50:45:f5:9d:0f:5e:
         0e:c6:63:a1:0a:38:26:e3:55:cd:c5:69:e1:a2:54:c9:14:18:
         ee:48:bd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:34:12 2026 by rpki-client