This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa
File:                     1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa (raw, json)
Hash identifier:          1mzRg3BR7/9e9rE+yCo+M4yRQvpuIjuIUDfelxbti2I=
Subject key identifier:   FB:C5:DC:E5:48:45:90:59:1E:49:E9:41:23:56:66:1A:C4:ED:7D:CB
Certificate issuer:       /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial:       019B79ECF3463F680A9E57B2769F363A3A52
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa
Signing time:             Thu 01 Jan 2026 14:18:50 +0000
ROA not before:           Thu 01 Jan 2026 14:18:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204500
IP address blocks:        195.72.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:f3:46:3f:68:0a:9e:57:b2:76:9f:36:3a:3a:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
        Validity
            Not Before: Jan  1 14:18:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fbc5dce5484590591e49e9412356661ac4ed7dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:00:7d:37:be:8b:0b:4e:6f:5d:1b:1f:e7:
                    c0:4d:27:7e:5e:9b:b8:0e:e2:80:50:6d:64:e2:91:
                    0a:b7:d4:19:81:43:37:98:25:78:37:18:53:70:96:
                    7d:a0:14:f2:d4:f8:c1:80:df:91:b2:e5:f5:48:4c:
                    d4:95:ca:98:f7:4f:b3:ae:1b:64:a9:c8:b4:84:1c:
                    42:7c:85:58:99:bc:51:06:72:43:3e:3e:cb:0e:49:
                    af:70:d0:d4:b3:17:90:71:b5:00:ac:a9:ed:d8:27:
                    4a:d1:36:6d:35:7f:98:c1:bb:ef:88:c4:27:f4:f3:
                    58:1e:f8:f4:ac:98:52:ea:c1:7f:bd:d9:8e:6e:10:
                    9c:63:9e:ee:2f:93:09:08:2e:cc:dc:00:59:5b:83:
                    f9:00:92:3b:00:bb:b4:e2:5e:cc:fb:78:ef:5c:3c:
                    27:d4:ec:82:f8:15:de:7f:0f:ac:ce:17:f8:57:f0:
                    89:52:c9:2f:cc:ca:48:90:59:04:cb:c4:09:bb:3e:
                    43:15:d6:7c:81:51:66:63:7f:0a:fb:7b:7c:66:35:
                    61:bb:fc:e5:e6:31:96:cc:d0:32:6a:e5:3b:fc:55:
                    e1:54:70:c9:10:16:e4:9b:75:dd:bd:be:33:2e:bc:
                    f0:62:59:52:e3:10:a5:e9:5f:77:d5:03:a7:0c:7a:
                    3d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C5:DC:E5:48:45:90:59:1E:49:E9:41:23:56:66:1A:C4:ED:7D:CB
            X509v3 Authority Key Identifier:
                keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.72.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:04:93:21:03:10:2a:88:29:d9:21:e5:9c:ec:0d:a1:10:e1:
         d5:3f:7d:9d:f4:0d:f3:c9:fc:71:54:4f:50:dc:b9:e0:a4:8f:
         e4:3f:5b:e5:f6:a8:31:92:b4:04:9d:32:b5:a6:51:70:96:7d:
         c0:16:99:32:61:a9:0c:96:cc:2f:0b:27:5d:bf:b0:70:65:2a:
         fd:95:d5:a9:1a:2e:1a:dc:03:05:2c:ea:2b:85:10:e4:3a:7e:
         8e:09:e1:8a:5b:bc:dc:11:10:a0:d8:02:c8:b8:a6:e9:b5:6e:
         68:9a:67:51:74:34:79:8e:31:39:dc:fd:8e:b3:bc:63:de:fe:
         6d:01:32:68:58:5f:14:35:54:3f:27:49:65:25:46:20:48:6b:
         79:4f:54:ef:aa:f9:90:56:1f:b0:8d:d0:97:b9:2e:aa:98:1b:
         45:67:31:18:23:7d:78:d0:c6:c6:fe:53:a3:d6:4b:a8:f8:69:
         c2:07:b5:d6:18:c3:b0:c9:f6:4f:e9:f1:aa:3a:89:95:76:8e:
         8e:24:2a:41:2d:49:8f:bf:7a:d6:3d:e4:62:02:3a:4a:94:66:
         9a:a1:bd:94:26:fc:02:04:72:40:d3:bb:49:04:6b:8c:8f:1b:
         c0:48:bd:14:13:e6:13:32:28:77:8d:42:02:f7:61:82:80:2b:
         e3:c9:08:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:38:42 2026 by rpki-client