This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/gzoeZ2AgO1ey7ZNcukJz3zjT1LY.roa
File:                     gzoeZ2AgO1ey7ZNcukJz3zjT1LY.roa (raw, json)
Hash identifier:          argro5YsxjIunpkmHi4BZRWmPpTrNV/wF+jpyXPN3DM=
Subject key identifier:   83:3A:1E:67:60:20:3B:57:B2:ED:93:5C:BA:42:73:DF:38:D3:D4:B6
Certificate issuer:       /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Certificate serial:       019C1F0E34B4336C2EC381DA446C98F98055
Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/gzoeZ2AgO1ey7ZNcukJz3zjT1LY.roa
Signing time:             Mon 02 Feb 2026 15:52:30 +0000
ROA not before:           Mon 02 Feb 2026 15:52:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     13335
IP address blocks:        77.73.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1f:0e:34:b4:33:6c:2e:c3:81:da:44:6c:98:f9:80:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
        Validity
            Not Before: Feb  2 15:52:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=833a1e6760203b57b2ed935cba4273df38d3d4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b7:94:be:90:3f:80:78:c9:02:7f:02:b1:c5:
                    9e:7a:55:e5:25:72:37:4a:c2:fb:a8:ae:1c:f3:97:
                    2b:f4:ce:45:66:c4:8a:00:8a:ab:3e:fd:d8:47:33:
                    cc:af:65:6a:ae:1a:9f:c6:b9:ab:57:65:be:9b:d7:
                    ac:fe:c7:de:a2:7b:ca:27:51:72:9c:5a:94:33:ab:
                    b2:63:f2:3d:3f:87:30:fd:69:c7:b4:eb:5f:6d:51:
                    17:af:ce:1d:7f:39:a8:74:e9:ea:a8:83:c7:98:86:
                    fb:33:9b:85:29:f7:84:b9:3e:86:e0:19:a6:eb:f0:
                    78:8d:e1:5e:90:c8:f4:a1:8d:75:d9:1c:71:10:f3:
                    13:b5:8e:b6:14:8f:91:5b:c9:b2:cd:2f:94:68:af:
                    bc:7d:1e:7a:0f:0b:ca:e0:da:a2:32:40:1c:88:9e:
                    f3:b7:e7:45:74:3a:fc:29:f5:e1:19:5f:70:2e:c7:
                    9d:39:58:f1:2e:ac:c9:3b:37:7e:ca:b1:9a:86:20:
                    00:99:28:f1:a7:aa:65:29:a0:26:56:46:0b:de:7b:
                    6f:d6:c2:17:b2:db:f2:9c:f6:0c:2b:e8:0b:12:16:
                    3b:62:69:c0:59:0f:c1:a1:7e:38:4e:c2:4e:3c:e8:
                    9d:68:08:88:13:55:b7:44:69:9b:d1:79:ce:e9:58:
                    f6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3A:1E:67:60:20:3B:57:B2:ED:93:5C:BA:42:73:DF:38:D3:D4:B6
            X509v3 Authority Key Identifier:
                keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/gzoeZ2AgO1ey7ZNcukJz3zjT1LY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.73.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:f8:e8:bc:ee:05:d4:9a:5f:87:d2:49:82:25:3b:3c:dc:a4:
         73:f4:9d:d4:3e:a7:e1:f9:a8:f3:1c:61:a6:54:d9:37:93:c3:
         23:18:ee:22:b5:08:c9:67:15:35:f3:43:66:f9:d2:04:49:d8:
         54:ed:e1:c6:3d:17:fd:18:9a:7d:b9:15:ea:2d:3b:9c:e2:ed:
         80:9d:6d:25:09:6a:bf:6f:cb:f9:b7:54:10:bd:86:d3:64:db:
         34:0d:3b:fb:42:a9:2b:a6:63:87:66:3b:e0:d8:c7:5e:6f:94:
         2a:6f:88:cb:15:b6:7f:24:9c:8c:b1:cb:fb:89:8c:77:34:b7:
         10:c1:f0:8a:e8:3e:d6:b0:99:38:52:38:6e:34:6f:36:97:ff:
         3d:69:51:da:e8:67:a1:6d:5f:1e:c1:05:7f:d7:13:ba:cd:b7:
         87:99:7f:4b:8c:79:be:22:7d:c7:16:a6:3d:19:ab:a3:66:68:
         12:3a:87:5b:87:fd:db:9b:d5:d8:44:67:05:38:0b:6e:e3:5b:
         fd:b3:fd:4f:cd:4b:10:30:55:a2:a3:b1:bc:90:f4:61:2b:f2:
         84:41:25:15:34:96:2b:34:53:0d:03:9e:7f:ee:31:5e:a5:0e:
         a1:e1:0f:ab:d1:0f:35:c2:5c:6c:fa:db:fd:6e:b4:47:16:3b:
         b2:f0:de:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:27:16 2026 by rpki-client