This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/5BcZMkFK4H4HzeU32Pg9Et5_SQ8.roa
File:                     5BcZMkFK4H4HzeU32Pg9Et5_SQ8.roa (raw, json)
Hash identifier:          yDr7OimE93R5A5WQDfIWvLQYnSnCYBj7r4S1yWKb1hg=
Subject key identifier:   E4:17:19:32:41:4A:E0:7E:07:CD:E5:37:D8:F8:3D:12:DE:7F:49:0F
Certificate issuer:       /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial:       019B78355C4B9910764D6167B4466A6B68F1
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/5BcZMkFK4H4HzeU32Pg9Et5_SQ8.roa
Signing time:             Thu 01 Jan 2026 06:18:41 +0000
ROA not before:           Thu 01 Jan 2026 06:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212009
IP address blocks:        45.9.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:5c:4b:99:10:76:4d:61:67:b4:46:6a:6b:68:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
        Validity
            Not Before: Jan  1 06:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e4171932414ae07e07cde537d8f83d12de7f490f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3d:e2:c6:85:69:19:13:f8:81:63:f0:bb:c2:
                    ef:e2:fe:37:ac:87:08:fc:88:b7:59:e5:d5:c7:0c:
                    83:f5:41:55:86:ca:ec:de:a2:e7:60:31:70:cf:f7:
                    6c:f8:d4:d9:2e:4a:a1:cb:11:26:83:2a:73:48:b6:
                    ab:fc:f6:f4:d3:fb:ab:80:40:92:48:f3:68:c8:7d:
                    fd:26:7b:9f:6f:e5:45:45:d1:a2:14:67:3d:bf:69:
                    b2:8a:c9:61:12:a7:3e:26:83:86:63:e3:a5:89:5c:
                    3f:33:05:2d:52:b9:f3:2c:8b:ee:f8:85:09:5c:7a:
                    34:cb:d2:9c:d9:2e:a3:4a:d9:fc:0b:17:e7:b9:33:
                    c8:9a:fd:82:f9:19:06:eb:73:bd:6b:bb:81:48:04:
                    c0:8f:8c:74:aa:f8:9e:1b:aa:bc:bf:dc:fb:0e:53:
                    3d:a2:a0:1c:16:db:5f:96:39:e5:55:a8:2f:ef:cc:
                    b0:66:ca:90:75:3a:e0:81:52:05:6c:c9:ef:63:09:
                    fd:4f:1b:54:be:e3:dd:b9:e1:e5:15:7b:14:9c:e1:
                    83:e4:45:46:83:3e:37:93:39:a2:bc:53:3f:da:38:
                    66:6c:ab:43:35:46:8b:38:a6:ad:90:6b:6c:c0:e5:
                    50:50:f6:b7:0b:69:c2:ca:c8:f1:a3:42:86:b3:e7:
                    68:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:17:19:32:41:4A:E0:7E:07:CD:E5:37:D8:F8:3D:12:DE:7F:49:0F
            X509v3 Authority Key Identifier:
                keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/5BcZMkFK4H4HzeU32Pg9Et5_SQ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.9.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:12:cc:86:ac:3a:a7:19:82:f9:4a:f1:f2:40:89:d2:32:a0:
         d5:01:40:aa:1a:32:c9:f8:21:26:d5:a4:2a:50:21:17:85:aa:
         13:62:6d:3f:a1:24:a6:4f:c2:71:5d:74:e5:6b:7e:56:38:ae:
         7b:60:9e:ff:1c:79:5c:33:2c:66:62:70:31:3b:18:5c:83:ce:
         97:d7:97:30:fc:bd:c9:39:65:41:d9:7e:59:91:a2:cc:e5:ce:
         d6:f5:fa:8c:87:81:9b:d2:b9:4c:9b:7a:7c:68:7f:b3:6d:92:
         f4:b5:24:9e:b8:df:8b:b6:94:30:3a:ff:da:33:20:99:fd:f2:
         dc:aa:48:d9:46:a4:73:06:f7:53:05:12:64:b9:75:38:0d:b9:
         85:1f:75:b8:35:8a:d9:d8:a0:01:64:24:8d:6c:d9:f9:cb:81:
         e2:ef:41:00:69:96:c3:f2:c0:ca:d1:70:7d:93:85:3b:97:b7:
         0c:df:a2:8e:12:18:cf:60:7f:6b:f1:52:a8:66:5f:01:8b:f8:
         04:f2:d2:ea:0a:5d:f3:b3:6b:15:81:0e:a1:62:e4:5d:6a:1a:
         4f:de:b9:31:27:b3:d7:8d:73:98:82:01:c6:01:78:53:fa:3e:
         37:c0:ae:51:93:a9:bc:53:c4:86:b9:14:51:af:75:64:0d:29:
         a7:a7:12:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NVxLmRB2TWFntEZqa2jxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyODRlM2QyZjFhMjFjODJiYmIzZDY2Zjc2ZjBiZDkzMzM1
MTNjOWEwHhcNMjYwMTAxMDYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDE3MTkzMjQxNGFlMDdlMDdjZGU1MzdkOGY4M2QxMmRlN2Y0OTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D3ixoVpGRP4gWPwu8Lv4v43rIcI
/Ii3WeXVxwyD9UFVhsrs3qLnYDFwz/ds+NTZLkqhyxEmgypzSLar/Pb00/urgECS
SPNoyH39Jnufb+VFRdGiFGc9v2myislhEqc+JoOGY+OliVw/MwUtUrnzLIvu+IUJ
XHo0y9Kc2S6jStn8CxfnuTPImv2C+RkG63O9a7uBSATAj4x0qvieG6q8v9z7DlM9
oqAcFttfljnlVagv78ywZsqQdTrggVIFbMnvYwn9TxtUvuPdueHlFXsUnOGD5EVG
gz43kzmivFM/2jhmbKtDNUaLOKatkGtswOVQUPa3C2nCysjxo0KGs+domQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOQXGTJBSuB+B83lN9j4PRLef0kPMB8GA1UdIwQY
MBaAFOKE49LxohyCu7PWb3bwvZMzUTyaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG9UajB2R2lISUs3czladmR2Qzlrek5SUEpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83YzliYjctMjY4YS00MzYyLWJkMDgt
OTAxYTM3M2RmMDgwLzEvNUJjWk1rRks0SDRIemVVMzJQZzlFdDVfU1E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83YzliYjctMjY4YS00MzYyLWJkMDgtOTAxYTM3M2RmMDgw
LzEvNG9UajB2R2lISUs3czladmR2Qzlrek5SUEpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQlNMA0G
CSqGSIb3DQEBCwUAA4IBAQAMEsyGrDqnGYL5SvHyQInSMqDVAUCqGjLJ+CEm1aQq
UCEXhaoTYm0/oSSmT8JxXXTla35WOK57YJ7/HHlcMyxmYnAxOxhcg86X15cw/L3J
OWVB2X5ZkaLM5c7W9fqMh4Gb0rlMm3p8aH+zbZL0tSSeuN+LtpQwOv/aMyCZ/fLc
qkjZRqRzBvdTBRJkuXU4DbmFH3W4NYrZ2KABZCSNbNn5y4Hi70EAaZbD8sDK0XB9
k4U7l7cM36KOEhjPYH9r8VKoZl8Bi/gE8tLqCl3zs2sVgQ6hYuRdahpP3rkxJ7PX
jXOYggHGAXhT+j43wK5Rk6m8U8SGuRRRr3VkDSmnpxKB
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:39:54 2026 by rpki-client