This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/8m2UYDC0MaBZBGwUJ2rsbAVfUJg.roa
File:                     8m2UYDC0MaBZBGwUJ2rsbAVfUJg.roa (raw, json)
Hash identifier:          rYflu5YuL6kgWBHgix+zaIxfznodKitprCbdUqw2zxU=
Subject key identifier:   F2:6D:94:60:30:B4:31:A0:59:04:6C:14:27:6A:EC:6C:05:5F:50:98
Certificate issuer:       /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial:       019B7BA49200352C9F47043388EB92B0EF39
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/8m2UYDC0MaBZBGwUJ2rsbAVfUJg.roa
Signing time:             Thu 01 Jan 2026 22:19:01 +0000
ROA not before:           Thu 01 Jan 2026 22:19:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43991
IP address blocks:        77.243.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:92:00:35:2c:9f:47:04:33:88:eb:92:b0:ef:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
        Validity
            Not Before: Jan  1 22:19:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f26d946030b431a059046c14276aec6c055f5098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2d:af:2c:27:97:5c:40:de:1f:42:a0:49:b7:
                    f8:ad:36:1d:01:4f:f3:57:82:db:3a:8b:9f:84:62:
                    31:1c:87:ae:d6:d3:93:90:a9:8b:19:87:13:60:12:
                    7e:47:b6:9a:b1:62:17:9d:8a:b1:f5:bf:8b:b0:a3:
                    0e:95:c5:e1:72:e7:ad:b6:0b:61:fd:af:ad:3e:df:
                    ac:6f:b8:97:e5:86:5a:39:b9:6c:35:c9:aa:26:3a:
                    1d:11:b0:ec:32:3d:23:2b:35:39:61:0a:2d:22:86:
                    b7:ca:a2:b4:dc:20:66:34:28:07:94:f3:91:76:ce:
                    db:58:f8:9b:b2:d5:e9:11:da:4a:99:72:de:22:cc:
                    1b:d1:bb:48:9a:a3:d1:79:69:b3:18:71:3f:91:4e:
                    18:1b:dc:5f:7d:07:1e:fb:ef:b8:88:6c:e6:3e:d4:
                    39:89:95:62:01:b1:8c:5d:77:da:da:07:e8:10:a8:
                    6b:15:38:75:ff:49:93:78:c0:36:e5:a4:59:f0:f1:
                    db:f0:d6:d7:b8:0d:41:13:a4:9c:6a:d9:16:8b:f4:
                    44:e1:3f:0c:9f:2a:1f:e3:1b:da:f3:75:28:d1:fd:
                    63:91:4b:72:9c:a5:cc:e4:21:e7:c9:10:8b:35:df:
                    4e:b4:33:d7:24:38:9e:d8:58:67:94:19:b6:54:f3:
                    d8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6D:94:60:30:B4:31:A0:59:04:6C:14:27:6A:EC:6C:05:5F:50:98
            X509v3 Authority Key Identifier:
                keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/8m2UYDC0MaBZBGwUJ2rsbAVfUJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.243.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:7c:75:3d:3b:ad:59:f9:77:00:90:2b:4f:aa:3b:47:cf:e3:
         c7:d7:69:80:e6:31:0c:ee:98:ab:7a:fb:8d:77:22:52:96:a6:
         7d:72:1c:db:1a:90:24:27:9c:6e:02:8f:c7:9b:c2:45:14:31:
         b8:9c:f6:45:b8:f9:e9:ab:4c:6d:29:f0:81:49:72:48:b3:48:
         2c:6e:b3:87:12:f0:7a:cc:26:d0:7d:3d:66:bd:f1:ec:4d:ba:
         d0:e6:79:ec:f5:85:95:6e:b1:c5:5e:6a:f4:23:ba:87:bd:a6:
         c0:15:7d:c7:86:9b:0b:cb:37:4c:79:8e:c2:6e:8e:26:86:c8:
         13:7c:ee:8f:4d:a7:77:a7:83:cf:8c:33:fd:cf:0b:32:2d:3d:
         4a:35:37:d4:87:23:5f:f4:30:33:86:8e:d8:6a:0e:7d:ed:c0:
         c6:e7:c9:a6:3b:96:9f:69:4d:28:67:e9:42:3d:84:f1:dc:8b:
         02:38:b9:c6:30:3b:ef:64:35:18:74:ed:8c:86:d8:da:91:05:
         de:58:45:a6:24:60:6f:40:39:ca:19:a8:c0:d6:9b:ca:1a:a1:
         e1:0a:02:ad:c4:c9:43:04:ce:08:db:19:6d:fa:e2:60:85:fc:
         8e:ab:c8:36:ce:a6:11:4a:13:4d:9d:3e:3f:af:49:f2:79:cb:
         ba:1e:30:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:46:09 2026 by rpki-client