This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/FBT-vF2CcpLQNwXtIK41eliOmdU.roa
File:                     FBT-vF2CcpLQNwXtIK41eliOmdU.roa (raw, json)
Hash identifier:          d7F1API+Zjp2HL3r+LaBPUl+vvTa147uB3W0MbbAhyY=
Subject key identifier:   14:14:FE:BC:5D:82:72:92:D0:37:05:ED:20:AE:35:7A:58:8E:99:D5
Certificate issuer:       /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial:       019B7BA4BEEC8BD6B444A65C2F6A30FD1E02
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/FBT-vF2CcpLQNwXtIK41eliOmdU.roa
Signing time:             Thu 01 Jan 2026 22:19:12 +0000
ROA not before:           Thu 01 Jan 2026 22:19:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206959
IP address blocks:        185.170.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:be:ec:8b:d6:b4:44:a6:5c:2f:6a:30:fd:1e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
        Validity
            Not Before: Jan  1 22:19:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1414febc5d827292d03705ed20ae357a588e99d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:72:77:21:b5:8b:5d:fd:42:72:f5:44:5d:
                    dd:7d:5a:86:38:87:34:ca:da:3d:77:9b:65:4b:29:
                    35:db:d1:98:b1:39:92:09:75:46:84:84:6a:7b:09:
                    d5:9c:16:33:6d:7f:1a:b3:af:ce:6e:89:bf:41:a7:
                    ac:5c:01:40:15:9c:50:14:d1:34:3f:9b:d0:af:21:
                    46:5d:d3:05:ad:d5:df:1d:17:3c:80:5a:3a:5c:57:
                    d0:1f:90:c8:25:d8:4c:e1:05:6b:69:30:12:b7:0b:
                    fd:67:62:49:19:45:3c:9c:a2:a6:0b:c7:ca:9f:8b:
                    55:cc:55:1a:cf:9a:2f:07:02:20:e9:16:f3:1e:c2:
                    7a:78:e6:0a:22:6d:84:06:15:a9:4a:ba:e3:b8:82:
                    58:0d:4d:28:05:1b:70:64:34:92:b0:ae:d0:f1:ce:
                    42:c0:4d:c3:09:46:79:97:55:a8:ca:78:a0:24:45:
                    1a:97:76:1b:a9:b9:61:ea:14:f1:eb:75:d8:d9:5e:
                    4f:ff:88:2d:e0:fe:d4:28:c8:4f:f6:8a:25:02:0e:
                    cb:bd:fb:fe:3b:fd:dc:d3:9d:ae:e7:01:68:cc:f2:
                    0d:50:bb:f0:d0:46:3c:4c:23:cf:a3:83:49:a8:ec:
                    7c:08:f6:71:4d:ae:0d:fa:52:59:96:6a:13:ec:1c:
                    f6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:14:FE:BC:5D:82:72:92:D0:37:05:ED:20:AE:35:7A:58:8E:99:D5
            X509v3 Authority Key Identifier:
                keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/FBT-vF2CcpLQNwXtIK41eliOmdU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:15:e0:a5:b9:c2:c3:65:71:79:d3:05:5a:2c:0e:27:b6:8e:
         b3:64:f0:44:e4:67:6b:6d:4e:14:4d:49:77:dd:df:af:58:56:
         3a:6a:81:58:cf:67:ac:91:e8:79:40:2a:a6:bc:13:84:9f:4a:
         ad:e1:5e:a7:0b:52:51:ea:64:de:60:62:76:3d:76:e8:36:63:
         34:d7:e6:23:c4:e4:a4:00:ea:77:a1:1a:e1:f7:4a:63:5a:c1:
         b9:40:82:ac:7b:91:e1:26:dc:f1:82:f2:d3:5d:30:25:1f:f5:
         e9:c2:a7:c5:57:f7:92:af:66:65:63:d2:e4:9a:90:06:0b:80:
         0b:0a:c5:87:82:4e:20:69:76:45:17:1e:61:8c:9e:98:78:c2:
         cf:dc:2c:c1:c2:7f:98:8a:1f:ef:de:5f:57:60:c1:63:f7:db:
         54:0c:6b:7a:ff:08:52:43:e1:27:9a:cc:1b:4d:bb:c7:6b:f6:
         09:b0:49:04:ac:83:d0:b4:89:85:00:c6:8b:25:e4:4b:a4:58:
         51:a8:93:79:b6:ae:cb:1d:85:fc:7a:29:70:f7:f0:c2:1b:01:
         47:55:f2:39:6a:3b:95:73:fa:9f:69:da:54:8b:3a:41:27:c3:
         8a:da:43:dc:dc:b8:5d:40:7b:fc:ad:88:08:55:1c:58:bc:27:
         ab:d0:dc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:55:05 2026 by rpki-client