This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/1-LAMY_lOImjoN-AfYbenj-7e2H0.roa
File:                     1-LAMY_lOImjoN-AfYbenj-7e2H0.roa (raw, json)
Hash identifier:          WA9VbhOLsnkhr99t+GxEakx8Qb9Vd9GgWAXUqScjES4=
Subject key identifier:   F8:B0:0C:63:F9:4E:22:68:E8:37:E0:1F:61:B7:A7:8F:EE:DE:D8:7D
Certificate issuer:       /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial:       019B8E1D83CB3B14EC1BE9E9A9EAD10AD387
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/1-LAMY_lOImjoN-AfYbenj-7e2H0.roa
Signing time:             Mon 05 Jan 2026 12:24:17 +0000
ROA not before:           Mon 05 Jan 2026 12:24:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42075
IP address blocks:        77.223.150.0/24 maxlen: 24
                          185.80.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:8e:1d:83:cb:3b:14:ec:1b:e9:e9:a9:ea:d1:0a:d3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
        Validity
            Not Before: Jan  5 12:24:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f8b00c63f94e2268e837e01f61b7a78feeded87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:43:e9:e5:0e:3c:bd:01:a6:42:08:a5:45:
                    81:97:1d:36:8f:ec:9a:a8:6b:3f:f7:8a:81:e4:9a:
                    ca:5e:8b:ef:02:d6:e2:f7:89:1a:49:2d:cc:ab:7b:
                    da:99:04:5a:57:70:aa:14:ff:47:e7:96:35:e1:65:
                    02:e7:d5:22:f7:31:2c:ba:79:1f:49:0e:2c:ff:33:
                    27:91:9d:47:a3:2f:82:df:bf:ac:50:38:89:a0:95:
                    bc:80:fa:20:b7:cf:3d:70:97:23:52:b0:18:bf:cb:
                    9a:c2:83:59:61:24:66:61:1e:f8:97:91:a3:48:07:
                    7e:2c:80:3e:60:0a:9a:6f:bc:67:ac:5b:df:14:43:
                    72:6d:50:34:0b:03:e0:a8:6f:4d:64:bf:cd:18:5a:
                    06:11:6c:e0:39:6f:85:0b:00:ab:9a:07:2b:93:3a:
                    82:38:27:46:88:fd:52:14:50:ee:66:81:2d:8f:43:
                    ec:31:f5:7e:2c:9b:d8:6b:f0:19:98:31:42:75:19:
                    3d:31:95:4c:1b:c0:4c:d8:58:15:b7:e5:12:a5:fb:
                    f4:5b:92:7e:6c:0c:1a:50:0c:b4:b0:d0:1a:27:03:
                    1d:bf:c4:0c:37:6b:74:69:36:6f:fb:16:90:86:7b:
                    e0:08:79:96:1b:a8:04:22:61:a7:0d:c9:cb:9d:aa:
                    75:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B0:0C:63:F9:4E:22:68:E8:37:E0:1F:61:B7:A7:8F:EE:DE:D8:7D
            X509v3 Authority Key Identifier:
                keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/1-LAMY_lOImjoN-AfYbenj-7e2H0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.223.150.0/24
                  185.80.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:78:67:5f:b5:ed:ca:fc:3d:cb:ca:c8:82:7e:1d:75:98:fb:
         04:f7:12:83:40:98:d4:d4:b8:d6:3c:ac:cd:df:cd:8f:5c:64:
         f0:90:12:3b:53:e8:d6:82:8f:ed:cf:35:b2:0f:4c:75:c3:d8:
         ad:23:c7:e5:25:a1:90:49:3a:d6:ff:f4:7e:2c:8c:92:b3:f8:
         86:78:e7:38:fc:86:8b:af:f4:db:ba:de:3f:fa:ff:40:69:0b:
         95:be:15:24:9d:c2:7a:db:16:c7:a4:ca:31:f8:a7:51:b4:93:
         a6:5f:14:67:53:79:56:15:d8:fa:85:aa:c3:70:73:ff:d6:fd:
         7b:4b:b6:c8:a5:2c:6d:04:51:27:91:6e:84:ce:04:3b:4b:66:
         0a:60:bc:cd:78:21:07:86:52:ce:5f:0f:3a:af:c3:ee:af:f6:
         be:ee:16:e7:f6:b1:a8:14:4a:cc:38:72:73:d1:51:33:48:d0:
         3e:5a:a1:94:b9:d1:51:66:18:88:94:1c:c2:2a:2a:88:10:2f:
         19:26:75:13:67:a9:b5:5b:7c:4a:5c:43:21:45:04:64:03:59:
         2a:44:aa:41:4a:e1:c4:54:5d:6d:49:93:6f:ed:11:cd:57:a9:
         e0:5e:1d:68:8d:c3:86:2c:10:4f:fc:13:9d:a2:e0:8a:d9:0e:
         10:eb:ac:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:24:37 2026 by rpki-client