This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/_24DoKc65Eo3K8s-8r6RRL6egqM.roa
File:                     _24DoKc65Eo3K8s-8r6RRL6egqM.roa (raw, json)
Hash identifier:          adFtcGa6MNyNtKQFNgClfvE2+zVf3OMdW8oYlRY9eEU=
Subject key identifier:   FF:6E:03:A0:A7:3A:E4:4A:37:2B:CB:3E:F2:BE:91:44:BE:9E:82:A3
Certificate issuer:       /CN=f6fa23a52645c96db0ddb14d24f6b4f0559fbe2b
Certificate serial:       019C2AF4CFBEB5F33569A9AE9576439E040E
Authority key identifier: F6:FA:23:A5:26:45:C9:6D:B0:DD:B1:4D:24:F6:B4:F0:55:9F:BE:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/_24DoKc65Eo3K8s-8r6RRL6egqM.roa
Signing time:             Wed 04 Feb 2026 23:20:12 +0000
ROA not before:           Wed 04 Feb 2026 23:20:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215886
IP address blocks:        77.95.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2a:f4:cf:be:b5:f3:35:69:a9:ae:95:76:43:9e:04:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6fa23a52645c96db0ddb14d24f6b4f0559fbe2b
        Validity
            Not Before: Feb  4 23:20:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ff6e03a0a73ae44a372bcb3ef2be9144be9e82a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8b:fd:ab:ce:71:2a:9f:fb:b6:ec:c6:85:7e:
                    df:3e:0d:92:90:8e:58:25:a1:85:ad:62:83:78:86:
                    d5:57:5c:02:56:b1:41:81:a4:25:bc:ca:7e:1c:3e:
                    2a:c4:42:f0:dd:40:3b:fd:60:1b:99:38:37:68:e4:
                    38:9b:02:36:b9:54:00:66:ba:26:71:93:1c:ea:a2:
                    b8:b4:e0:79:8a:6f:af:f4:b1:8f:c2:52:5c:70:ea:
                    fc:f4:e7:59:7f:59:6b:eb:0f:3f:94:c2:32:2b:4b:
                    5f:f2:b0:76:1d:d5:c0:23:00:05:f7:dd:18:92:8c:
                    2a:16:db:c0:53:b5:9d:12:e3:47:f8:75:cc:d2:35:
                    42:9f:81:92:d4:45:e0:2f:66:71:cc:23:d4:82:03:
                    38:48:55:4c:6f:bd:f4:e3:cb:6c:dc:12:c7:0d:0b:
                    52:4a:9b:d5:07:9f:ac:05:e7:c2:4e:48:cc:a1:da:
                    e8:09:1a:b3:8a:aa:63:62:cb:85:e9:86:d2:dc:40:
                    89:27:0b:40:d2:f5:d6:5c:b8:6b:9e:40:3e:f9:96:
                    9c:93:11:e2:df:cc:74:01:3f:74:a5:81:f4:81:cf:
                    5f:ff:7d:69:74:34:f2:49:0b:81:3d:4d:c2:e4:c0:
                    0a:5e:6e:8d:f3:66:89:94:97:0c:fa:9d:2d:3f:dc:
                    f5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6E:03:A0:A7:3A:E4:4A:37:2B:CB:3E:F2:BE:91:44:BE:9E:82:A3
            X509v3 Authority Key Identifier:
                keyid:F6:FA:23:A5:26:45:C9:6D:B0:DD:B1:4D:24:F6:B4:F0:55:9F:BE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/_24DoKc65Eo3K8s-8r6RRL6egqM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.95.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:c3:40:06:6a:6d:78:be:ea:6b:f6:a2:f1:ee:a0:54:71:5f:
         2b:b7:f1:b6:6d:10:5b:92:f8:f0:29:40:7e:dc:2f:14:27:92:
         c5:40:3e:7f:bf:da:39:fb:24:34:ae:8a:6c:cc:97:45:aa:52:
         33:67:61:f4:13:7e:41:07:37:af:5b:d2:0b:56:60:f3:fc:84:
         6a:f0:6c:69:74:e4:24:b5:d1:20:8a:6e:e1:bd:55:36:ae:62:
         77:fc:ae:0e:1a:ee:87:d2:1c:18:2a:b5:04:f9:3f:db:f1:87:
         6a:69:33:ea:0c:a9:3e:7a:05:19:db:e8:c6:42:2d:db:12:61:
         f0:72:a6:85:29:3d:f3:c6:df:98:34:da:f2:86:f8:44:03:5e:
         bf:0b:ad:45:bc:9b:85:ed:53:ea:ef:25:8f:c2:b2:e3:be:81:
         5c:79:77:cb:50:a2:10:c8:f5:2c:eb:c2:72:ce:83:63:89:f4:
         20:3d:50:20:e4:94:1f:4b:57:cd:4a:74:83:a5:01:65:88:1e:
         7e:12:b0:23:a9:26:44:de:33:57:53:59:d9:67:05:67:fa:78:
         4f:3e:57:6f:2c:6c:62:57:70:c0:4f:de:37:d0:f9:db:60:be:
         6e:f0:08:89:ca:5a:45:17:98:a8:83:93:99:19:89:51:62:52:
         e4:26:e8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:55:21 2026 by rpki-client