This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/x8mL-vw9v4JqanUK5g21jNq-H9s.roa
File:                     x8mL-vw9v4JqanUK5g21jNq-H9s.roa (raw, json)
Hash identifier:          Z0/c3iPwhP/QP58XNi4FVRIn4S8zP1M0081P8wp+joM=
Subject key identifier:   C7:C9:8B:FA:FC:3D:BF:82:6A:6A:75:0A:E6:0D:B5:8C:DA:BE:1F:DB
Certificate issuer:       /CN=263c3507760c5b82951a307cef932b0a4d36b363
Certificate serial:       019B7A5A6EF3099FA0AFD23445B59E499D30
Authority key identifier: 26:3C:35:07:76:0C:5B:82:95:1A:30:7C:EF:93:2B:0A:4D:36:B3:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/x8mL-vw9v4JqanUK5g21jNq-H9s.roa
Signing time:             Thu 01 Jan 2026 16:18:25 +0000
ROA not before:           Thu 01 Jan 2026 16:18:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35041
IP address blocks:        77.232.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:6e:f3:09:9f:a0:af:d2:34:45:b5:9e:49:9d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=263c3507760c5b82951a307cef932b0a4d36b363
        Validity
            Not Before: Jan  1 16:18:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c7c98bfafc3dbf826a6a750ae60db58cdabe1fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:62:cc:e7:a2:7e:f8:85:59:2d:0c:96:ca:
                    79:4d:87:51:91:ad:7e:19:c0:a3:84:51:4d:81:3e:
                    64:0d:0a:bf:6d:04:6b:5a:2c:68:99:6c:c5:9f:48:
                    78:de:99:9b:60:b9:80:79:cb:6f:f1:f2:f7:39:bb:
                    3c:fb:ae:81:0d:57:6a:b4:cb:37:ba:e9:52:cd:93:
                    bf:57:53:2a:1d:0a:72:2e:d5:b1:3b:ec:a4:4c:11:
                    c5:42:d9:18:0f:3e:18:62:32:89:0b:c9:1f:cc:5a:
                    8f:45:65:03:a0:8a:91:3b:40:43:db:02:1c:81:17:
                    24:fe:fa:85:7d:35:11:8c:16:4e:e4:2b:4e:c4:88:
                    06:07:d8:dd:08:9a:26:6e:70:b1:5a:dd:49:c1:c6:
                    9a:68:18:57:1c:8b:c5:9c:2e:af:4e:f1:79:dd:94:
                    5b:fa:07:3c:13:1d:9b:f4:c8:00:1c:c5:14:2c:ec:
                    7d:ac:ad:ec:e3:05:c9:d0:1b:8c:88:d1:92:d4:b7:
                    ea:46:28:c9:f8:d2:19:d2:f0:2f:d9:d5:6a:16:de:
                    ad:2b:f9:11:f4:50:b8:06:6f:c1:03:e7:94:d5:6a:
                    e3:42:df:93:60:0f:68:c8:93:a4:30:37:0e:e4:87:
                    0f:bf:05:e4:2c:6b:02:b9:ac:9e:c0:e5:ac:c8:fa:
                    0a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C9:8B:FA:FC:3D:BF:82:6A:6A:75:0A:E6:0D:B5:8C:DA:BE:1F:DB
            X509v3 Authority Key Identifier:
                keyid:26:3C:35:07:76:0C:5B:82:95:1A:30:7C:EF:93:2B:0A:4D:36:B3:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/x8mL-vw9v4JqanUK5g21jNq-H9s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.232.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:be:2a:aa:0d:01:72:7a:8e:ee:dd:ba:06:b2:16:6f:c3:9a:
