This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/fdTnyPooQgysuP5rftvVBVmGZkM.roa
File:                     fdTnyPooQgysuP5rftvVBVmGZkM.roa (raw, json)
Hash identifier:          1Ez2zy7PUBhosjdmVB2WhVRBoqQ4qi56zfybOmR+pWs=
Subject key identifier:   7D:D4:E7:C8:FA:28:42:0C:AC:B8:FE:6B:7E:DB:D5:05:59:86:66:43
Certificate issuer:       /CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
Certificate serial:       019B7B35760CBC5EB920D5D5EA7F91EBF62F
Authority key identifier: 78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/fdTnyPooQgysuP5rftvVBVmGZkM.roa
Signing time:             Thu 01 Jan 2026 20:17:39 +0000
ROA not before:           Thu 01 Jan 2026 20:17:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203735
IP address blocks:        185.89.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:76:0c:bc:5e:b9:20:d5:d5:ea:7f:91:eb:f6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
        Validity
            Not Before: Jan  1 20:17:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7dd4e7c8fa28420cacb8fe6b7edbd50559866643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3a:c6:e0:df:d2:e8:25:a4:85:33:db:84:16:
                    1c:8e:ac:0b:6a:58:e4:74:2d:92:7a:1f:73:69:2b:
                    8e:fe:c5:46:48:ec:8a:51:10:99:84:fb:03:f6:82:
                    e0:71:5a:f2:34:1e:e6:d2:0c:b1:03:2f:ea:eb:10:
                    e9:17:de:26:bc:fb:c1:91:8d:7c:a0:c7:65:1a:f9:
                    00:58:28:5f:5e:01:bd:1b:c3:d1:11:02:bd:df:3c:
                    e5:91:01:e1:9c:cf:d4:7c:ad:94:8e:55:66:b8:28:
                    01:24:28:88:e3:3f:20:46:c3:86:92:49:5c:4e:a9:
                    d7:b6:6e:42:1f:34:a6:dc:75:fd:87:14:5b:d0:83:
                    d2:49:11:27:22:67:b1:35:83:35:14:4c:32:3c:77:
                    92:38:70:e1:7f:13:a5:d5:15:43:e6:53:67:a1:34:
                    35:a1:a5:59:e4:cf:8f:35:e4:c1:37:63:2b:28:b0:
                    e4:43:8a:b3:bc:b0:0c:47:c6:ce:57:bf:ef:fd:36:
                    07:29:76:9e:fe:b5:d1:da:a7:79:0e:68:5e:33:06:
                    8a:64:7a:61:49:a5:94:e3:86:f8:f4:49:01:ba:94:
                    3c:35:fc:2b:c3:17:b8:47:6e:f2:e7:a0:8a:5b:76:
                    78:2c:e9:84:b8:ca:b1:d6:e4:a5:da:04:a6:ea:f3:
                    30:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D4:E7:C8:FA:28:42:0C:AC:B8:FE:6B:7E:DB:D5:05:59:86:66:43
            X509v3 Authority Key Identifier:
                keyid:78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/fdTnyPooQgysuP5rftvVBVmGZkM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.89.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:88:08:2e:9d:85:7f:eb:a6:4d:63:48:c7:bd:28:c3:08:fd:
         5b:02:8a:35:76:62:18:78:ea:79:0c:35:cd:50:a1:33:9b:09:
         fd:e9:ae:57:41:38:73:6d:28:b3:6e:3a:8e:8c:0a:bd:7e:33:
         b6:bf:f2:f7:4a:24:e1:92:0b:1f:4e:9f:16:e2:68:36:04:2e:
         39:d3:36:8a:e8:47:24:2f:ac:2a:d2:e5:6d:0c:b2:01:48:7a:
         15:90:de:31:1a:4f:58:2a:f3:70:00:dd:bd:5d:8d:4c:c3:06:
         fc:28:df:45:0c:f6:81:e7:18:cc:6c:c8:01:ce:c2:2b:cd:6d:
         1a:13:05:b9:9a:05:f7:f3:3e:e0:6c:1f:15:bb:24:41:66:8b:
         b8:cc:48:cd:cf:0b:b9:e9:2f:83:7a:d6:9b:0e:93:6a:9f:e9:
         b3:96:4f:26:4d:2c:12:0c:b0:96:73:3d:b7:0c:4d:9e:ca:53:
         8e:ea:f4:70:d6:6c:91:d2:b5:a5:4b:1d:54:01:38:13:a5:2f:
         c1:d4:29:1d:05:08:b7:29:d2:72:29:d7:c0:c6:c2:01:68:a2:
         0b:a1:0c:77:ea:0e:ae:88:32:80:2b:29:90:c6:c4:fe:d2:cf:
         ea:1f:a1:47:35:17:bc:e2:5e:72:56:aa:46:a1:89:9f:2b:e8:
         bd:fb:83:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:50:40 2026 by rpki-client