This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/sWpGqOrvUhu_YeE103lUKrGogwY.roa
File:                     sWpGqOrvUhu_YeE103lUKrGogwY.roa (raw, json)
Hash identifier:          G53bT0iyZh0zmMZw59Fi11N/QHTX1EKTX4fPsCxbvVQ=
Subject key identifier:   B1:6A:46:A8:EA:EF:52:1B:BF:61:E1:35:D3:79:54:2A:B1:A8:83:06
Certificate issuer:       /CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Certificate serial:       019B76EB0623C25C8F5B25F18E3AF64DB2EE
Authority key identifier: 16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/sWpGqOrvUhu_YeE103lUKrGogwY.roa
Signing time:             Thu 01 Jan 2026 00:17:52 +0000
ROA not before:           Thu 01 Jan 2026 00:17:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213212
IP address blocks:        77.81.183.0/24 maxlen: 24
                          77.81.186.0/23 maxlen: 23
                          185.76.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:06:23:c2:5c:8f:5b:25:f1:8e:3a:f6:4d:b2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
        Validity
            Not Before: Jan  1 00:17:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b16a46a8eaef521bbf61e135d379542ab1a88306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:66:8e:fe:eb:c3:f4:3f:da:10:b8:bf:d6:
                    40:d2:32:af:5e:8a:ef:93:6e:b6:88:d0:ca:61:89:
                    e6:40:f3:12:77:9f:bd:98:ee:96:01:fc:7a:c7:a0:
                    0a:d9:4f:29:d8:58:1a:52:f5:66:6b:f6:45:bc:8b:
                    77:a9:ee:5a:d9:c2:28:52:d3:e7:99:5d:3b:a8:9e:
                    cb:14:cb:f1:c6:5a:7a:e3:66:c7:22:c1:cf:b3:bc:
                    8c:cd:ba:a8:51:f7:19:a5:28:b9:3d:22:32:61:68:
                    0f:0f:4a:fa:09:e0:91:e6:fe:9b:fa:b4:2f:15:a5:
                    38:20:41:2c:64:60:27:30:38:67:5a:c1:4c:0b:af:
                    88:6a:51:fa:46:e0:50:6e:75:ad:29:f3:9b:57:27:
                    71:34:9b:98:95:72:eb:f1:be:8d:38:2e:23:8b:fe:
                    5a:01:2d:83:bf:62:5d:89:e7:56:85:86:e2:36:59:
                    9e:d1:27:52:83:c4:d4:82:b3:44:88:01:8e:a2:bd:
                    d0:01:87:e2:cb:d2:cb:bc:10:73:5e:d2:17:d1:95:
                    23:4a:eb:af:5f:e7:49:2a:d2:bc:de:95:28:22:20:
                    b4:59:60:e3:97:18:23:9c:c7:30:ba:37:fa:5f:7c:
                    32:05:3d:d9:a7:11:d8:c6:70:52:6c:51:f0:5a:f8:
                    3d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6A:46:A8:EA:EF:52:1B:BF:61:E1:35:D3:79:54:2A:B1:A8:83:06
            X509v3 Authority Key Identifier:
                keyid:16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/sWpGqOrvUhu_YeE103lUKrGogwY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.183.0/24
                  77.81.186.0/23
                  185.76.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:40:0b:76:18:c3:f9:e3:15:a1:d4:85:f5:6b:aa:33:ac:c5:
         12:e2:a0:a0:3c:95:13:6e:b8:f3:cf:b9:79:fc:cc:93:69:fa:
         f1:a1:bc:ba:c4:f8:44:e5:63:4c:52:26:a4:af:04:58:6d:2b:
         38:7c:bb:62:38:84:85:fe:7a:4e:3f:e7:c5:dd:85:d2:26:27:
         f1:b7:3b:39:7b:3f:db:35:f0:24:ad:08:31:df:82:e3:0d:86:
         ee:80:9b:a6:ed:6e:ce:48:a9:03:4b:d5:9c:c1:45:79:34:69:
         d9:93:70:26:78:19:e7:75:5b:33:e4:da:d5:ff:90:a5:65:8e:
         8d:a8:8b:dd:7e:de:f7:e8:3d:10:ca:1b:00:f9:12:d0:29:eb:
         22:6e:77:11:0f:6b:b0:55:36:fb:b8:70:cb:2c:b5:4b:c4:01:
         b7:1e:33:cb:89:cb:f5:a9:ce:4d:be:aa:c7:16:8f:d9:4d:ab:
         70:1b:bf:c0:63:9f:24:cf:19:cb:e1:4e:31:27:e5:68:8d:80:
         c5:18:a1:59:a7:26:14:7e:35:23:71:2a:b6:23:ec:a3:c0:52:
         0f:87:6e:02:70:2e:a1:a8:7b:43:c6:d3:da:93:8b:af:10:21:
         5e:da:3b:28:e6:01:54:69:a7:59:a8:e2:a4:1a:19:1c:b6:35:
         1e:64:6c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:55:30 2026 by rpki-client