         71:b2:40:10:f3:c9:52:88:77:e7:27:df:45:e5:2b:46:71:d3:
         22:94:ca:af:41:62:eb:53:3b:da:99:4e:b1:8b:b1:72:73:0b:
         b6:4d:86:60:a2:67:5f:76:d1:66:38:59:4f:8f:55:19:47:b4:
         77:12:2d:f7:7b:fd:c0:22:ab:21:20:e1:74:89:b6:a8:68:7f:
         ec:7b:ad:4a:36:87:04:b2:18:3c:8d:96:65:cc:41:39:32:ac:
         1b:d0:19:d5:2c:76:cb:4c:7c:82:fc:62:7e:11:d9:85:d0:22:
         85:f0:c3:ff:c5:b8:02:17:db:ae:b2:a4:0a:cd:62:23:50:35:
         5e:77:d3:eb:02:cb:5c:b1:ee:18:75:c6:a9:a2:a1:df:75:14:
         9a:bc:b1:e6:08:b1:53:77:4a:ca:82:5a:6e:1b:0f:a7:70:6e:
         db:eb:4f:19:ca:c7:f3:c8:ba:1c:ec:61:15:6c:28:ce:51:20:
         c7:c0:4c:d7:6e:91:6f:9a:b4:90:ba:49:9b:26:ee:c6:39:ac:
         de:93:4e:60:83:57:b1:55:21:92:3f:29:5a:22:ae:08:4d:ad:
         9b:c6:dd:b4:e9:48:fa:5a:cf:73:27:e1:ed:2a:59:0f:47:fd:
         dc:be:92:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6Wm7zCZ+gr9I0RbWeSZ0wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2M2MzNTA3NzYwYzViODI5NTFhMzA3Y2VmOTMyYjBhNGQz
NmIzNjMwHhcNMjYwMTAxMTYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2M5OGJmYWZjM2RiZjgyNmE2YTc1MGFlNjBkYjU4Y2RhYmUxZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5NizOeifviFWS0Mlsp5TYdRka1+
GcCjhFFNgT5kDQq/bQRrWixomWzFn0h43pmbYLmAectv8fL3Obs8+66BDVdqtMs3
uulSzZO/V1MqHQpyLtWxO+ykTBHFQtkYDz4YYjKJC8kfzFqPRWUDoIqRO0BD2wIc
gRck/vqFfTURjBZO5CtOxIgGB9jdCJombnCxWt1JwcaaaBhXHIvFnC6vTvF53ZRb
+gc8Ex2b9MgAHMUULOx9rK3s4wXJ0BuMiNGS1LfqRijJ+NIZ0vAv2dVqFt6tK/kR
9FC4Bm/BA+eU1WrjQt+TYA9oyJOkMDcO5IcPvwXkLGsCuayewOWsyPoKRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMfJi/r8Pb+Camp1CuYNtYzavh/bMB8GA1UdIwQY
MBaAFCY8NQd2DFuClRowfO+TKwpNNrNjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmp3MUIzWU1XNEtWR2pCODc1TXJDazAyczJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wMWU2MTMtOWJiNi00NGQwLThlNzUt
OTBiNGYyZDRjNTU2LzEveDhtTC12dzl2NEpxYW5VSzVnMjFqTnEtSDlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8wMWU2MTMtOWJiNi00NGQwLThlNzUtOTBiNGYyZDRjNTU2
LzEvSmp3MUIzWU1XNEtWR2pCODc1TXJDazAyczJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFTehAMA0G
CSqGSIb3DQEBCwUAA4IBAQBxviqqDQFyeo7u3boGshZvw5pxskAQ88lSiHfnJ99F
5StGcdMilMqvQWLrUzvamU6xi7Fycwu2TYZgomdfdtFmOFlPj1UZR7R3Ei33e/3A
IqshIOF0ibaoaH/se61KNocEshg8jZZlzEE5Mqwb0BnVLHbLTHyC/GJ+EdmF0CKF
8MP/xbgCF9uusqQKzWIjUDVed9PrAstcse4YdcapoqHfdRSavLHmCLFTd0rKglpu
Gw+ncG7b608ZysfzyLoc7GEVbCjOUSDHwEzXbpFvmrSQukmbJu7GOazek05gg1ex
VSGSPylaIq4ITa2bxt206Uj6Ws9zJ+HtKlkPR/3cvpLX
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:01:38 2026 by rpki-client