This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/FVXBitmEbgj_li_6czx1XRbqiNw.roa
File:                     FVXBitmEbgj_li_6czx1XRbqiNw.roa (raw, json)
Hash identifier:          R8xG/GltnW5vfmFXsInhF+U1K0ZAPEo6gDTassjkZ70=
Subject key identifier:   15:55:C1:8A:D9:84:6E:08:FF:96:2F:FA:73:3C:75:5D:16:EA:88:DC
Certificate issuer:       /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial:       019B7AC92595A168262805DA4892AAE2B109
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/FVXBitmEbgj_li_6czx1XRbqiNw.roa
Signing time:             Thu 01 Jan 2026 18:19:21 +0000
ROA not before:           Thu 01 Jan 2026 18:19:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29616
IP address blocks:        185.1.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:25:95:a1:68:26:28:05:da:48:92:aa:e2:b1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
        Validity
            Not Before: Jan  1 18:19:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1555c18ad9846e08ff962ffa733c755d16ea88dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bd:22:54:ff:82:ad:53:cd:b2:0f:d4:1b:64:
                    73:c2:54:a4:0c:c1:95:82:4c:9a:10:01:40:f0:b4:
                    cc:59:16:2e:b3:75:32:e5:9d:ff:05:19:fa:37:f1:
                    6a:58:4c:95:60:e7:20:a7:48:88:c7:b9:28:96:e8:
                    ca:0b:f5:34:66:f7:f8:e6:db:30:69:59:89:7c:a0:
                    5d:96:b1:23:5b:5e:87:89:90:12:0e:78:b7:04:43:
                    14:87:35:d6:f5:d7:e5:a2:73:74:4e:28:a1:ba:77:
                    8a:5a:b7:d8:6e:67:d2:a4:33:89:d3:d7:24:cd:18:
                    1c:f0:c3:0f:da:11:cf:22:69:47:f6:52:9c:45:02:
                    e2:57:cf:59:92:62:17:3a:0b:bd:14:70:55:27:5e:
                    75:26:ad:50:c6:dc:b9:48:51:b7:30:b5:03:47:4b:
                    86:b3:4f:09:9d:63:6b:88:e6:71:bf:33:e7:a2:12:
                    be:b8:5b:7e:5c:fc:1b:e4:1b:fb:40:ae:b6:aa:5d:
                    37:75:8c:af:66:1f:76:ff:0f:dd:65:9b:73:60:d3:
                    b7:c7:50:b7:e9:3e:a5:c8:ac:90:5b:00:7c:88:48:
                    00:1c:9d:18:a9:2d:5f:38:c4:dd:05:08:7c:58:02:
                    5c:c6:72:e1:34:ad:67:60:33:45:ec:fd:26:d1:a8:
                    8b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:55:C1:8A:D9:84:6E:08:FF:96:2F:FA:73:3C:75:5D:16:EA:88:DC
            X509v3 Authority Key Identifier:
                keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/FVXBitmEbgj_li_6czx1XRbqiNw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:7b:78:96:52:36:74:12:a7:48:ee:b5:64:3e:c0:8a:fd:1e:
         76:ee:36:d7:b2:f5:b7:0e:71:4c:5f:57:b0:73:13:7e:c7:bb:
         41:8e:0b:7b:d6:bd:f2:e3:d9:8d:25:19:f3:27:0e:6d:79:3f:
         19:ac:c8:5c:b2:41:ec:2a:34:14:9b:18:11:5f:59:22:1b:84:
         c2:7d:2d:88:71:b2:7b:35:9c:be:17:a3:bc:d2:c7:e6:ee:88:
         27:55:96:93:3b:1b:ef:97:ed:5a:cf:8b:2a:9a:a6:79:79:45:
         50:3d:9e:f9:af:66:5c:14:3c:7e:ad:43:69:97:91:69:ca:e9:
         d2:59:fc:c8:f6:64:74:7f:ca:6c:bf:25:1f:96:22:4d:57:e3:
         d7:dd:de:2f:7b:8b:d6:34:52:b6:69:d9:7a:bd:c2:1e:44:64:
         60:bc:6a:08:a1:bb:33:0d:c5:d3:b0:58:57:90:c6:b4:93:a3:
         90:9a:a8:45:92:de:22:fc:51:d6:50:25:50:b2:21:a5:e2:0b:
         92:63:0b:66:a3:19:d4:30:8e:5a:ce:cb:d0:59:c5:54:f9:ad:
         75:25:12:df:6d:01:c4:30:c9:25:7b:c6:39:28:d8:a1:77:0b:
         3a:a7:c3:65:8c:1f:f7:30:84:ac:84:e1:26:d3:34:9a:df:5e:
         87:81:3a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:07:35 2026 by rpki-client