This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/foV-97aSM2J17L6HTgvN2wr-MCc.roa
File:                     foV-97aSM2J17L6HTgvN2wr-MCc.roa (raw, json)
Hash identifier:          ziu79fnSFBF1I8pOYgL2UURHoDwOvi1qVp+GJ/gyfms=
Subject key identifier:   7E:85:7E:F7:B6:92:33:62:75:EC:BE:87:4E:0B:CD:DB:0A:FE:30:27
Certificate issuer:       /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial:       019B7E39398E9F5AEEFD21D1227D7FEF9379
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/foV-97aSM2J17L6HTgvN2wr-MCc.roa
Signing time:             Fri 02 Jan 2026 10:20:37 +0000
ROA not before:           Fri 02 Jan 2026 10:20:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48960
IP address blocks:        95.173.200.0/24 maxlen: 24
                          2a02:a48::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:39:39:8e:9f:5a:ee:fd:21:d1:22:7d:7f:ef:93:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
        Validity
            Not Before: Jan  2 10:20:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7e857ef7b692336275ecbe874e0bcddb0afe3027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5f:ba:86:8a:d7:bf:3d:31:ae:44:48:bf:37:
                    cc:37:57:ae:64:01:b6:54:b7:aa:66:dc:64:0d:41:
                    a7:99:83:ca:d8:62:46:ff:5c:3c:e8:88:f4:89:e9:
                    43:b5:66:7a:7a:07:71:06:1c:41:6b:a3:f4:b6:6a:
                    37:74:52:bb:0a:c8:9d:19:ac:2f:1f:ff:fc:86:3c:
                    b2:d0:cb:52:69:6d:51:56:c3:55:eb:e4:e7:2d:4f:
                    3d:fd:76:cb:41:7e:c1:a2:f5:ac:b3:fa:dc:53:49:
                    60:76:08:85:bc:91:08:15:0e:29:93:97:62:63:13:
                    12:75:ca:f6:8f:0f:04:3c:8b:b0:09:7a:3a:12:20:
                    3b:07:a5:da:b4:f2:75:c8:52:b7:6c:2a:b3:8f:16:
                    68:39:64:fe:ac:b8:66:31:17:72:db:4b:bc:81:46:
                    0f:e0:a1:0f:c0:8a:7c:2c:94:0a:d7:96:be:85:97:
                    6d:93:de:94:ae:78:f4:40:7e:58:a5:2a:3e:2d:3e:
                    6e:0d:6f:9c:be:39:c8:ba:e1:31:8b:05:3f:27:11:
                    7c:22:13:96:89:a3:98:08:61:79:33:e8:94:a0:3a:
                    97:b6:8e:37:9e:bf:89:b5:f7:c4:b3:64:a7:e5:9e:
                    45:a1:f8:48:a7:88:d8:31:c0:0b:c2:17:12:b2:db:
                    f4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:85:7E:F7:B6:92:33:62:75:EC:BE:87:4E:0B:CD:DB:0A:FE:30:27
            X509v3 Authority Key Identifier:
                keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/foV-97aSM2J17L6HTgvN2wr-MCc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.173.200.0/24
                IPv6:
                  2a02:a48::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:3d:a5:42:e1:13:f1:94:72:9c:50:50:ad:38:3c:dd:96:51:
         1e:26:ae:53:0a:2d:25:9e:19:bd:5f:5f:25:e1:42:2b:63:91:
         ef:af:a1:35:d8:9d:c4:d5:8d:24:e2:2c:a3:33:48:18:6b:41:
         5e:83:7c:7f:3e:25:52:38:df:3a:b9:29:73:00:02:9f:71:5b:
         9b:7d:fe:55:e2:d7:41:b5:23:ba:28:81:21:ec:46:18:d8:7b:
         ae:a3:e8:df:8e:9b:2f:39:e8:77:53:e2:f2:30:75:cf:79:3f:
         f4:f6:b5:ff:a7:3a:1b:77:0e:89:51:9f:ab:6f:76:05:f1:dc:
         b8:36:e7:66:2f:d7:3a:eb:14:bb:07:4b:66:d1:84:32:e0:d3:
         23:8f:a8:73:17:49:dc:2c:2b:60:f8:69:1b:f3:31:ae:af:77:
         f5:f8:09:68:6d:60:14:45:63:cc:c4:ac:63:56:3e:1b:46:e9:
         fc:e9:5f:bc:2a:98:08:3f:97:33:c9:9a:5f:8f:f9:ee:69:fb:
         c5:99:7e:6e:4e:16:2c:62:f7:b6:55:b6:69:f7:c6:79:e2:a1:
         4d:05:22:2f:18:49:db:99:ed:21:e7:22:42:b8:c4:ae:ae:8a:
         b2:64:59:20:be:79:fe:83:ff:98:81:2b:83:1f:24:6b:76:53:
         d4:1c:9e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:33:51 2026 by rpki-client