This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/IOJ_IuxrPhU7ERFs81G1nbxR8to.roa
File:                     IOJ_IuxrPhU7ERFs81G1nbxR8to.roa (raw, json)
Hash identifier:          8D5brBAEHZ/yOCBGlmqvRZETRlUwEQyzFztv6q9hPDM=
Subject key identifier:   20:E2:7F:22:EC:6B:3E:15:3B:11:11:6C:F3:51:B5:9D:BC:51:F2:DA
Certificate issuer:       /CN=79646b38c3d87d33145b634b4e1dcc2145f6416c
Certificate serial:       019B7D5AE3591BEA81A067CEF765CDD7969A
Authority key identifier: 79:64:6B:38:C3:D8:7D:33:14:5B:63:4B:4E:1D:CC:21:45:F6:41:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/IOJ_IuxrPhU7ERFs81G1nbxR8to.roa
Signing time:             Fri 02 Jan 2026 06:17:46 +0000
ROA not before:           Fri 02 Jan 2026 06:17:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42672
IP address blocks:        95.182.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5a:e3:59:1b:ea:81:a0:67:ce:f7:65:cd:d7:96:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79646b38c3d87d33145b634b4e1dcc2145f6416c
        Validity
            Not Before: Jan  2 06:17:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=20e27f22ec6b3e153b11116cf351b59dbc51f2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:67:ad:3c:74:91:bf:d5:8e:12:20:76:50:
                    2d:81:cd:8c:6e:e4:95:95:df:60:61:d8:f9:28:18:
                    4e:ab:13:05:3b:b8:2e:2d:bf:a1:61:a5:f5:14:3c:
                    b2:fc:ef:2e:35:e3:d4:a0:ff:20:75:3e:a8:6e:3b:
                    a5:f4:4c:83:98:49:d0:31:74:c8:7c:d8:d3:a6:22:
                    ff:5a:ba:59:17:1a:fa:37:e9:f9:65:d2:32:d6:3c:
                    8e:fc:2c:03:24:1f:c4:46:91:f7:3e:89:8d:4c:70:
                    01:e9:27:05:ad:53:30:6c:14:29:89:64:73:6a:68:
                    84:1d:3c:fa:2d:b8:76:f4:01:c2:1d:72:39:6a:ee:
                    05:fd:a3:9c:6f:db:31:ec:c8:2e:43:61:d5:38:c2:
                    bc:04:e4:35:2e:87:7b:60:e8:34:76:0e:f8:78:53:
                    d8:c2:a8:33:75:d1:e9:a2:1d:66:7f:17:46:8c:62:
                    32:94:4e:71:30:71:47:d5:59:29:33:f3:24:2b:3b:
                    65:c4:96:bf:a2:61:1d:f3:10:46:8c:aa:48:9f:d6:
                    04:ca:9a:fc:98:55:3d:60:2a:17:1e:2b:7d:7d:2f:
                    2a:00:e5:b5:ea:2f:d4:3a:70:8e:a0:c1:55:fc:57:
                    d0:b2:ce:5e:f5:1f:40:d8:3a:b4:d5:e8:18:d7:17:
                    bb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E2:7F:22:EC:6B:3E:15:3B:11:11:6C:F3:51:B5:9D:BC:51:F2:DA
            X509v3 Authority Key Identifier:
                keyid:79:64:6B:38:C3:D8:7D:33:14:5B:63:4B:4E:1D:CC:21:45:F6:41:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/IOJ_IuxrPhU7ERFs81G1nbxR8to.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.182.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:62:73:cb:e2:80:76:ec:e6:c1:96:e5:ac:0c:e2:31:98:b1:
         d2:3b:d2:74:97:bf:79:74:56:37:68:a5:00:0c:1a:cf:55:85:
         c8:33:55:55:9a:cd:6e:86:35:c2:83:9a:bc:65:10:7e:4a:4e:
         8f:b9:c2:be:c5:0c:cf:db:36:91:6e:f3:78:7f:bc:f3:10:c0:
         c3:0f:5e:92:39:10:16:f4:c1:b4:fc:6a:35:c1:9f:da:2d:3f:
         1f:e0:6b:8d:42:c6:fd:27:68:06:37:f5:fa:c4:01:c5:15:dc:
         f4:ab:f3:b6:10:a4:6b:3a:5e:dd:93:12:5c:62:fc:fe:25:82:
         f1:3f:a7:bc:4c:f2:71:bd:1c:8f:26:ed:0f:8e:17:fd:af:50:
         02:93:8d:87:94:11:b7:08:6f:3c:d0:45:c2:2d:79:95:66:d4:
         67:a1:2a:81:13:5f:6c:e0:a7:61:a4:97:f5:75:b7:ae:99:99:
         83:c8:44:03:c4:af:a0:fd:4f:85:c5:27:95:86:fc:b9:cc:9e:
         4d:91:6e:db:b0:0a:9b:06:6e:80:b8:2f:59:dd:33:36:9c:e7:
         f6:c0:cb:a4:18:aa:08:c3:6f:de:5b:4e:ac:21:2e:c1:84:84:
         f1:5f:f0:4a:e2:83:2f:41:f5:a5:bb:80:87:ae:0a:6f:9b:92:
         d0:96:51:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:36 2026 by rpki-client