This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/FyMBoEGioj_dsmDJj-ikFJwt8rk.roa
File:                     FyMBoEGioj_dsmDJj-ikFJwt8rk.roa (raw, json)
Hash identifier:          um7JctGs28pyaDiqpyjltt0/B/jCArUTgznU+S7I78U=
Subject key identifier:   17:23:01:A0:41:A2:A2:3F:DD:B2:60:C9:8F:E8:A4:14:9C:2D:F2:B9
Certificate issuer:       /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial:       019B77C767E846F9C1398D0D712674BF5CAB
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/FyMBoEGioj_dsmDJj-ikFJwt8rk.roa
Signing time:             Thu 01 Jan 2026 04:18:35 +0000
ROA not before:           Thu 01 Jan 2026 04:18:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207416
IP address blocks:        178.236.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:67:e8:46:f9:c1:39:8d:0d:71:26:74:bf:5c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
        Validity
            Not Before: Jan  1 04:18:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=172301a041a2a23fddb260c98fe8a4149c2df2b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c3:be:c0:50:18:fa:dc:82:9f:3b:00:51:d1:
                    a6:1f:1e:45:90:d3:15:f5:74:79:aa:b1:b5:7c:e9:
                    85:6e:f7:c6:e7:30:7e:87:28:ab:cd:13:ac:f1:c8:
                    2a:e4:4a:a3:82:69:41:64:e1:13:8f:41:08:f7:d5:
                    25:3a:68:da:21:44:6e:46:c5:5c:f4:6e:88:a3:83:
                    ac:08:ee:3f:55:c3:1f:94:74:d2:e2:89:7f:bb:bb:
                    e4:99:33:d3:51:4a:1a:b2:5a:25:33:ef:0b:32:ce:
                    bb:ad:7f:61:6b:65:16:e4:bf:ad:63:99:4b:1e:de:
                    92:9b:2d:0b:6f:02:27:3e:ac:6a:2d:5d:e4:48:28:
                    80:64:f5:35:77:ef:f4:7f:07:04:6b:5f:b0:3b:c6:
                    a0:9e:ef:e3:ad:c2:dd:42:03:a1:dc:93:58:07:2f:
                    fe:b8:60:d3:9c:75:ec:c7:dd:1b:36:73:c2:98:dd:
                    80:f9:99:4b:d3:6f:8b:3e:8f:4c:f9:20:85:ef:ad:
                    19:7a:38:85:cb:9c:d3:a5:b0:ad:c3:aa:19:ed:11:
                    6a:4f:25:37:79:f3:4d:b8:8b:03:df:36:b8:37:da:
                    c7:9b:73:a2:d4:71:db:e8:10:86:01:71:7e:12:1d:
                    3e:41:2a:be:cf:ff:57:7b:6d:c7:0d:9b:b3:95:bb:
                    c2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:23:01:A0:41:A2:A2:3F:DD:B2:60:C9:8F:E8:A4:14:9C:2D:F2:B9
            X509v3 Authority Key Identifier:
                keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/FyMBoEGioj_dsmDJj-ikFJwt8rk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.236.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:51:4a:46:f4:66:42:86:d9:24:e5:c2:02:69:26:09:fc:de:
         b9:60:55:ae:6e:e8:ba:4e:9b:5c:6e:53:f6:42:72:64:02:b5:
         91:cd:76:2c:8f:8c:cc:0d:2c:45:0e:18:94:4b:17:03:f4:94:
         f9:c6:bc:84:9e:77:76:85:60:fd:b5:c3:ff:fe:ea:62:4c:09:
         90:e1:fc:b9:a6:02:5a:ff:23:a4:85:65:38:4a:04:81:68:4b:
         29:9c:ea:4f:1a:3a:45:fb:4b:50:8b:0d:85:3e:29:b4:42:cd:
         85:fb:ba:32:6d:ee:94:f5:8d:75:28:6a:bc:85:9d:81:2d:ae:
         36:8a:d6:8a:fa:b7:6c:17:c9:a7:38:a2:28:b4:4a:5c:bf:1a:
         0e:45:52:72:ba:0e:1f:b1:b5:f5:a1:2e:af:61:eb:42:42:1c:
         63:55:e6:31:b6:bc:b2:40:ea:90:e2:21:52:34:73:f6:b3:11:
         a0:39:82:94:76:28:2f:41:f0:29:0a:6b:5a:36:d6:cd:15:ef:
         a5:63:e9:84:11:6c:e1:8b:7c:f0:c6:ab:f3:66:75:39:3e:5e:
         44:52:6a:11:01:70:62:39:55:d6:dd:68:fe:fd:8c:54:39:3f:
         d3:cd:3a:e2:41:16:dc:85:31:c8:42:7b:75:82:2a:c0:f7:16:
         f6:2f:59:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:06:06 2026 by rpki-client