This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/2akTrGF3gqANKKML3HIhytEo_dg.roa
File:                     2akTrGF3gqANKKML3HIhytEo_dg.roa (raw, json)
Hash identifier:          q/uKFDrVFQVvPTMcsWbe7YDjcxRrP3uh9LZq/Hq1LfY=
Subject key identifier:   D9:A9:13:AC:61:77:82:A0:0D:28:A3:0B:DC:72:21:CA:D1:28:FD:D8
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       019B7AC848324C2238ACA4BD7D841D62DAE8
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/2akTrGF3gqANKKML3HIhytEo_dg.roa
Signing time:             Thu 01 Jan 2026 18:18:24 +0000
ROA not before:           Thu 01 Jan 2026 18:18:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8075
IP address blocks:        77.111.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:48:32:4c:22:38:ac:a4:bd:7d:84:1d:62:da:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Jan  1 18:18:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d9a913ac617782a00d28a30bdc7221cad128fdd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:35:ad:34:4e:1f:3a:ec:99:b3:51:68:0c:5d:
                    1b:92:3e:77:ac:10:c1:66:d7:fa:00:3b:61:36:72:
                    cf:83:2c:99:05:ab:bf:99:83:2e:db:c5:b2:b2:4d:
                    8c:17:16:79:eb:b4:c0:25:26:aa:17:2f:ca:6c:7c:
                    8d:39:27:f2:52:04:8a:f0:97:92:d2:fc:30:dc:5f:
                    22:6a:dd:bb:94:93:26:22:f8:67:14:b2:a2:e9:e7:
                    b3:2f:52:3b:8b:f4:9d:d9:42:a5:4a:36:11:4d:a8:
                    dd:65:6c:02:dc:36:47:a8:27:3e:58:04:c3:e9:62:
                    66:6d:4f:7f:5e:f9:bd:e4:45:4d:78:15:5b:0a:f9:
                    72:0a:4d:7d:bf:56:0d:4c:3c:71:23:1d:14:5f:5e:
                    96:ad:f0:4a:b0:52:3f:3a:76:ee:b3:40:e9:3f:7d:
                    ad:2c:dd:ad:29:91:2e:be:f0:d6:3e:1f:5c:e4:49:
                    ac:a5:ce:51:84:31:76:27:d9:c2:4a:26:ba:d8:fa:
                    30:00:53:b8:31:e2:e8:85:f2:49:35:aa:f1:1f:99:
                    fc:42:c7:b6:f3:43:22:e8:22:ac:65:d9:66:2a:99:
                    78:4d:e5:75:f2:40:01:90:0c:e6:55:34:9d:c1:a3:
                    ef:cb:73:59:83:e7:5b:48:02:f7:29:c9:9a:07:b0:
                    d9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A9:13:AC:61:77:82:A0:0D:28:A3:0B:DC:72:21:CA:D1:28:FD:D8
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/2akTrGF3gqANKKML3HIhytEo_dg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.111.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:70:8e:a0:ac:a2:21:fc:05:3e:29:f2:57:f0:7d:0d:a4:f5:
         de:a0:bf:7a:51:22:28:c4:7c:c4:09:70:a3:8f:f9:70:c3:5c:
         ae:9f:27:57:8f:0c:26:f5:a4:38:82:a4:7a:42:15:68:d7:5d:
         db:ff:44:3e:8d:b2:9e:f7:41:2a:e6:30:9c:1f:f6:ab:53:2d:
         26:2b:41:ee:ec:c2:ff:fe:52:3e:fb:80:63:76:f4:b0:60:84:
         d7:fc:89:0d:a2:78:b8:a0:c3:c5:26:1a:7a:ab:71:d8:0d:aa:
         66:08:6b:85:69:9c:d9:1a:a4:50:8e:31:ad:af:b9:5b:72:a9:
         5c:58:54:54:01:7a:77:e8:59:43:50:c8:ea:1d:60:41:a4:07:
         38:4e:41:06:4c:ee:a5:de:66:5a:80:9c:d8:d7:40:01:a0:14:
         b9:03:08:f3:db:75:1b:71:03:40:66:26:e6:3e:72:9a:8d:89:
         b3:b7:37:a7:cd:11:04:8f:87:52:2a:39:5e:1b:b7:16:93:30:
         b3:45:a6:b7:d3:e3:37:ae:83:91:0a:32:64:60:cb:64:a7:6c:
         0e:d5:c8:ed:12:15:be:3a:5b:fa:cd:f6:63:b2:17:52:ce:38:
         70:f6:de:7d:1d:90:4d:1d:68:ea:47:e8:36:f8:c2:ec:5d:c0:
         62:53:4b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 16:38:02 2026 by rpki-client