This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/73yo1hBbnpG-KqrmwMRQGWnQVsc.roa
File:                     73yo1hBbnpG-KqrmwMRQGWnQVsc.roa (raw, json)
Hash identifier:          RW+71Uv4a5/FINdlj+y0Wdwc6hifhlBtDx//ZdfSom8=
Subject key identifier:   EF:7C:A8:D6:10:5B:9E:91:BE:2A:AA:E6:C0:C4:50:19:69:D0:56:C7
Certificate issuer:       /CN=b8793a83b062c4de969042f09c1728066636fdc3
Certificate serial:       019B78A2AF19B71757AC709FC93C9452DBF3
Authority key identifier: B8:79:3A:83:B0:62:C4:DE:96:90:42:F0:9C:17:28:06:66:36:FD:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/73yo1hBbnpG-KqrmwMRQGWnQVsc.roa
Signing time:             Thu 01 Jan 2026 08:18:06 +0000
ROA not before:           Thu 01 Jan 2026 08:18:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205481
IP address blocks:        194.60.81.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:af:19:b7:17:57:ac:70:9f:c9:3c:94:52:db:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8793a83b062c4de969042f09c1728066636fdc3
        Validity
            Not Before: Jan  1 08:18:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef7ca8d6105b9e91be2aaae6c0c4501969d056c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:50:95:bf:c2:f5:ee:61:a2:9d:cb:16:0a:5a:
                    2c:53:71:5c:9a:2b:aa:ec:fe:7c:11:d7:9a:f5:7a:
                    a0:fd:e2:40:04:f6:9a:c1:b1:61:a6:c8:39:54:5e:
                    c3:a8:67:1e:f4:bd:cc:c6:c8:34:c7:6d:ea:ce:32:
                    5f:84:c9:93:6d:89:61:fe:ad:c1:8c:4f:1c:e7:4a:
                    55:5d:1c:90:e0:09:bd:ee:56:76:04:31:4d:27:4f:
                    73:b9:4c:d9:db:49:10:77:b4:2a:3d:ad:69:3a:60:
                    8e:67:c9:d4:04:ed:34:32:6c:bb:65:46:7e:c7:ef:
                    11:22:7d:1d:c5:17:bd:0f:ea:92:dc:1c:cf:30:fe:
                    e4:d6:65:28:7f:92:21:34:fa:aa:1c:c3:b3:45:c0:
                    81:48:10:1b:20:c9:31:b2:35:a7:b2:09:3c:1b:87:
                    d8:43:31:93:04:56:1e:78:01:d5:72:92:4e:9a:bf:
                    6c:3c:2e:04:24:65:bb:b4:85:f4:ae:91:f4:f9:fb:
                    5d:e7:c2:e7:48:2d:65:ae:18:68:5b:c4:55:b9:2c:
                    6b:42:08:ee:83:56:17:2c:50:95:43:e0:7d:f4:cb:
                    6d:62:ed:e9:8a:5f:4a:d6:88:d5:47:38:3a:32:73:
                    fc:2d:60:86:be:b8:9c:d9:2c:3f:19:cd:9b:c6:62:
                    03:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7C:A8:D6:10:5B:9E:91:BE:2A:AA:E6:C0:C4:50:19:69:D0:56:C7
            X509v3 Authority Key Identifier:
                keyid:B8:79:3A:83:B0:62:C4:DE:96:90:42:F0:9C:17:28:06:66:36:FD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/73yo1hBbnpG-KqrmwMRQGWnQVsc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.60.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:4e:5b:b1:28:e7:6a:4f:90:cc:a6:2b:31:60:b9:ae:63:de:
         aa:a9:e9:76:fd:1c:cc:e3:3b:66:c0:02:3c:47:82:72:4a:df:
         1e:80:c3:c1:15:65:a2:1e:68:e5:45:dd:4e:11:1b:95:f6:2a:
         87:35:03:30:eb:04:45:9b:0c:56:86:8e:f2:90:ff:43:6d:4b:
         ce:35:e9:43:f6:9a:e6:42:3d:0b:09:da:53:33:eb:b0:b1:31:
         35:3b:5c:fc:08:79:17:06:fd:ed:0f:8b:59:dc:89:1a:e9:79:
         3a:cc:fc:3c:97:96:71:51:34:88:f9:b2:43:68:2a:e5:13:b8:
         10:a1:cd:b6:68:22:8d:29:04:3f:b3:72:c2:44:6f:e7:d5:25:
         61:7e:e0:02:02:7b:5d:34:d8:ad:19:41:60:4b:b4:d4:47:a7:
         56:a8:81:4e:36:ac:20:d2:cf:39:75:00:e8:77:78:55:40:c3:
         b0:49:4b:cb:6f:95:69:36:a2:73:81:ed:80:a3:42:2f:d9:69:
         b6:0e:f8:7f:42:cf:e7:cf:5b:ba:0e:ed:85:8c:e1:37:4e:a1:
         c2:fd:5b:53:f6:02:77:aa:22:6d:c0:00:c5:ce:90:c6:47:70:
         3e:5f:7c:c5:7c:dc:86:56:67:e5:70:c7:ba:a9:22:1e:2e:04:
         3b:f8:f8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:13 2026 by rpki-client