This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/luPpvwuddPcCZN1NTiaMni77JHI.roa
File:                     luPpvwuddPcCZN1NTiaMni77JHI.roa (raw, json)
Hash identifier:          DOVqL/1YsJh2/IEMhAiSbVGoLv+4KRJvYubGuGLi8gg=
Subject key identifier:   96:E3:E9:BF:0B:9D:74:F7:02:64:DD:4D:4E:26:8C:9E:2E:FB:24:72
Certificate issuer:       /CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Certificate serial:       019B76EB85DDBE6E46F849F9FC0EF03A6FA7
Authority key identifier: 39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/luPpvwuddPcCZN1NTiaMni77JHI.roa
Signing time:             Thu 01 Jan 2026 00:18:25 +0000
ROA not before:           Thu 01 Jan 2026 00:18:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207544
IP address blocks:        78.110.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:85:dd:be:6e:46:f8:49:f9:fc:0e:f0:3a:6f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
        Validity
            Not Before: Jan  1 00:18:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=96e3e9bf0b9d74f70264dd4d4e268c9e2efb2472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:76:9f:96:42:d0:6d:db:77:dd:f1:90:27:7b:
                    1f:d0:59:d3:13:14:e4:7e:4f:0d:a3:d0:ff:fd:15:
                    e6:55:b2:47:e9:4c:d1:15:bd:ce:a9:2e:c3:35:c3:
                    51:45:fd:03:02:22:d7:d0:36:77:7b:2e:64:4f:8f:
                    09:eb:bf:71:0c:f0:28:b9:15:3e:3e:ed:c6:fd:6f:
                    c8:c3:75:dd:65:43:a1:31:e0:9a:36:5a:54:3c:bb:
                    30:0c:fc:bd:4c:9c:b6:39:c7:ec:f3:71:01:6f:b1:
                    13:a0:7d:99:7f:df:6e:b4:7f:f3:5d:4c:19:b7:b8:
                    87:8b:71:7a:1e:ca:9c:f7:b4:ce:96:0c:fd:ca:49:
                    ed:8d:14:f9:8c:fd:fe:2d:0e:ab:86:0d:8e:88:61:
                    c5:ad:21:7d:7b:11:8d:17:72:74:4a:2b:71:cf:93:
                    cd:1d:ed:ce:53:bc:d5:c1:cc:70:6c:0d:21:56:6e:
                    ac:bd:47:dc:a5:c8:04:52:bf:58:1b:90:f9:17:7b:
                    1a:5c:c3:4d:7c:be:7d:de:6e:e8:54:41:d1:80:f5:
                    f4:c1:a2:1c:0a:8b:32:a8:3e:0d:8f:47:aa:06:22:
                    2f:d0:86:86:e0:6b:c7:37:5c:f8:cf:03:2f:39:ce:
                    8d:88:67:52:e2:f9:4e:b3:2b:e3:75:17:46:57:1e:
                    be:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E3:E9:BF:0B:9D:74:F7:02:64:DD:4D:4E:26:8C:9E:2E:FB:24:72
            X509v3 Authority Key Identifier:
                keyid:39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/luPpvwuddPcCZN1NTiaMni77JHI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.110.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:6c:38:8f:0b:46:fe:d8:65:09:3d:bb:60:0e:fc:0f:d5:4c:
         64:54:41:5c:6b:0a:0d:e0:28:54:e8:f9:0a:05:42:66:45:18:
         12:6b:01:b8:40:c4:df:b0:86:11:ea:ef:8f:9b:9b:92:7a:aa:
         b1:0d:64:f2:d4:f1:18:6c:eb:27:b0:95:b5:5c:d7:8c:98:66:
         2b:d9:10:29:fe:c5:66:d4:9a:d1:90:56:6a:5a:ea:05:c4:17:
         f3:a2:d9:cd:b7:7c:19:ea:51:7a:89:3e:54:37:af:13:61:68:
         be:a5:6c:97:34:b2:ce:69:a4:9a:93:e9:3c:f4:0c:08:3c:03:
         18:e8:7b:8b:52:35:0f:6c:59:2b:8e:55:c4:c9:ae:ca:b8:1c:
         a9:76:2d:19:11:96:76:06:84:2a:3f:44:9a:6e:5f:09:08:e9:
         5e:2b:91:c6:bc:8d:13:c3:9e:b6:1f:78:51:b5:45:14:c2:ae:
         e1:b6:a1:00:6a:b1:7b:94:23:3f:b3:44:6a:df:ec:a0:ba:f3:
         4b:7c:fd:97:84:64:33:5c:99:a1:48:ec:a3:dc:fc:28:94:e8:
         77:d9:9f:ac:2a:85:31:56:b0:95:36:5b:70:36:3c:67:83:1a:
         18:77:6a:0b:ec:61:24:32:49:e3:17:44:40:6f:95:69:4c:7e:
         3a:9f:84:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:19:27 2026 by rpki-client