This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/bP0DL2QAJVKBhisPOEKSCrb5P7I.roa
File:                     bP0DL2QAJVKBhisPOEKSCrb5P7I.roa (raw, json)
Hash identifier:          SSq+LObEvTskeEChP41dHP/d10Dn6Nt47PhXiubra4Q=
Subject key identifier:   6C:FD:03:2F:64:00:25:52:81:86:2B:0F:38:42:92:0A:B6:F9:3F:B2
Certificate issuer:       /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial:       019B7CEDCC49617CBD6745D693B73B666F94
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/bP0DL2QAJVKBhisPOEKSCrb5P7I.roa
Signing time:             Fri 02 Jan 2026 04:18:37 +0000
ROA not before:           Fri 02 Jan 2026 04:18:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61317
IP address blocks:        77.246.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 04:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:cc:49:61:7c:bd:67:45:d6:93:b7:3b:66:6f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
        Validity
            Not Before: Jan  2 04:18:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6cfd032f6400255281862b0f3842920ab6f93fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bd:a3:d4:35:d6:64:66:7c:f4:12:da:81:2a:
                    c6:64:d6:be:d5:0e:fa:2a:11:0a:e5:34:df:96:fc:
                    94:5c:0a:89:bc:d9:b5:7c:47:4e:a5:38:73:cd:c4:
                    b3:b6:89:0c:5c:4d:ee:dc:05:57:1c:81:a7:e1:e2:
                    06:4a:6e:c5:68:c4:8c:a1:b3:a6:b8:3c:c3:2f:34:
                    4c:75:cb:66:0d:6e:59:99:19:1f:f8:5e:b7:fe:0e:
                    00:d3:c0:d9:6c:97:d7:80:91:be:8a:98:55:a1:bc:
                    76:a5:fd:2d:9c:f6:28:3e:2f:3d:53:49:08:28:f7:
                    18:71:f4:8f:3b:c7:2d:4a:f4:b7:5d:c5:c1:f4:13:
                    39:76:0d:e9:df:a0:68:fc:a6:d9:09:30:2d:7b:fb:
                    fa:6c:56:3a:ff:31:4b:64:09:aa:66:ba:10:55:5b:
                    5b:6b:2f:3d:8d:f5:3d:c1:bc:43:e1:bc:ce:89:81:
                    8a:c3:54:09:d8:d7:91:b9:b9:7a:a5:94:94:cc:07:
                    c0:49:31:33:b8:db:d4:c4:de:18:35:66:d6:81:4b:
                    90:65:93:39:96:d9:80:dd:74:93:d5:b6:ca:5f:fb:
                    ae:fb:0c:14:97:44:13:97:88:3d:22:67:9b:56:8c:
                    64:49:92:7b:96:32:7b:13:9b:d5:ed:37:d7:9c:a5:
                    c3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FD:03:2F:64:00:25:52:81:86:2B:0F:38:42:92:0A:B6:F9:3F:B2
            X509v3 Authority Key Identifier:
                keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/bP0DL2QAJVKBhisPOEKSCrb5P7I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.246.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:6e:a0:65:4e:65:e6:31:8d:bc:6d:d9:8e:fd:8b:d4:df:38:
         6f:34:42:12:92:8b:f1:ca:f2:cd:75:71:88:04:14:ff:34:1f:
         bb:3c:52:c9:6d:78:54:8f:df:29:c3:bb:13:0d:cb:b7:2d:9a:
         57:b8:e1:4a:6d:31:95:83:52:48:42:78:50:8d:5a:59:11:22:
         32:62:53:bf:e3:20:47:d0:7d:0f:df:f4:94:b2:5a:bc:bf:47:
         ff:cf:b0:52:42:4a:37:86:1c:a4:08:73:de:1d:26:5c:c6:b0:
         58:fd:f1:ca:43:56:9b:7b:64:dc:63:62:46:6a:c3:97:b2:c7:
         f8:5b:53:f1:b5:87:88:90:6e:cd:ff:4c:33:05:b7:cf:35:97:
         cf:07:47:a7:b9:e6:06:e4:b2:7d:04:2b:6d:eb:5b:de:00:70:
         a9:f6:ec:49:55:ec:ff:c3:e1:1f:0b:af:cd:81:b5:58:f0:2b:
         0d:28:12:35:ce:da:d5:b9:ce:c9:a7:d4:98:b7:c6:7e:b8:02:
         e6:62:cb:09:63:c6:21:25:78:ec:31:52:69:12:c3:16:fe:8d:
         ce:4d:03:69:e1:86:19:a6:51:8d:58:bf:9d:58:ff:c7:88:46:
         e3:b1:c7:7e:47:4b:4a:17:8a:29:49:23:34:ab:0a:e2:40:5f:
         52:e8:e8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 12:59:40 2026 by rpki-client