This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6fiHzZ_Igvc17khkWd8VGcgAQ_o.roa
File:                     6fiHzZ_Igvc17khkWd8VGcgAQ_o.roa (raw, json)
Hash identifier:          pUCsxMiEy50us4W4oDz2Gu4TJ67c1uhTo8Tbh8YRMhM=
Subject key identifier:   E9:F8:87:CD:9F:C8:82:F7:35:EE:48:64:59:DF:15:19:C8:00:43:FA
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       019B7C8053561FDAC55F47FB8A9DA639AAA0
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6fiHzZ_Igvc17khkWd8VGcgAQ_o.roa
Signing time:             Fri 02 Jan 2026 02:19:03 +0000
ROA not before:           Fri 02 Jan 2026 02:19:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44345
IP address blocks:        77.83.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:53:56:1f:da:c5:5f:47:fb:8a:9d:a6:39:aa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jan  2 02:19:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e9f887cd9fc882f735ee486459df1519c80043fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:5b:b5:23:57:1e:f2:2c:59:7c:b0:46:50:
                    22:27:2e:b8:4d:2f:3b:57:9b:9d:f8:e4:6c:7d:26:
                    c6:90:9e:ca:8e:d1:90:84:ed:b1:28:e1:19:f4:fd:
                    05:6b:c3:6b:d1:de:f3:7a:9a:63:29:9e:aa:6e:08:
                    03:ed:65:ca:99:a9:72:0c:c1:a4:60:ed:8d:3c:71:
                    2b:68:e9:f7:91:ba:24:e9:f5:26:19:a1:05:7a:e5:
                    e7:9a:92:3f:a2:ba:8e:75:00:fb:8e:22:b9:9e:bf:
                    26:45:47:68:fb:ec:59:2d:ca:c9:70:84:4d:5c:5e:
                    2f:cb:91:10:d5:d2:84:ed:08:13:80:15:86:32:fc:
                    18:f9:cb:91:6d:b8:11:ae:37:14:f4:af:39:bf:4b:
                    d9:3d:6e:c5:0b:47:6e:1b:a4:49:54:6a:da:a1:aa:
                    10:4b:b2:b8:b8:92:8a:f2:1f:bb:a8:5a:79:69:17:
                    50:9d:91:ce:bb:dd:78:da:45:02:a2:85:cf:6a:3f:
                    b3:06:23:7b:14:f4:0a:9e:f1:8d:04:f2:8f:8f:ab:
                    6e:f3:f6:c0:e5:5b:cf:51:7f:1d:5c:fe:f0:e7:57:
                    97:66:c7:3e:02:a4:58:87:59:6d:6e:94:e2:d6:09:
                    49:c0:07:80:d5:4a:fe:9d:f5:a6:68:61:38:4e:82:
                    66:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F8:87:CD:9F:C8:82:F7:35:EE:48:64:59:DF:15:19:C8:00:43:FA
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6fiHzZ_Igvc17khkWd8VGcgAQ_o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:50:08:68:e4:82:5a:b6:aa:33:36:0e:17:eb:c0:0c:f0:e7:
         40:df:52:fd:f8:bd:1a:4a:b0:03:5c:a1:73:f6:ab:2b:3e:e4:
         11:c4:02:2e:57:a5:45:26:98:1a:55:2a:f9:9f:88:54:cc:96:
         bc:5d:2b:a4:5b:ef:9a:67:4f:7d:a6:d4:c9:40:1e:2f:8b:b4:
         7e:94:dd:65:10:a1:7d:98:a1:1d:05:c2:f9:ef:d7:70:63:b5:
         4a:a7:bd:10:f8:46:f6:a2:a9:4b:66:f3:fd:ed:1b:8a:73:b1:
         62:b0:be:37:9f:08:02:62:1e:41:d9:19:f1:79:82:c4:9c:19:
         0a:bb:78:1c:41:8f:06:e3:d3:82:fe:dc:63:90:3a:83:a9:38:
         af:e1:84:7b:48:a4:07:51:1c:cb:92:ec:1c:6e:9b:46:9b:4f:
         2a:44:83:d9:d5:b0:92:d5:23:8b:f7:ad:f4:9b:26:63:dd:44:
         32:5c:1f:d7:24:d8:36:88:c1:a8:2f:be:71:12:5b:64:a9:b6:
         ea:76:f2:04:5d:0c:75:2b:bb:05:77:98:62:1c:6f:ce:7f:15:
         58:d5:18:72:75:83:73:a5:44:02:2b:27:9b:80:32:83:e1:60:
         a7:4d:d0:9c:12:fc:f9:87:ff:61:e9:1b:f6:2a:93:5a:3a:cd:
         2d:63:a0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 03:55:36 2026 by rpki-client