This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/C0r-cY3PZ8w2ErqDHFMpZmmxO9Q.roa
File:                     C0r-cY3PZ8w2ErqDHFMpZmmxO9Q.roa (raw, json)
Hash identifier:          0fzepPCr8VSYTdzkU0rJBG/IAaYZvMnWILQEBrYBeOs=
Subject key identifier:   0B:4A:FE:71:8D:CF:67:CC:36:12:BA:83:1C:53:29:66:69:B1:3B:D4
Certificate issuer:       /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial:       019B79ED527E9BB4736BB1D3B4B346B4C8ED
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/C0r-cY3PZ8w2ErqDHFMpZmmxO9Q.roa
Signing time:             Thu 01 Jan 2026 14:19:14 +0000
ROA not before:           Thu 01 Jan 2026 14:19:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28753
IP address blocks:        77.223.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 09:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:52:7e:9b:b4:73:6b:b1:d3:b4:b3:46:b4:c8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
        Validity
            Not Before: Jan  1 14:19:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0b4afe718dcf67cc3612ba831c53296669b13bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d5:81:f7:2c:1b:37:f7:3a:69:3b:08:f6:06:
                    1e:e2:4a:64:48:71:dc:c2:d7:1d:ae:40:9f:f9:f4:
                    40:5b:43:d8:27:9a:92:0a:3c:38:42:72:01:33:f6:
                    e9:86:e9:04:af:1a:67:08:fa:44:e2:41:f3:0c:9e:
                    80:56:d1:6e:44:19:fe:23:6a:54:25:c2:d4:52:fb:
                    56:aa:ce:ff:1c:e7:84:04:59:ec:c8:db:f0:c0:89:
                    1a:d5:32:9c:24:a4:05:91:91:ed:63:65:94:87:20:
                    1b:27:f6:34:b1:64:61:fc:07:03:d2:14:17:a3:45:
                    58:6f:75:c4:bd:1d:c8:b0:e2:93:87:7b:0a:b5:eb:
                    2e:b7:d6:92:06:3b:dc:36:3a:18:c1:c1:b2:42:b4:
                    0d:ae:89:1a:c2:a2:e0:e4:a6:13:99:1f:6f:0b:3d:
                    bb:3e:70:f9:b4:ac:b3:c8:94:1d:8f:46:54:3c:0f:
                    d6:3f:24:b0:4d:62:2f:d4:3f:57:dc:98:51:21:f1:
                    c0:37:c1:1d:8a:57:8b:4f:8b:9f:66:80:f2:b9:2a:
                    18:dd:3b:2a:a2:3a:84:86:f7:2f:0d:3e:b1:37:b0:
                    69:82:30:1f:b8:9a:97:12:f8:8a:85:7b:f0:b2:bf:
                    e9:a9:4d:30:fd:6d:7e:b8:0d:20:12:b8:1f:9b:34:
                    31:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4A:FE:71:8D:CF:67:CC:36:12:BA:83:1C:53:29:66:69:B1:3B:D4
            X509v3 Authority Key Identifier:
                keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/C0r-cY3PZ8w2ErqDHFMpZmmxO9Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.223.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:e4:3d:b2:5c:ad:2e:9c:79:e0:b7:ad:ad:70:47:68:45:70:
         68:65:e0:fc:77:ae:0b:9c:93:67:3f:e3:85:d5:a2:b2:a6:24:
         31:33:4b:02:84:c3:d0:40:b6:76:5a:09:cc:fe:16:ad:fe:00:
         a4:f3:f1:26:9d:8f:26:d5:0c:42:11:5e:b6:80:f0:0e:85:09:
         84:eb:3d:93:6f:9c:0c:5a:b3:12:01:04:76:99:ff:8f:c2:5a:
         14:c3:b6:7c:89:7e:a1:f0:f7:e5:9d:35:cf:96:23:d8:22:ce:
         f8:40:25:df:f2:b6:42:30:1f:e1:09:51:26:b1:e9:e0:72:9b:
         33:f0:84:13:30:77:38:bc:4a:c6:31:dd:2a:cd:ff:cf:94:bd:
         9a:3e:a5:34:86:f5:33:d1:08:e2:80:fa:5a:30:b1:5d:03:76:
         2e:15:58:3f:e1:e2:b3:21:36:13:97:cb:7f:f4:b2:39:b2:a0:
         28:06:ed:ce:bc:09:06:8b:28:9e:97:2d:8d:80:7d:ea:41:8c:
         a7:65:57:cd:78:47:47:a1:97:ff:d1:2a:b7:d5:e5:62:c8:16:
         9c:34:7b:90:f6:51:cb:9d:84:ba:56:e0:20:e3:3f:3b:99:38:
         d8:3b:5e:95:ee:b3:aa:17:9a:8d:e8:1a:43:48:45:be:e4:45:
         05:65:37:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt57VJ+m7Rza7HTtLNGtMjtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMDJjZGMyOWZkY2EwOWU5YTBmM2Y3ZDIxMTNkYTg1YTdl
MWQ2NTQwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjRhZmU3MThkY2Y2N2NjMzYxMmJhODMxYzUzMjk2NjY5YjEzYmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydWB9ywbN/c6aTsI9gYe4kpkSHHc
wtcdrkCf+fRAW0PYJ5qSCjw4QnIBM/bphukErxpnCPpE4kHzDJ6AVtFuRBn+I2pU
JcLUUvtWqs7/HOeEBFnsyNvwwIka1TKcJKQFkZHtY2WUhyAbJ/Y0sWRh/AcD0hQX
o0VYb3XEvR3IsOKTh3sKtesut9aSBjvcNjoYwcGyQrQNrokawqLg5KYTmR9vCz27
PnD5tKyzyJQdj0ZUPA/WPySwTWIv1D9X3JhRIfHAN8EdileLT4ufZoDyuSoY3Tsq
ojqEhvcvDT6xN7BpgjAfuJqXEviKhXvwsr/pqU0w/W1+uA0gErgfmzQxGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAtK/nGNz2fMNhK6gxxTKWZpsTvUMB8GA1UdIwQY
MBaAFHMCzcKf3KCemg8/fSET2oWn4dZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3dMTndwX2NvSjZhRHo5OUlSUGFoYWZoMWxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83NzIxN2QtODE0Yi00ODZhLThlZjIt
ZmUwMzMzZWQwMDVmLzEvQzByLWNZM1BaOHcyRXJxREhGTXBabW14TzlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83NzIxN2QtODE0Yi00ODZhLThlZjItZmUwMzMzZWQwMDVm
LzEvY3dMTndwX2NvSjZhRHo5OUlSUGFoYWZoMWxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTd+QMA0G
CSqGSIb3DQEBCwUAA4IBAQBr5D2yXK0unHngt62tcEdoRXBoZeD8d64LnJNnP+OF
1aKypiQxM0sChMPQQLZ2WgnM/hat/gCk8/EmnY8m1QxCEV62gPAOhQmE6z2Tb5wM
WrMSAQR2mf+PwloUw7Z8iX6h8PflnTXPliPYIs74QCXf8rZCMB/hCVEmsengcpsz
8IQTMHc4vErGMd0qzf/PlL2aPqU0hvUz0QjigPpaMLFdA3YuFVg/4eKzITYTl8t/
9LI5sqAoBu3OvAkGiyiely2NgH3qQYynZVfNeEdHoZf/0Sq31eViyBacNHuQ9lHL
nYS6VuAg4z87mTjYO16V7rOqF5qN6BpDSEW+5EUFZTeb
-----END CERTIFICATE-----
Generated at Wed Jan 7 17:18:52 2026 by rpki-client