This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/72o1zQG6O8_8WQS5xWxLLwedUHA.roa
File:                     72o1zQG6O8_8WQS5xWxLLwedUHA.roa (raw, json)
Hash identifier:          hxPUIpJCQ0HNeMfrnwSBVOj6gd6VpV7h2c++shFRmY4=
Subject key identifier:   EF:6A:35:CD:01:BA:3B:CF:FC:59:04:B9:C5:6C:4B:2F:07:9D:50:70
Certificate issuer:       /CN=772f62f7e899817441180935f42b82a39980a2dc
Certificate serial:       019BD65F32B4BBD230EE20D2CF103D92CB62
Authority key identifier: 77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/72o1zQG6O8_8WQS5xWxLLwedUHA.roa
Signing time:             Mon 19 Jan 2026 13:08:41 +0000
ROA not before:           Mon 19 Jan 2026 13:08:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204224
IP address blocks:        95.130.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d6:5f:32:b4:bb:d2:30:ee:20:d2:cf:10:3d:92:cb:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772f62f7e899817441180935f42b82a39980a2dc
        Validity
            Not Before: Jan 19 13:08:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef6a35cd01ba3bcffc5904b9c56c4b2f079d5070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:72:00:e6:6c:1e:49:77:4e:6f:50:44:0d:
                    4e:1c:a7:47:d2:f7:83:7a:c2:a5:cb:4f:98:e6:6f:
                    62:f3:2f:b9:b8:68:c9:d6:95:7a:f6:86:37:7f:7e:
                    63:2b:27:89:77:a3:fc:1d:e5:bb:c7:06:6b:86:d4:
                    07:98:de:ee:e4:fb:47:c6:30:4a:23:f2:cb:a0:27:
                    07:68:24:0a:ad:9a:50:9a:36:b7:88:b3:20:87:08:
                    c3:51:56:f2:46:35:2b:75:d1:59:eb:b0:90:6f:eb:
                    af:84:a7:48:bc:95:02:ba:3c:f4:04:d8:29:15:48:
                    10:77:91:3e:e3:7c:85:dc:50:bf:8e:4a:21:2a:58:
                    2f:f5:d1:4e:0b:82:ff:23:1c:2d:51:9c:90:7c:90:
                    a0:1d:ae:6d:1f:ac:6b:e9:e2:2f:3e:1f:28:88:cf:
                    aa:92:3d:e8:bc:51:e1:3f:a1:54:18:31:8e:5e:44:
                    b5:9f:f0:28:4b:21:29:e1:ab:fb:f6:e9:e6:b9:ff:
                    d4:98:7f:57:6c:de:0e:00:88:c1:01:4c:a3:c0:d0:
                    36:66:db:8f:14:c6:73:11:42:69:c4:eb:6c:e2:5f:
                    54:57:7e:7b:95:d2:14:a2:62:5f:c6:3f:ba:41:d2:
                    b6:8c:d4:1d:0d:0b:a0:74:2f:a9:ce:b8:e3:6d:94:
                    48:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6A:35:CD:01:BA:3B:CF:FC:59:04:B9:C5:6C:4B:2F:07:9D:50:70
            X509v3 Authority Key Identifier:
                keyid:77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/72o1zQG6O8_8WQS5xWxLLwedUHA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.130.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:d1:fd:d7:7d:38:0b:fc:ba:4f:81:f7:1e:15:96:e0:2a:34:
         27:d6:43:19:68:4e:0d:52:1e:41:37:8e:0f:94:a4:7f:4a:58:
         34:02:1f:ba:07:cb:43:0d:2d:57:77:c2:02:73:41:82:1b:82:
         94:ff:30:80:ce:08:d8:db:79:85:2e:a2:c3:42:7d:4b:d7:a8:
         32:3c:82:07:9c:65:2c:55:99:af:77:41:3d:a4:36:da:e8:eb:
         29:bf:e0:6b:b6:c7:70:64:3f:78:b6:8e:6a:63:cd:b9:18:20:
         92:e1:73:18:5f:c6:44:7b:69:6b:87:ce:26:6d:5a:f6:70:81:
         98:21:d1:4e:94:4b:6c:c4:18:08:ba:d5:8e:d7:89:7e:ce:67:
         21:83:92:5a:f6:63:c8:e0:6f:9c:f6:11:fc:4c:5c:9f:60:21:
         c1:b4:29:d7:7a:e9:a1:86:f6:73:97:a2:72:a1:be:2b:06:25:
         66:85:c7:2f:f9:49:81:f2:68:bf:da:2c:15:34:75:f4:6f:91:
         1f:53:5b:96:05:b6:80:fd:1e:41:84:78:1d:3e:5e:e2:af:4d:
         12:8b:59:3a:5e:b9:eb:dd:b6:c3:e9:9e:41:2c:e8:27:4a:e8:
         89:08:bb:32:a5:ec:d0:eb:5b:b5:ed:30:c9:a2:86:6e:41:6b:
         3b:50:ff:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:29:21 2026 by rpki-client