This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/RF-tJIO2NICablpWJ0rxXstB-5E.roa
File:                     RF-tJIO2NICablpWJ0rxXstB-5E.roa (raw, json)
Hash identifier:          B2eozTRe5cg7SctioXDuhV7y1QMBLlq9hEQ1DOOBwlc=
Subject key identifier:   44:5F:AD:24:83:B6:34:80:9A:6E:5A:56:27:4A:F1:5E:CB:41:FB:91
Certificate issuer:       /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial:       019B7F1553A2D24F4A7C5189C9D4DA4F7C70
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/RF-tJIO2NICablpWJ0rxXstB-5E.roa
Signing time:             Fri 02 Jan 2026 14:21:02 +0000
ROA not before:           Fri 02 Jan 2026 14:21:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204896
IP address blocks:        2001:67c:17c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:53:a2:d2:4f:4a:7c:51:89:c9:d4:da:4f:7c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
        Validity
            Not Before: Jan  2 14:21:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=445fad2483b634809a6e5a56274af15ecb41fb91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3e:9d:44:2b:23:04:aa:16:5a:7e:8c:29:76:
                    ec:2d:d9:07:55:dc:63:22:70:5e:bc:c5:24:6a:34:
                    95:a2:07:c2:2b:cd:c3:d3:53:78:4c:58:3b:e9:04:
                    52:1a:ef:50:52:00:50:5a:18:d7:d0:ba:64:29:f7:
                    65:dd:59:d3:d6:86:1a:e9:b9:03:4b:96:db:46:f6:
                    55:92:9c:47:c0:de:61:42:fe:e6:fd:43:f7:a7:ee:
                    e2:1c:9c:6c:30:40:1b:70:1a:b4:cf:a6:f0:27:d5:
                    76:e7:ef:d1:ed:d8:65:ef:3d:c0:15:3f:54:4c:17:
                    f3:8c:92:99:db:12:70:66:e9:04:3f:cd:1b:b7:80:
                    2b:80:f0:c8:9a:ba:f4:ba:cd:62:0f:b9:fb:48:30:
                    25:ae:06:f8:36:bb:49:a4:4c:8c:22:aa:1e:39:f9:
                    fc:fc:f4:0c:69:3c:ed:e3:e9:d8:2b:16:7a:75:d4:
                    e6:69:ed:02:91:8f:fb:76:94:bb:c3:dc:e0:b7:f1:
                    3b:e9:e0:83:a2:36:ac:7f:f3:e3:41:37:d3:02:85:
                    38:c2:0d:9e:d7:6d:12:2c:4f:3a:14:38:84:2f:c7:
                    7b:7b:6f:d4:30:7b:48:34:b4:28:9e:d9:57:c9:1b:
                    80:56:75:ab:36:92:01:a0:30:85:46:15:4f:8c:a3:
                    69:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5F:AD:24:83:B6:34:80:9A:6E:5A:56:27:4A:F1:5E:CB:41:FB:91
            X509v3 Authority Key Identifier:
                keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/RF-tJIO2NICablpWJ0rxXstB-5E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:17c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:29:2e:65:89:90:a5:55:07:90:a0:96:2b:b7:f9:c4:51:b6:
         3b:92:fb:66:55:ac:08:71:30:aa:5e:8c:28:ff:e8:00:83:b1:
         eb:16:e8:7a:76:ae:07:95:87:5b:b6:57:9e:66:4d:6f:41:35:
         d1:50:d0:36:52:74:16:ee:57:40:2d:f9:1a:e3:6b:e6:fc:c0:
         04:61:d7:26:42:7a:b5:2b:35:2a:bb:96:62:d9:c9:80:27:a1:
         01:f3:56:77:90:0e:d6:52:30:31:0d:66:38:2c:1b:6e:f3:b3:
         ef:63:d1:f4:f3:7d:1a:c2:55:06:de:35:4c:5a:64:8c:3f:a7:
         5b:11:01:08:c8:cd:d6:49:00:85:33:f1:0b:10:ac:7f:70:0a:
         f9:d6:30:37:8c:01:0e:40:95:ca:ee:ae:2a:b1:1d:b8:e7:a4:
         b4:41:ea:1f:83:3c:23:1d:f9:38:00:f8:30:3f:08:41:2c:65:
         41:09:14:69:63:43:fe:47:c1:be:83:fd:6c:a7:e7:8e:68:a0:
         1b:be:9e:6b:03:c5:b0:0a:07:39:13:ed:3a:40:41:0a:b0:12:
         4c:f8:50:a6:75:2f:b0:54:d2:a2:45:7d:dd:c2:7a:09:85:36:
         c5:c9:ef:0c:2c:9b:b5:c2:53:b8:ea:49:4e:c3:04:a5:18:bb:
         70:c1:e1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:36:21 2026 by rpki-client