This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/FQiwWBBeK_EJ4ljVhzzdU_kvYhE.roa
File:                     FQiwWBBeK_EJ4ljVhzzdU_kvYhE.roa (raw, json)
Hash identifier:          HY7azWr+1lDIeYP4uBd4A0p2MAT8AwHdslPwrQq6vgY=
Subject key identifier:   15:08:B0:58:10:5E:2B:F1:09:E2:58:D5:87:3C:DD:53:F9:2F:62:11
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       019B7D5BBECCB932775B9FCD154AB6662D96
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/FQiwWBBeK_EJ4ljVhzzdU_kvYhE.roa
Signing time:             Fri 02 Jan 2026 06:18:43 +0000
ROA not before:           Fri 02 Jan 2026 06:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57277
IP address blocks:        80.92.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:be:cc:b9:32:77:5b:9f:cd:15:4a:b6:66:2d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Jan  2 06:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1508b058105e2bf109e258d5873cdd53f92f6211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:a8:0f:2b:b6:e6:51:d1:86:ab:94:8a:4e:
                    68:8b:7d:07:e9:4a:bd:b7:48:03:2e:9f:62:9c:e4:
                    b0:4b:72:e6:d8:3b:df:58:68:c5:58:a6:55:f0:1d:
                    71:fb:fa:2d:4a:8c:6f:19:80:06:42:4b:de:60:13:
                    f9:27:8f:15:5c:16:4f:08:cf:64:e9:b4:bc:3a:2f:
                    fd:cf:2b:bb:99:ac:f8:26:08:78:37:15:64:e6:65:
                    31:9e:16:ff:da:50:ad:8c:8d:db:0d:41:05:4e:69:
                    f1:97:1f:f9:83:f7:24:5e:76:11:9f:08:30:d9:b1:
                    a6:8c:5e:38:7d:0e:e8:d5:27:48:c6:d3:dc:e6:ef:
                    1f:1d:0f:f6:ac:91:58:a0:89:b7:d7:ac:08:b8:54:
                    26:cd:11:3a:8c:cc:a7:a4:37:f9:92:ad:4c:9d:d5:
                    f5:48:a2:13:9d:f5:9a:56:c9:d2:d2:a5:78:89:70:
                    5b:f7:7a:f5:0b:ed:84:d3:ac:85:4d:f2:f9:22:9c:
                    cf:90:67:9e:bf:cf:fb:5d:ec:37:51:43:8d:b5:00:
                    5d:bf:c9:63:2d:49:ff:ba:e4:58:06:34:ee:77:f9:
                    0a:f7:33:51:e1:f4:05:c2:c7:c4:c8:c6:ed:82:3f:
                    60:92:b1:86:2a:59:fd:4a:01:2f:9e:16:66:cd:e3:
                    31:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:08:B0:58:10:5E:2B:F1:09:E2:58:D5:87:3C:DD:53:F9:2F:62:11
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/FQiwWBBeK_EJ4ljVhzzdU_kvYhE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.92.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:57:7f:9f:49:2d:28:14:ad:ad:19:a7:47:dc:aa:65:86:65:
         96:c3:ee:44:43:50:6b:47:4c:22:aa:89:4c:8e:93:c2:0f:69:
         a4:fa:0c:e3:f8:09:e6:57:20:e3:d5:94:f2:84:d7:f1:25:70:
         e8:1f:cd:38:84:e4:40:ec:15:29:e5:bf:8c:81:f5:42:59:93:
         ef:cf:09:ff:18:e7:3f:90:d5:05:d8:79:cc:8b:fd:63:ce:e1:
         db:e0:89:b0:7a:42:43:36:7e:40:d9:c9:ce:02:5e:0d:b2:47:
         39:dd:2d:c8:3d:30:cc:12:dc:d5:86:8b:c5:2d:8b:52:c1:b9:
         c1:8e:6e:2d:04:ea:32:b0:f4:8c:2d:a2:7b:c7:82:7c:6c:09:
         75:a6:0a:fb:2d:9b:7e:b9:19:f4:ad:3e:9d:14:7d:7b:2e:f0:
         5a:7d:ac:d5:79:97:fb:24:ed:af:10:6c:a9:c3:2b:95:9c:7e:
         3f:ca:ef:8a:2a:4f:b3:96:7b:dd:7b:4a:33:6e:9e:c3:8d:f9:
         af:67:9a:79:3e:ae:d5:74:b0:61:a6:f6:2d:52:f8:4c:18:e9:
         9b:75:51:48:74:62:6b:fc:59:c7:17:21:a4:3a:11:bb:b4:85:
         46:91:0a:25:a6:64:1d:cd:7c:61:9f:5f:fd:de:0d:4f:74:6f:
         33:e0:9a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:40:34 2026 by rpki-client