This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/_Fbs2myjlyXM3gZy6ijAia4ZHT4.roa
File:                     _Fbs2myjlyXM3gZy6ijAia4ZHT4.roa (raw, json)
Hash identifier:          8ZiAikGkRwLzcArbFm/2YKSLA5m5mnQdWj1FO5Wjvcs=
Subject key identifier:   FC:56:EC:DA:6C:A3:97:25:CC:DE:06:72:EA:28:C0:89:AE:19:1D:3E
Certificate issuer:       /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial:       019B7CED8CE3C84C9F2081A3E366FC243734
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/_Fbs2myjlyXM3gZy6ijAia4ZHT4.roa
Signing time:             Fri 02 Jan 2026 04:18:21 +0000
ROA not before:           Fri 02 Jan 2026 04:18:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41778
IP address blocks:        194.50.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:8c:e3:c8:4c:9f:20:81:a3:e3:66:fc:24:37:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
        Validity
            Not Before: Jan  2 04:18:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fc56ecda6ca39725ccde0672ea28c089ae191d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:77:1f:a2:d7:97:d9:c8:a2:fd:6b:3e:3d:56:
                    23:d7:7a:3f:f9:49:29:9b:9e:7c:1f:dc:b9:41:f9:
                    1b:2c:f6:6a:3b:f7:3a:dd:b6:2d:ff:7f:92:e2:d9:
                    5c:63:79:78:28:58:eb:1a:ff:2c:d0:bc:fd:ff:a6:
                    b9:94:90:84:90:1e:06:50:52:b5:15:9b:c0:38:f7:
                    58:0d:9d:e1:8a:c7:27:d3:c6:64:da:95:41:9f:da:
                    f1:97:7b:55:14:a0:60:dd:07:72:55:44:4a:2e:32:
                    da:05:3d:13:66:c7:63:3d:c6:51:8e:2c:ea:8b:51:
                    3e:01:ea:9c:96:78:fb:33:18:fd:ee:16:bf:65:26:
                    29:10:58:24:61:2e:86:13:88:ec:5c:57:f1:11:b3:
                    ea:a0:55:45:ce:c7:8c:7c:f6:1c:f3:7e:8c:e6:e7:
                    bb:7e:d6:49:6d:b8:5d:f2:11:9f:a1:97:92:3d:89:
                    82:38:cd:4a:1b:3d:c5:88:6f:05:05:91:37:b4:fd:
                    82:a8:dc:b8:21:71:e6:49:80:61:08:8d:a4:c0:1f:
                    7e:89:43:ed:19:ad:10:52:a6:65:78:df:05:19:08:
                    ea:68:f4:4f:ad:c9:17:41:bc:e9:e8:2f:51:f1:20:
                    b7:0a:b9:dc:47:3b:00:85:9c:9c:fc:51:24:fe:6f:
                    97:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:56:EC:DA:6C:A3:97:25:CC:DE:06:72:EA:28:C0:89:AE:19:1D:3E
            X509v3 Authority Key Identifier:
                keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/_Fbs2myjlyXM3gZy6ijAia4ZHT4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:7b:7a:03:1a:e6:69:4c:8b:16:2b:49:bd:6b:4a:25:52:51:
         b4:47:3a:5e:26:f4:55:7d:83:73:6f:41:46:86:98:b0:93:15:
         62:46:39:38:24:df:ce:46:a4:ea:58:00:5c:6c:f0:ef:d8:cd:
         1c:4a:72:7f:d9:ba:a4:ee:14:0a:66:13:e3:10:a0:d1:35:a3:
         14:86:4d:60:cf:bf:05:d1:13:31:4a:bc:a3:e4:67:ff:2c:8f:
         c7:df:ea:c5:8d:25:76:dd:99:b1:d5:8e:fd:e4:75:2d:ca:9b:
         6f:6e:e2:3a:0e:02:80:d6:31:27:60:a5:92:4b:39:be:b0:50:
         ba:4d:65:62:c0:78:44:9e:9b:26:33:00:0a:a6:f3:b9:19:91:
         02:85:ee:ba:a0:c3:1b:3d:83:85:2c:d9:62:6e:e7:dc:fc:c3:
         b4:2b:4b:0b:14:3c:77:e4:46:c9:15:d7:cd:59:e8:79:96:0d:
         c1:73:a9:dd:91:a4:64:97:7d:d3:0c:e1:bf:01:f7:7a:60:95:
         fb:ee:19:70:61:c6:1e:ec:7d:72:0d:ad:05:9f:73:50:1d:f0:
         f2:b1:91:5f:04:68:ec:5d:39:8b:41:8b:7d:5c:45:81:c8:72:
         23:de:42:cd:ec:1c:32:5a:60:25:3f:7f:2b:ab:6a:e5:2c:7c:
         67:a5:0a:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87YzjyEyfIIGj42b8JDc0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTQzODgxMzc1MDEzM2U1NTAwMWJmODk2NzBhMGRiM2Fl
NWJlMWYwHhcNMjYwMTAyMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzU2ZWNkYTZjYTM5NzI1Y2NkZTA2NzJlYTI4YzA4OWFlMTkxZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApncfoteX2cii/Ws+PVYj13o/+Ukp
m558H9y5QfkbLPZqO/c63bYt/3+S4tlcY3l4KFjrGv8s0Lz9/6a5lJCEkB4GUFK1
FZvAOPdYDZ3hiscn08Zk2pVBn9rxl3tVFKBg3QdyVURKLjLaBT0TZsdjPcZRjizq
i1E+Aeqclnj7Mxj97ha/ZSYpEFgkYS6GE4jsXFfxEbPqoFVFzseMfPYc836M5ue7
ftZJbbhd8hGfoZeSPYmCOM1KGz3FiG8FBZE3tP2CqNy4IXHmSYBhCI2kwB9+iUPt
Ga0QUqZleN8FGQjqaPRPrckXQbzp6C9R8SC3CrncRzsAhZyc/FEk/m+XaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPxW7Npso5clzN4GcuoowImuGR0+MB8GA1UdIwQY
MBaAFEOkOIE3UBM+VQAb+JZwoNs65b4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81Y2I0NzMtMzVhMS00NzI3LTg3NzMt
YTBkNmYwZWViNWMyLzEvX0ZiczJteWpseVhNM2daeTZpakFpYTRaSFQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81Y2I0NzMtMzVhMS00NzI3LTg3NzMtYTBkNmYwZWViNWMy
LzEvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjKxMA0G
CSqGSIb3DQEBCwUAA4IBAQCOe3oDGuZpTIsWK0m9a0olUlG0RzpeJvRVfYNzb0FG
hpiwkxViRjk4JN/ORqTqWABcbPDv2M0cSnJ/2bqk7hQKZhPjEKDRNaMUhk1gz78F
0RMxSryj5Gf/LI/H3+rFjSV23Zmx1Y795HUtyptvbuI6DgKA1jEnYKWSSzm+sFC6
TWViwHhEnpsmMwAKpvO5GZEChe66oMMbPYOFLNlibufc/MO0K0sLFDx35EbJFdfN
Weh5lg3Bc6ndkaRkl33TDOG/Afd6YJX77hlwYcYe7H1yDa0Fn3NQHfDysZFfBGjs
XTmLQYt9XEWByHIj3kLN7BwyWmAlP38rq2rlLHxnpQrd
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:22:54 2026 by rpki-client