This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/Fz37EzbKmOLuj47DZyVy-jxm8-Q.roa
File:                     Fz37EzbKmOLuj47DZyVy-jxm8-Q.roa (raw, json)
Hash identifier:          A6w0ljzejsJu2FbOvEwlydaqHScmNkC+q2dwLDsAXsw=
Subject key identifier:   17:3D:FB:13:36:CA:98:E2:EE:8F:8E:C3:67:25:72:FA:3C:66:F3:E4
Certificate issuer:       /CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Certificate serial:       019B7C1341A40494ECF5FD0F55456C28327D
Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/Fz37EzbKmOLuj47DZyVy-jxm8-Q.roa
Signing time:             Fri 02 Jan 2026 00:19:55 +0000
ROA not before:           Fri 02 Jan 2026 00:19:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     5408
IP address blocks:        193.218.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:41:a4:04:94:ec:f5:fd:0f:55:45:6c:28:32:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3
        Validity
            Not Before: Jan  2 00:19:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=173dfb1336ca98e2ee8f8ec3672572fa3c66f3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2b:f2:68:24:51:3a:64:de:40:58:95:49:2e:
                    69:83:53:6d:a1:29:f4:e5:dc:13:87:27:cb:75:8f:
                    24:2e:0d:7e:c1:03:81:a3:05:76:ad:65:ee:6a:76:
                    fd:60:c1:c2:c8:ea:ec:18:b4:54:f8:9a:25:ef:b2:
                    3c:29:f9:1e:26:35:0b:9b:39:53:9b:86:f9:7b:00:
                    11:50:0c:ca:44:22:66:4e:40:a1:92:b5:85:8b:84:
                    a0:e0:ac:70:e3:25:f6:1b:4b:f1:cf:e5:d3:71:9e:
                    18:f8:fc:56:34:1e:ec:cf:a7:c6:43:8f:3d:3a:47:
                    08:5b:d2:7f:46:06:d4:81:78:d8:33:6c:1a:07:3e:
                    37:55:e9:37:9e:a3:a6:b3:5b:b2:f9:16:de:ce:54:
                    80:3d:db:57:20:70:dc:76:80:fc:71:86:16:8e:d6:
                    2a:3d:74:49:83:51:e8:5d:bb:f0:83:db:7b:ba:81:
                    3d:83:e5:8f:cf:a8:6e:9f:8c:ac:ce:a4:a8:56:aa:
                    3d:4e:44:5c:f6:88:c9:62:0f:84:79:d3:bd:c6:e8:
                    42:05:e5:29:5a:7a:23:ba:6f:4a:71:1a:c2:0c:5b:
                    5a:2c:cf:9c:53:c8:78:93:ed:6c:54:87:8f:a2:6d:
                    00:0b:61:7d:9d:51:fb:71:07:ee:0f:f4:f9:d5:8f:
                    7c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3D:FB:13:36:CA:98:E2:EE:8F:8E:C3:67:25:72:FA:3C:66:F3:E4
            X509v3 Authority Key Identifier:
                keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/Fz37EzbKmOLuj47DZyVy-jxm8-Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.218.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:79:0c:6b:2c:81:99:54:fc:5b:ea:29:4a:a0:d6:ac:dc:97:
         a5:cc:37:26:cc:5a:e2:47:4d:66:59:b6:35:b4:0b:2d:cf:f5:
         07:fc:95:5f:82:65:df:4d:09:7e:94:c9:6f:99:81:a1:8b:69:
         0f:0f:4a:6d:fb:37:0f:45:9a:a4:03:62:54:3b:92:9c:48:e8:
         23:5e:2f:b8:35:60:be:f5:86:4e:bc:a9:38:e7:a0:e7:ed:7b:
         94:08:1d:8c:0a:03:34:27:77:ca:17:59:55:ab:a1:01:f8:94:
         9c:3e:eb:5e:6f:d6:e6:10:40:cf:6f:b8:81:21:25:9d:0a:ec:
         92:9c:ab:e7:06:97:2b:7b:5d:dd:cd:94:ff:15:3c:a5:d9:f6:
         12:3a:38:1a:c2:06:be:e7:43:2d:72:dd:db:dd:e7:51:42:70:
         d6:40:89:03:68:b5:63:a8:03:04:99:36:e4:c0:fd:be:3c:ef:
         9e:99:d5:25:1d:ac:88:99:01:dc:7b:99:69:76:93:03:18:7d:
         74:2f:76:c4:17:f4:34:f3:5e:1e:4e:ab:91:bc:55:bd:34:45:
         ec:15:2b:1e:5d:36:f0:5b:18:cb:78:50:de:cc:c2:45:5f:74:
         8c:70:ed:4a:46:76:ba:e8:3d:da:7b:60:dd:fb:de:15:7d:dd:
         20:db:19:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8E0GkBJTs9f0PVUVsKDJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZjdlZjMzZGQxOTY5MGQ5NDk0MWM5MmZiMzE0Nzk1NTBh
OTE3YjMwHhcNMjYwMTAyMDAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzNkZmIxMzM2Y2E5OGUyZWU4ZjhlYzM2NzI1NzJmYTNjNjZmM2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSvyaCRROmTeQFiVSS5pg1NtoSn0
5dwThyfLdY8kLg1+wQOBowV2rWXuanb9YMHCyOrsGLRU+Jol77I8KfkeJjULmzlT
m4b5ewARUAzKRCJmTkChkrWFi4Sg4Kxw4yX2G0vxz+XTcZ4Y+PxWNB7sz6fGQ489
OkcIW9J/RgbUgXjYM2waBz43Vek3nqOms1uy+RbezlSAPdtXIHDcdoD8cYYWjtYq
PXRJg1HoXbvwg9t7uoE9g+WPz6hun4yszqSoVqo9TkRc9ojJYg+EedO9xuhCBeUp
Wnojum9KcRrCDFtaLM+cU8h4k+1sVIePom0AC2F9nVH7cQfuD/T51Y98QQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBc9+xM2ypji7o+Ow2clcvo8ZvPkMB8GA1UdIwQY
MBaAFCv37zPdGWkNlJQckvsxR5VQqRezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83Yzg2YWYtZjJlNC00MGNlLWEzMDAt
MTdiOTRhYzU4Mzc1LzEvRnozN0V6YkttT0x1ajQ3RFp5VnktanhtOC1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83Yzg2YWYtZjJlNC00MGNlLWEzMDAtMTdiOTRhYzU4Mzc1
LzEvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwdp8MA0G
CSqGSIb3DQEBCwUAA4IBAQAjeQxrLIGZVPxb6ilKoNas3JelzDcmzFriR01mWbY1
tAstz/UH/JVfgmXfTQl+lMlvmYGhi2kPD0pt+zcPRZqkA2JUO5KcSOgjXi+4NWC+
9YZOvKk456Dn7XuUCB2MCgM0J3fKF1lVq6EB+JScPuteb9bmEEDPb7iBISWdCuyS
nKvnBpcre13dzZT/FTyl2fYSOjgawga+50Mtct3b3edRQnDWQIkDaLVjqAMEmTbk
wP2+PO+emdUlHayImQHce5lpdpMDGH10L3bEF/Q0814eTquRvFW9NEXsFSseXTbw
WxjLeFDezMJFX3SMcO1KRna66D3ae2Dd+94Vfd0g2xlA
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:32:58 2026 by rpki-client