This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/M77Rk_cFVlzlKmJsqy8lmw7h1vk.roa
File:                     M77Rk_cFVlzlKmJsqy8lmw7h1vk.roa (raw, json)
Hash identifier:          NwgbZIa0ZR+0zH1utEoFRjUS45z6tTEZcR8P3nJE0Mc=
Subject key identifier:   33:BE:D1:93:F7:05:56:5C:E5:2A:62:6C:AB:2F:25:9B:0E:E1:D6:F9
Certificate issuer:       /CN=24b086f4824266384e078cf777375f21bd370b70
Certificate serial:       019B7C80292E10ACC23082F3FC98B7D661E8
Authority key identifier: 24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/M77Rk_cFVlzlKmJsqy8lmw7h1vk.roa
Signing time:             Fri 02 Jan 2026 02:18:52 +0000
ROA not before:           Fri 02 Jan 2026 02:18:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62382
IP address blocks:        80.72.216.0/21 maxlen: 21
                          80.72.216.0/24 maxlen: 24
                          80.72.217.0/24 maxlen: 24
                          80.72.218.0/24 maxlen: 24
                          80.72.219.0/24 maxlen: 24
                          80.72.220.0/24 maxlen: 24
                          80.72.221.0/24 maxlen: 24
                          80.72.222.0/24 maxlen: 24
                          185.37.188.0/22 maxlen: 22
                          185.37.188.0/24 maxlen: 24
                          185.37.189.0/24 maxlen: 24
                          185.37.191.0/24 maxlen: 24
                          193.143.96.0/23 maxlen: 23
                          193.143.96.0/24 maxlen: 24
                          193.143.97.0/24 maxlen: 24
                          193.143.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:29:2e:10:ac:c2:30:82:f3:fc:98:b7:d6:61:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b086f4824266384e078cf777375f21bd370b70
        Validity
            Not Before: Jan  2 02:18:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=33bed193f705565ce52a626cab2f259b0ee1d6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a8:ed:b3:91:eb:1c:b0:30:b6:b6:64:8e:2c:
                    40:97:85:65:b1:38:dc:78:99:93:e0:85:17:25:93:
                    8d:b3:44:bd:1a:53:5e:0d:29:f5:14:ab:7a:65:38:
                    46:5d:46:40:46:04:d6:de:9e:8e:45:bc:18:c7:ed:
                    21:e6:d9:eb:df:04:42:cc:cd:16:ac:c5:55:70:a1:
                    9c:af:b1:0c:61:fc:b0:c3:58:db:1e:c7:bb:ec:3c:
                    0a:f4:66:7a:28:76:8c:a8:9e:53:2e:3c:15:b9:89:
                    90:29:6d:d2:8d:c6:cd:70:8a:8e:8a:35:a6:55:d0:
                    2e:ba:15:6d:df:22:46:13:9c:36:08:51:34:04:bb:
                    c3:9c:eb:c4:8e:2c:97:49:dc:51:53:84:51:3f:0b:
                    7d:7b:65:90:fe:d9:f9:22:10:96:bb:07:4f:a8:51:
                    9b:d8:16:9d:c8:86:d3:c5:23:68:c6:6b:98:3b:c6:
                    0f:7d:5f:68:e2:90:e3:01:2a:6c:15:a2:d2:a1:6a:
                    3c:0c:5f:6f:c8:e8:6e:6a:00:d4:6f:da:7f:02:e0:
                    42:22:b9:4b:fc:74:eb:6a:99:bc:c1:1a:63:02:6a:
                    98:76:cb:b2:04:8c:9a:d0:2e:06:fb:5d:ed:52:2e:
                    bd:d2:0a:79:f4:b4:d7:25:aa:0a:80:66:13:aa:61:
                    b8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BE:D1:93:F7:05:56:5C:E5:2A:62:6C:AB:2F:25:9B:0E:E1:D6:F9
            X509v3 Authority Key Identifier:
                keyid:24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/M77Rk_cFVlzlKmJsqy8lmw7h1vk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.72.216.0/21
                  185.37.188.0/22
                  193.143.96.0/23
                  193.143.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:9c:40:4a:07:2b:08:c1:ea:05:cf:7c:42:c2:3c:a1:7e:cb:
         55:2e:71:24:ea:fd:d9:85:5b:8d:43:5b:41:a8:eb:0f:8e:e3:
         79:9b:42:31:77:a5:bc:02:f1:bc:05:fc:f4:4a:4b:f9:bf:19:
         ab:44:b0:57:90:dc:1e:61:f6:bb:91:7e:50:86:18:a7:34:d4:
         fb:25:b2:09:0c:c7:70:ed:c5:5a:55:d9:3f:0a:35:d5:d7:6b:
         98:6c:e4:cc:ca:4f:4a:eb:ae:cd:33:65:1b:b8:2a:9d:a8:4d:
         b5:ff:dc:6d:32:70:90:84:95:8c:00:79:f6:99:22:7a:bb:af:
         b2:88:96:72:22:94:80:29:81:b4:6d:89:74:f3:41:25:64:41:
         84:b0:a8:40:ce:fe:59:ca:c5:12:68:8e:55:c0:42:f1:8a:a6:
         f9:5a:ff:33:52:74:a6:8d:e8:bf:11:42:9a:8f:b7:93:89:b5:
         a0:68:b6:00:60:44:15:85:aa:ad:c9:7c:62:12:af:25:d8:e6:
         55:f7:f0:8c:62:4f:9c:eb:7d:7d:14:0c:7a:c6:50:7c:62:b5:
         60:5a:4c:1a:4e:7d:85:6a:93:54:97:03:55:a3:40:01:6b:31:
         bf:af:cc:de:3a:81:1b:b4:75:71:d4:aa:00:4f:54:d8:15:9c:
         fd:2f:b2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:55:17 2026 by rpki-client