This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/FLA5zAJXuRYhVvLbMvHegLVx03k.roa
File:                     FLA5zAJXuRYhVvLbMvHegLVx03k.roa (raw, json)
Hash identifier:          ALcLJ5P9PXv6U4nYIysJQ7DHdsSCbcTf30882RyAGwc=
Subject key identifier:   14:B0:39:CC:02:57:B9:16:21:56:F2:DB:32:F1:DE:80:B5:71:D3:79
Certificate issuer:       /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial:       019B7AC8C7C29107F5077FB945C782AF77A3
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/FLA5zAJXuRYhVvLbMvHegLVx03k.roa
Signing time:             Thu 01 Jan 2026 18:18:57 +0000
ROA not before:           Thu 01 Jan 2026 18:18:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     52209
IP address blocks:        194.5.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:c7:c2:91:07:f5:07:7f:b9:45:c7:82:af:77:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
        Validity
            Not Before: Jan  1 18:18:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=14b039cc0257b9162156f2db32f1de80b571d379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:03:37:ec:c2:3e:0d:d4:b0:12:f8:2d:dc:
                    32:75:f6:9d:a1:eb:a5:07:11:20:c6:cc:96:60:73:
                    f0:3d:9d:1c:fa:7e:b6:d8:f3:20:5c:83:6d:e4:fc:
                    c0:af:ef:0a:c9:b0:c9:9f:cb:f8:7a:eb:2b:83:1e:
                    36:82:9d:e1:3c:1f:68:09:b7:64:3a:63:b2:0e:31:
                    41:95:03:8e:ea:7b:4d:28:35:1a:31:1b:b5:01:75:
                    c3:92:0f:90:0a:9d:6a:c1:84:97:d9:5b:80:d2:d9:
                    eb:dd:1e:75:21:f6:22:57:cb:8e:64:73:5c:be:0a:
                    3b:74:08:fa:e6:3f:6a:d2:ab:ec:3b:8f:6a:21:13:
                    d0:44:25:39:83:1a:4e:6a:24:84:a4:b4:d1:28:c8:
                    74:2b:24:7e:1b:8d:58:07:ad:8d:e5:0b:b8:81:08:
                    05:05:a7:54:3a:f0:88:59:64:3d:20:ae:38:7c:23:
                    50:37:68:e5:6f:b1:12:9d:80:e6:47:0e:74:32:b4:
                    6e:1a:ee:78:f6:c8:32:15:de:53:33:74:0e:c5:73:
                    ad:d9:09:5c:9f:09:d2:9e:df:6c:ff:a7:54:ab:8a:
                    fe:d5:53:37:e7:d8:8f:07:62:18:66:c6:41:7e:d3:
                    f1:d4:c2:d8:c4:d6:4c:70:e3:d0:fe:6d:bd:94:39:
                    61:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B0:39:CC:02:57:B9:16:21:56:F2:DB:32:F1:DE:80:B5:71:D3:79
            X509v3 Authority Key Identifier:
                keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/FLA5zAJXuRYhVvLbMvHegLVx03k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.5.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:0c:d3:2e:10:42:6e:14:15:49:63:7e:e1:44:db:33:dd:78:
         5a:74:b3:f8:8b:c2:46:69:45:16:87:6e:4d:e3:b6:79:e2:cf:
         58:cc:31:8c:e8:b9:aa:f8:35:2a:34:a2:d6:5f:06:97:dd:78:
         14:00:ef:a7:13:f6:1f:d4:8b:bb:76:ec:c0:4d:48:c0:4e:bb:
         0b:b0:4e:00:ea:32:b5:fc:59:de:68:94:65:84:d1:75:64:c2:
         c5:0e:f2:4c:e5:b4:4e:4f:ca:04:72:67:57:73:bf:f0:29:6d:
         6d:1e:a9:1f:49:19:76:a2:24:5b:0c:1e:52:e6:d9:b6:35:ac:
         1e:ab:39:81:73:f1:72:5a:77:f9:d5:90:f3:1a:4a:5c:e4:49:
         72:d5:11:be:05:43:b6:6c:89:04:65:56:32:aa:60:e8:c6:d6:
         6c:9b:7e:35:04:9b:eb:d3:ed:65:84:b9:78:45:77:8a:3e:ac:
         70:7d:51:88:c2:c4:79:c1:e8:62:80:fc:1c:0f:67:df:bd:25:
         e6:27:3b:ad:07:c6:6c:86:f3:a0:01:fa:1a:02:af:80:24:e3:
         25:2d:d9:8e:25:86:d3:f5:a8:b8:01:03:5a:98:38:c3:c8:48:
         ae:69:d5:c9:36:07:95:42:36:f3:63:50:4d:ad:69:c0:e8:b1:
         59:04:06:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:50:56 2026 by rpki-client