This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/u_-bKVkvV1_IEBiW7GWJfYQG3Kw.roa
File:                     u_-bKVkvV1_IEBiW7GWJfYQG3Kw.roa (raw, json)
Hash identifier:          Cp1BYoJHxmwK4gyFN+04N6JzdugvrevYPjr0cqKdM10=
Subject key identifier:   BB:FF:9B:29:59:2F:57:5F:C8:10:18:96:EC:65:89:7D:84:06:DC:AC
Certificate issuer:       /CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Certificate serial:       019B7C12D7E7967EAAAADEAFCB4FB14C2D31
Authority key identifier: EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/u_-bKVkvV1_IEBiW7GWJfYQG3Kw.roa
Signing time:             Fri 02 Jan 2026 00:19:28 +0000
ROA not before:           Fri 02 Jan 2026 00:19:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     1770
IP address blocks:        195.177.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:d7:e7:96:7e:aa:aa:de:af:cb:4f:b1:4c:2d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
        Validity
            Not Before: Jan  2 00:19:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bbff9b29592f575fc8101896ec65897d8406dcac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:81:ec:0c:fa:a4:16:a2:91:fe:52:6c:54:2b:
                    ac:8e:41:e2:e3:cb:b4:20:e9:3b:de:9e:94:7a:ee:
                    34:e5:7d:a3:21:16:73:ba:8d:43:ff:27:7e:6a:a2:
                    b4:22:8b:01:06:0b:5f:7a:ec:58:2e:31:0b:7b:e0:
                    1f:6a:30:33:20:20:40:96:f5:de:db:aa:9d:a2:d7:
                    8d:70:5a:10:f1:a8:5c:3e:28:af:dd:03:46:ac:4e:
                    91:34:42:ef:07:f9:a6:4a:5f:c1:a9:1c:b0:b6:66:
                    11:65:a7:1f:65:84:a3:b1:73:4a:8f:7c:47:1f:12:
                    76:aa:5c:09:11:8e:f6:5d:7c:e9:5e:78:99:75:53:
                    71:d7:17:f4:28:e5:61:1f:f5:68:97:41:81:03:23:
                    ba:bd:c0:f0:eb:81:3f:a5:11:4c:b0:64:3e:7d:ff:
                    b5:dd:38:bd:c5:85:12:ad:79:56:f1:54:51:2d:fb:
                    6d:11:4f:d4:0f:70:f2:68:88:91:46:24:c4:e2:9e:
                    5f:3a:b1:02:65:31:2f:0c:b8:50:f3:db:6a:97:42:
                    f5:e8:77:10:96:1b:b9:ab:75:e0:7f:27:6e:05:dc:
                    1c:fa:ff:1f:00:b1:de:2c:0c:37:bf:37:e6:32:5a:
                    4b:93:da:c2:13:b7:75:ce:8b:03:90:96:9b:00:62:
                    74:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FF:9B:29:59:2F:57:5F:C8:10:18:96:EC:65:89:7D:84:06:DC:AC
            X509v3 Authority Key Identifier:
                keyid:EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/u_-bKVkvV1_IEBiW7GWJfYQG3Kw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.177.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:03:ac:73:b5:8a:9f:77:a1:95:ff:88:c7:59:be:7e:50:8a:
         20:57:d1:4d:54:24:4c:5e:3f:0b:d3:9b:82:e8:14:1b:39:3e:
         fe:60:6b:74:dc:e9:7b:10:fc:a3:8e:cb:5c:e3:6e:85:37:7a:
         67:41:7a:ac:95:d8:24:ad:bc:24:ec:f6:e0:44:66:cd:42:c6:
         b2:75:dd:6c:79:6b:ba:18:90:06:bf:12:69:2a:3a:ff:1b:d8:
         bd:2b:c6:7e:21:c3:55:92:27:f0:d5:74:d3:30:f5:b6:8a:e1:
         6b:78:0c:e6:9f:29:8c:5b:cd:39:4a:72:d9:bc:f6:56:5e:ae:
         f3:95:d8:50:db:56:fd:77:4e:fa:9a:3a:eb:e5:5d:70:ad:ac:
         96:4e:f5:63:c8:8b:91:4a:b0:c2:a4:9e:08:46:58:71:74:9c:
         0d:29:75:da:f0:21:21:4d:93:49:58:5d:f4:50:bb:f5:4d:9d:
         dd:83:43:35:f1:a4:46:59:b6:14:65:a7:54:f6:cf:14:b8:a9:
         27:ce:88:2d:04:54:eb:49:78:c7:98:d8:17:09:84:0a:b6:30:
         1d:dd:62:a7:45:91:e4:7c:11:1d:cc:95:3b:54:fb:c3:f4:a7:
         30:98:ae:fc:1d:72:0a:86:34:48:ee:9c:f2:31:0d:8b:d4:de:
         8c:8a:eb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:27:42 2026 by rpki-client