This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/FVs5ImaWVvMLN8ezh6CIs0YsdcI.roa
File:                     FVs5ImaWVvMLN8ezh6CIs0YsdcI.roa (raw, json)
Hash identifier:          mVlJNhf+nTJn8u+aGX4NPdLrVwINy4ZyTYkg3aZjPdQ=
Subject key identifier:   15:5B:39:22:66:96:56:F3:0B:37:C7:B3:87:A0:88:B3:46:2C:75:C2
Certificate issuer:       /CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
Certificate serial:       019B7E3769523BAADAEC623711730AF72CCF
Authority key identifier: EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/FVs5ImaWVvMLN8ezh6CIs0YsdcI.roa
Signing time:             Fri 02 Jan 2026 10:18:39 +0000
ROA not before:           Fri 02 Jan 2026 10:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     147185
IP address blocks:        193.32.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:69:52:3b:aa:da:ec:62:37:11:73:0a:f7:2c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
        Validity
            Not Before: Jan  2 10:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=155b3922669656f30b37c7b387a088b3462c75c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c7:b1:aa:55:21:4f:57:53:f8:af:ab:88:e8:
                    6b:4a:3e:f4:a9:45:f1:d8:c1:31:8c:3f:54:16:05:
                    2d:62:90:95:7f:3c:64:b7:9a:0e:c3:22:8f:bf:2c:
                    9a:eb:bf:d1:0c:ca:1c:e3:59:b7:c1:c1:8b:ce:09:
                    eb:ad:da:54:b3:d8:d3:f9:a5:fd:34:42:63:7a:4f:
                    1c:d3:a4:a4:30:a7:8c:ec:63:4f:d3:23:e1:36:51:
                    db:9b:70:b0:f4:ce:0a:3a:0f:ba:d6:82:02:10:95:
                    bd:ac:62:e4:40:af:21:63:3f:95:08:a7:28:62:72:
                    a6:8d:89:b2:86:5a:31:e1:c4:67:8a:b8:d9:21:1d:
                    8d:b6:63:96:94:4a:79:56:5d:5c:5b:1a:76:56:e2:
                    9c:db:4c:7e:20:7d:be:d5:28:45:06:33:ba:cb:2f:
                    d0:61:65:6b:a1:0e:5e:04:ac:c3:bc:11:9f:2a:7c:
                    97:cd:69:59:2e:be:8a:6f:e4:ef:ac:14:70:d0:a8:
                    6a:14:76:53:9b:ad:9f:bf:7c:b7:1c:94:8f:1f:c3:
                    d2:58:e2:28:42:b0:c0:cd:f8:c1:13:da:d5:a2:0c:
                    19:0f:ff:87:cd:c8:97:65:d7:a6:c4:1f:50:81:bc:
                    f2:eb:57:eb:ff:4c:f0:a8:71:2f:03:bf:e4:b5:5b:
                    f8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5B:39:22:66:96:56:F3:0B:37:C7:B3:87:A0:88:B3:46:2C:75:C2
            X509v3 Authority Key Identifier:
                keyid:EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/FVs5ImaWVvMLN8ezh6CIs0YsdcI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.32.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:0a:f3:66:23:17:b1:a2:97:6a:5b:c9:04:33:11:75:ce:b2:
         42:0f:a7:19:11:86:01:3e:00:1e:29:25:da:a2:71:49:67:e2:
         e8:8f:d0:cc:52:22:d2:b2:fd:e6:61:63:9f:04:1b:cd:e8:8e:
         f3:66:34:18:cf:48:06:cb:d1:08:16:98:08:ef:4d:ac:ab:76:
         47:82:92:b2:0f:d1:59:85:34:30:1f:e1:f1:2c:ad:e7:1f:c2:
         2b:16:5b:33:ec:44:2e:ac:de:96:e6:16:f2:83:38:46:6f:7a:
         3c:9e:e7:52:ea:ea:ee:f2:c3:0c:c8:31:a8:82:23:08:37:c9:
         78:e8:98:d5:75:cd:33:a7:8f:36:a2:4d:b0:46:32:94:8f:94:
         31:63:69:97:09:95:6b:e1:b6:44:eb:2f:c7:fd:7e:8f:7f:ac:
         81:1a:82:34:0a:d8:a6:1e:33:1b:f4:7c:3e:27:b2:89:26:9b:
         11:38:d4:46:a9:01:30:f9:ac:d6:4c:21:90:88:3e:d4:6b:36:
         31:a3:7c:d1:3e:2a:80:0d:18:f4:48:f9:a8:a6:6f:20:83:28:
         b3:af:7e:63:6f:b6:e7:7d:de:a7:97:4b:19:e2:ad:6e:1e:85:
         cc:02:4c:67:2a:bb:85:bc:f9:15:9c:e3:88:63:c6:1f:59:5b:
         3c:2d:6a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:05:37 2026 by rpki-client