This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/T-FG9QXYVrOvJD0ZFGx161F8-rE.roa
File:                     T-FG9QXYVrOvJD0ZFGx161F8-rE.roa (raw, json)
Hash identifier:          fwBMGesT+i5+7hG4n6yFeYoLnMkVAp9abEUuKCI4Q+A=
Subject key identifier:   4F:E1:46:F5:05:D8:56:B3:AF:24:3D:19:14:6C:75:EB:51:7C:FA:B1
Certificate issuer:       /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial:       019B7D5AE281E958D38E31297825D20266C0
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/T-FG9QXYVrOvJD0ZFGx161F8-rE.roa
Signing time:             Fri 02 Jan 2026 06:17:46 +0000
ROA not before:           Fri 02 Jan 2026 06:17:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204393
IP address blocks:        185.187.48.0/24 maxlen: 24
                          185.187.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5a:e2:81:e9:58:d3:8e:31:29:78:25:d2:02:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
        Validity
            Not Before: Jan  2 06:17:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4fe146f505d856b3af243d19146c75eb517cfab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8d:74:40:4a:b1:03:04:09:f3:a4:9d:33:2c:
                    40:03:25:11:75:01:9b:d6:88:fb:59:f4:20:50:01:
                    85:dd:dd:cd:68:37:9e:d7:01:ab:ec:57:4e:09:f3:
                    42:23:50:9f:a4:2e:e6:83:7c:ab:ff:19:7f:d7:31:
                    3f:13:b1:95:6e:dc:95:08:a8:4e:f6:18:b2:6c:de:
                    84:6c:23:8f:32:1b:f5:cb:88:2e:1d:56:fb:7d:5c:
                    55:27:43:59:16:aa:6c:31:76:65:fe:0b:dd:61:b3:
                    09:14:51:76:1a:c6:66:4f:72:53:51:b3:69:9f:93:
                    c6:a2:1d:46:a3:47:8d:aa:d8:d9:9f:4c:79:70:cf:
                    61:8c:17:be:dc:20:8d:ef:7e:61:ba:7e:d0:59:58:
                    98:6b:c8:7a:e3:ab:c7:4e:80:2b:d1:2b:db:af:ba:
                    a4:4b:35:b0:d5:e6:a4:79:2e:26:45:20:92:02:9b:
                    3b:77:1c:68:7b:56:a5:90:63:d0:b4:13:c5:b2:03:
                    15:67:eb:e4:b0:d7:d0:78:b8:6c:19:86:1a:09:c5:
                    3c:d2:c6:03:70:83:90:16:f6:25:10:7c:40:f7:7a:
                    12:88:e9:f0:f1:65:14:ce:6f:68:ec:9f:2a:b5:83:
                    23:35:41:ba:05:cf:4b:c1:a6:eb:c4:c0:a6:11:32:
                    7c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E1:46:F5:05:D8:56:B3:AF:24:3D:19:14:6C:75:EB:51:7C:FA:B1
            X509v3 Authority Key Identifier:
                keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/T-FG9QXYVrOvJD0ZFGx161F8-rE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:36:e1:a6:80:5b:2b:c0:65:4b:0f:ce:43:0d:d9:c9:22:eb:
         72:9b:98:87:7a:ba:cf:32:67:e5:6a:61:fd:e3:87:97:7f:c9:
         7b:d5:76:89:2e:43:1b:40:01:40:1e:71:45:7b:62:45:3e:ff:
         34:40:a6:e3:c6:f7:b7:5b:7c:3d:0e:16:c4:ed:e5:83:ff:b3:
         c5:7e:5e:93:be:92:7f:34:92:c6:b2:bd:f4:93:2f:a0:bc:ea:
         28:20:96:00:ee:9a:2c:55:64:4d:90:36:41:2c:04:d1:1a:bf:
         8b:e7:31:22:e3:2d:92:60:fb:5b:65:f0:c4:a3:af:91:10:f4:
         f3:c1:3a:d4:91:1d:e3:d2:cc:35:ef:9f:e0:c2:ad:e6:26:41:
         59:86:ab:a3:6d:e7:cd:24:79:aa:a9:c7:1f:10:29:18:74:51:
         b0:b3:b0:0b:cd:bf:85:c6:39:85:37:40:16:7d:9d:96:ec:44:
         dd:a0:9f:2d:c8:29:9f:9a:6d:42:58:80:8c:eb:b1:41:fa:ec:
         14:ad:a9:d2:c2:cb:10:fa:d9:e0:62:a8:c0:d8:d9:31:2e:ed:
         f2:d2:b6:5e:21:c5:47:26:d2:1d:80:8b:1f:69:23:c5:93:c0:
         ea:06:76:85:d5:8b:58:42:bf:71:d0:27:a7:9f:4e:ed:55:5a:
         75:6f:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:40:23 2026 by rpki-client