This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/51RV5bLUK5swpjii_ClMr0Z0LK4.roa
File:                     51RV5bLUK5swpjii_ClMr0Z0LK4.roa (raw, json)
Hash identifier:          eaEFcr3Fzwqgey9xkzHTc526Wfs17vHkTkKlWZDr6V4=
Subject key identifier:   E7:54:55:E5:B2:D4:2B:9B:30:A6:38:A2:FC:29:4C:AF:46:74:2C:AE
Certificate issuer:       /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial:       019B7CEDCB9B984C9630FFE4AA0F6563DA46
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/51RV5bLUK5swpjii_ClMr0Z0LK4.roa
Signing time:             Fri 02 Jan 2026 04:18:37 +0000
ROA not before:           Fri 02 Jan 2026 04:18:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60447
IP address blocks:        77.246.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:cb:9b:98:4c:96:30:ff:e4:aa:0f:65:63:da:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
        Validity
            Not Before: Jan  2 04:18:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e75455e5b2d42b9b30a638a2fc294caf46742cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2a:34:35:67:2e:4c:36:21:1f:6d:dd:53:ad:
                    a2:d0:ef:4a:be:b2:b1:97:74:2c:87:1c:48:90:e0:
                    fc:3d:35:48:d6:f0:ad:98:e4:df:8c:dc:e8:37:ee:
                    38:f5:20:1b:87:a3:49:3b:06:e2:a0:45:b9:b8:9f:
                    92:1a:ab:c2:83:0c:4c:07:47:bd:ac:ea:2b:11:e6:
                    d4:62:6b:2a:a3:e2:4b:8f:18:c8:74:d3:0a:ee:03:
                    ac:d2:1a:bc:98:77:2d:93:45:45:44:57:51:da:68:
                    de:ec:14:dc:ed:cb:45:17:7d:47:60:5b:a8:63:89:
                    67:9c:c6:71:3d:37:5c:82:a0:c9:4c:29:17:9c:ef:
                    67:4d:8e:6e:55:53:8f:21:68:e3:d1:4e:6c:0d:92:
                    f8:12:5e:64:e2:84:ac:fd:26:6b:16:7d:67:11:43:
                    72:b0:48:76:5f:5d:58:b2:11:8f:7b:3c:12:a5:b2:
                    e4:4f:09:9e:8f:67:4d:f8:b1:71:2c:e1:24:78:ad:
                    41:fa:00:48:d9:24:b6:f4:e0:d0:6d:b0:45:4a:98:
                    35:ae:ec:bc:f7:c0:00:f5:15:34:70:34:39:a0:8b:
                    be:61:05:5e:c9:83:41:1a:d8:9b:88:12:41:a5:32:
                    b7:49:12:41:1c:8d:1d:1d:f5:52:6a:69:63:36:0a:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:54:55:E5:B2:D4:2B:9B:30:A6:38:A2:FC:29:4C:AF:46:74:2C:AE
            X509v3 Authority Key Identifier:
                keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/51RV5bLUK5swpjii_ClMr0Z0LK4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.246.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:5c:4d:e9:18:1b:37:4a:7a:b8:f1:ab:7a:f2:ef:18:bb:19:
         2d:d8:62:91:7a:6c:62:00:cc:be:99:8b:6b:63:61:ed:ee:c1:
         7c:a1:db:83:77:fd:d7:9f:9f:04:7e:21:9e:7e:5f:7d:27:40:
         40:fb:6e:02:39:6a:46:28:64:27:7b:09:60:cb:bf:0b:61:6a:
         4f:46:c8:ca:fd:1d:05:8b:79:cc:d3:a7:e0:29:6c:9d:24:a0:
         49:e0:9c:ad:db:ce:8c:f3:b8:b7:2a:2e:b1:94:05:d6:35:b6:
         21:f7:72:37:cc:88:07:12:6c:79:f1:67:25:7c:d2:55:e2:11:
         ec:6b:7f:f7:d4:49:73:a1:73:09:2c:fa:87:a9:83:10:08:86:
         bb:cf:17:e3:5f:fa:48:f8:aa:12:56:8b:db:5c:e6:55:fb:c8:
         bf:f9:8c:0e:c8:41:20:e5:bc:c4:cd:80:91:64:5f:62:4c:54:
         90:01:eb:17:61:f9:a6:ed:df:67:b1:a1:f7:2f:5b:b0:a4:c9:
         64:c7:ec:17:a3:9d:44:90:83:46:99:b6:37:d2:76:22:de:60:
         0a:f4:f0:68:90:98:f8:fa:a1:5f:3b:c0:8e:ac:d6:06:a6:b9:
         ac:92:b1:89:57:ae:84:17:80:3f:44:1d:8f:02:ef:3d:27:16:
         1c:f2:73:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87cubmEyWMP/kqg9lY9pGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjYwMTAyMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzU0NTVlNWIyZDQyYjliMzBhNjM4YTJmYzI5NGNhZjQ2NzQyY2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyo0NWcuTDYhH23dU62i0O9KvrKx
l3QshxxIkOD8PTVI1vCtmOTfjNzoN+449SAbh6NJOwbioEW5uJ+SGqvCgwxMB0e9
rOorEebUYmsqo+JLjxjIdNMK7gOs0hq8mHctk0VFRFdR2mje7BTc7ctFF31HYFuo
Y4lnnMZxPTdcgqDJTCkXnO9nTY5uVVOPIWjj0U5sDZL4El5k4oSs/SZrFn1nEUNy
sEh2X11YshGPezwSpbLkTwmej2dN+LFxLOEkeK1B+gBI2SS29ODQbbBFSpg1ruy8
98AA9RU0cDQ5oIu+YQVeyYNBGtibiBJBpTK3SRJBHI0dHfVSamljNgojewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOdUVeWy1CubMKY4ovwpTK9GdCyuMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvNTFSVjViTFVLNXN3cGppaV9DbE1yMFowTEs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTfbQMA0G
CSqGSIb3DQEBCwUAA4IBAQBPXE3pGBs3Snq48at68u8Yuxkt2GKRemxiAMy+mYtr
Y2Ht7sF8oduDd/3Xn58EfiGefl99J0BA+24COWpGKGQnewlgy78LYWpPRsjK/R0F
i3nM06fgKWydJKBJ4Jyt286M87i3Ki6xlAXWNbYh93I3zIgHEmx58WclfNJV4hHs
a3/31ElzoXMJLPqHqYMQCIa7zxfjX/pI+KoSVovbXOZV+8i/+YwOyEEg5bzEzYCR
ZF9iTFSQAesXYfmm7d9nsaH3L1uwpMlkx+wXo51EkINGmbY30nYi3mAK9PBokJj4
+qFfO8COrNYGprmskrGJV66EF4A/RB2PAu89JxYc8nNI
-----END CERTIFICATE-----
Generated at Mon Jan 19 14:22:32 2026 by rpki-client