This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NosmyyOanV9STROqzO7HI6w8ZXw.roa
File:                     NosmyyOanV9STROqzO7HI6w8ZXw.roa (raw, json)
Hash identifier:          PYMPGjlX+q5LW1UkwAkG1JqbSWK7lEjljjpXQWr0ayQ=
Subject key identifier:   36:8B:26:CB:23:9A:9D:5F:52:4D:13:AA:CC:EE:C7:23:AC:3C:65:7C
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       019B7A5AEA330C60065B1B421707AF548C40
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NosmyyOanV9STROqzO7HI6w8ZXw.roa
Signing time:             Thu 01 Jan 2026 16:18:57 +0000
ROA not before:           Thu 01 Jan 2026 16:18:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     397630
IP address blocks:        77.93.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:ea:33:0c:60:06:5b:1b:42:17:07:af:54:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jan  1 16:18:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=368b26cb239a9d5f524d13aacceec723ac3c657c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e1:64:00:d0:c0:95:5f:20:78:a5:ae:85:7d:
                    24:5b:df:cb:b4:b4:e1:02:e6:5d:6c:9a:c1:ef:87:
                    a2:05:17:0c:83:cf:1b:a0:f3:a7:05:d3:fe:4f:80:
                    57:47:1d:f9:2d:35:81:a6:0a:96:e9:d1:bf:e7:45:
                    8d:3f:78:91:ac:5a:af:34:43:eb:6b:96:d0:f8:63:
                    b6:d9:37:ec:f6:18:b5:cb:f3:99:08:2b:4e:7d:c1:
                    b8:94:80:bd:a0:c1:dc:0f:d5:1a:44:36:eb:61:38:
                    7a:f3:43:8f:be:53:c1:0c:98:54:b5:ca:e6:6e:c7:
                    f8:39:e8:5c:c0:fa:6e:89:b5:85:1d:dd:7b:2e:96:
                    f6:3f:11:ce:47:bd:00:25:da:51:38:61:5f:64:bb:
                    86:c0:97:c0:be:4b:1c:4e:3f:fb:10:9b:e9:bb:0f:
                    40:1c:fa:69:f2:e6:20:82:7c:9e:31:23:5b:b2:20:
                    7a:68:ca:d0:fc:71:8d:61:e1:1e:03:f1:4e:b0:9b:
                    f5:9e:ef:6b:4e:d0:0b:73:72:0a:64:96:f0:9f:d2:
                    b7:12:2b:25:80:a9:ef:5b:b2:a0:85:86:71:e2:ad:
                    26:a6:94:27:5b:86:31:c0:0a:38:ab:cd:8b:8b:d5:
                    05:8c:c8:54:8c:d6:ea:03:13:df:cd:6c:cc:1d:32:
                    f0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8B:26:CB:23:9A:9D:5F:52:4D:13:AA:CC:EE:C7:23:AC:3C:65:7C
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NosmyyOanV9STROqzO7HI6w8ZXw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.93.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:23:08:ce:8a:e4:b6:60:b1:22:90:0b:8a:11:24:1c:c4:db:
         5c:a5:b9:75:2d:5a:4d:56:57:42:bc:f5:7b:12:63:56:a5:4b:
         26:93:be:3c:ff:d1:ed:07:06:ed:cd:99:34:2c:fe:cb:f7:62:
         f1:0f:38:69:72:fe:89:12:56:f7:b4:7a:f0:4b:61:5b:5b:f6:
         31:46:f5:6a:ba:43:28:a4:bb:37:1f:1b:90:4c:05:d0:f4:3d:
         e9:f8:51:d9:bd:97:d0:c6:98:3d:72:10:a9:4c:e8:51:d1:f0:
         c9:5d:04:7e:a8:40:97:15:98:c2:a8:9a:d3:47:a4:48:d0:c0:
         ba:46:9f:6f:6f:09:e4:08:97:fa:2e:e5:24:38:34:6c:61:5f:
         ce:5b:6f:3e:ce:8c:16:60:b2:a1:e8:67:c2:e2:dd:aa:c1:e0:
         5f:f5:b1:94:b1:70:18:f7:d8:30:6e:f8:99:02:64:2d:6a:76:
         94:eb:67:4a:e6:c3:64:71:08:98:83:49:a7:4a:cb:01:12:6c:
         b8:72:c6:18:78:04:0f:94:ae:96:fe:13:c3:14:bd:89:1c:ac:
         e1:26:6c:c3:e8:4f:67:be:4c:af:32:7a:e2:ba:e2:a0:6b:1f:
         06:4f:d9:f4:de:12:fe:41:0c:e4:80:77:9b:55:35:70:48:a4:
         b8:65:ae:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 22:33:28 2026 by rpki-client