This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/FbBfmY8BU8VigyDn7YgxLgSnlUs.roa
File:                     FbBfmY8BU8VigyDn7YgxLgSnlUs.roa (raw, json)
Hash identifier:          tHVNex4gUdJAzQ5EQ6S1mMwVxpmtkwTF/khuntIVx8c=
Subject key identifier:   15:B0:5F:99:8F:01:53:C5:62:83:20:E7:ED:88:31:2E:04:A7:95:4B
Certificate issuer:       /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial:       019B77C727BC37DCA8E8CF7781971ABEC86C
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/FbBfmY8BU8VigyDn7YgxLgSnlUs.roa
Signing time:             Thu 01 Jan 2026 04:18:19 +0000
ROA not before:           Thu 01 Jan 2026 04:18:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     786
IP address blocks:        136.206.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:27:bc:37:dc:a8:e8:cf:77:81:97:1a:be:c8:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
        Validity
            Not Before: Jan  1 04:18:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=15b05f998f0153c5628320e7ed88312e04a7954b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:72:84:26:43:5f:9f:75:12:cd:48:71:d6:26:
                    10:38:4c:4e:38:5c:97:7c:7e:83:6a:53:60:b4:78:
                    d7:ef:8d:0e:23:26:bd:99:90:1a:74:ae:a2:49:70:
                    79:71:8b:b0:8e:77:4e:c1:36:7c:91:fe:2b:ac:51:
                    93:34:c8:1c:2f:6a:c2:73:be:80:6c:bb:26:b7:cb:
                    4a:54:60:82:5c:79:a8:10:68:2f:20:9d:1b:4c:a3:
                    8f:78:0e:8d:e2:b8:34:c8:35:7a:4e:06:34:05:2c:
                    2e:7a:b3:9b:0f:51:03:ec:36:3d:95:40:c3:53:fa:
                    e0:9e:ab:07:54:36:d9:cb:e9:ac:7a:ed:98:5d:6c:
                    8c:c2:17:14:4a:83:0f:40:dc:5d:df:3d:bd:31:4b:
                    ac:52:02:ae:51:28:89:c2:99:5a:92:8d:79:2d:d8:
                    93:fc:eb:ce:8a:5e:20:a0:52:4a:24:70:99:b3:0a:
                    66:1f:91:fd:a1:de:63:8f:fc:b4:aa:0f:e5:52:24:
                    5f:b7:7e:3d:3e:b0:bc:5a:94:dc:41:33:c6:83:3c:
                    a5:12:a7:51:95:27:2a:4a:d4:c9:23:69:61:14:bb:
                    e3:1c:63:52:16:58:00:c5:ff:fb:22:cf:21:25:1b:
                    64:85:03:7c:3e:41:ea:6c:ae:e0:63:03:d0:8f:00:
                    fe:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B0:5F:99:8F:01:53:C5:62:83:20:E7:ED:88:31:2E:04:A7:95:4B
            X509v3 Authority Key Identifier:
                keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/FbBfmY8BU8VigyDn7YgxLgSnlUs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.206.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ae:fe:97:90:75:76:2d:04:c8:0b:c0:02:48:1e:9b:6f:47:13:
         b8:a4:23:ef:ab:86:8d:48:04:8c:ce:62:c0:22:f5:17:c1:6f:
         37:4f:80:0c:72:44:ae:86:e4:b2:18:50:65:bf:cf:c0:8a:d8:
         cf:c4:ee:c1:58:21:24:96:09:14:ca:89:b5:e8:70:b5:35:f4:
         ad:bc:0c:1b:89:8d:3e:06:ab:67:18:96:aa:a9:0c:94:9a:56:
         c6:e7:94:4f:e2:52:18:51:df:e3:07:e9:d0:9c:77:d0:61:b0:
         07:1d:a9:a0:5d:99:dd:37:70:de:9c:22:31:e1:c4:16:82:70:
         fb:be:71:88:6f:7a:0e:e3:60:a7:cb:6f:0b:c8:82:50:f5:e8:
         07:5b:81:44:ff:9e:7c:43:75:25:b9:fe:3f:67:e0:da:c6:ed:
         d5:54:65:46:3a:6a:51:d2:e3:04:e2:6e:30:0f:0a:44:25:8d:
         e9:a9:3a:92:c5:dc:90:b4:a3:3e:30:e5:68:0f:79:7d:4c:83:
         63:06:92:8a:13:1b:80:6e:95:1d:92:b2:f9:f8:a0:a0:fe:fc:
         ad:78:f5:f5:53:12:79:93:e9:d1:87:0d:9e:a4:bf:e6:de:95:
         ee:4d:04:53:9d:6c:bc:ba:3c:6d:0b:c6:16:53:49:30:39:3c:
         91:1e:fa:e3
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZt3xye8N9yo6M93gZcavshsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlODNmNzg3OWMyYzc0YTExNjUyYjVlMDhhZjY0YWFjOTA4
MDBiMDQwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWIwNWY5OThmMDE1M2M1NjI4MzIwZTdlZDg4MzEyZTA0YTc5NTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXKEJkNfn3USzUhx1iYQOExOOFyX
fH6DalNgtHjX740OIya9mZAadK6iSXB5cYuwjndOwTZ8kf4rrFGTNMgcL2rCc76A
bLsmt8tKVGCCXHmoEGgvIJ0bTKOPeA6N4rg0yDV6TgY0BSwuerObD1ED7DY9lUDD
U/rgnqsHVDbZy+mseu2YXWyMwhcUSoMPQNxd3z29MUusUgKuUSiJwplako15LdiT
/OvOil4goFJKJHCZswpmH5H9od5jj/y0qg/lUiRft349PrC8WpTcQTPGgzylEqdR
lScqStTJI2lhFLvjHGNSFlgAxf/7Is8hJRtkhQN8PkHqbK7gYwPQjwD+QwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFBWwX5mPAVPFYoMg5+2IMS4Ep5VLMB8GA1UdIwQY
MBaAFK6D94ecLHShFlK14Ir2SqyQgAsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm9QM2g1d3NkS0VXVXJYZ2l2WktySkNBQ3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84NGQwMjYtMTdlNC00Nzg3LWE0Mzkt
NDczZDc0YTVlMjBmLzEvRmJCZm1ZOEJVOFZpZ3lEbjdZZ3hMZ1NubFVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84NGQwMjYtMTdlNC00Nzg3LWE0MzktNDczZDc0YTVlMjBm
LzEvcm9QM2g1d3NkS0VXVXJYZ2l2WktySkNBQ3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiM4wDQYJ
KoZIhvcNAQELBQADggEBAK7+l5B1di0EyAvAAkgem29HE7ikI++rho1IBIzOYsAi
9RfBbzdPgAxyRK6G5LIYUGW/z8CK2M/E7sFYISSWCRTKibXocLU19K28DBuJjT4G
q2cYlqqpDJSaVsbnlE/iUhhR3+MH6dCcd9BhsAcdqaBdmd03cN6cIjHhxBaCcPu+
cYhveg7jYKfLbwvIglD16AdbgUT/nnxDdSW5/j9n4NrG7dVUZUY6alHS4wTibjAP
CkQljempOpLF3JC0oz4w5WgPeX1Mg2MGkooTG4BulR2Ssvn4oKD+/K149fVTEnmT
6dGHDZ6kv+bele5NBFOdbLy6PG0LxhZTSTA5PJEe+uM=
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:03:22 2026 by rpki-client