This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/Fq9jYIALK48Q3aXTspZ-EOBUjAk.roa
File:                     Fq9jYIALK48Q3aXTspZ-EOBUjAk.roa (raw, json)
Hash identifier:          +W+cPf/LWfCqktynR8k96IJai5gjN2wCMM+/QBq3qWs=
Subject key identifier:   16:AF:63:60:80:0B:2B:8F:10:DD:A5:D3:B2:96:7E:10:E0:54:8C:09
Certificate issuer:       /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial:       019B7EA6DAEF3AF7CDAA06AB2CD2477BD7BA
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/Fq9jYIALK48Q3aXTspZ-EOBUjAk.roa
Signing time:             Fri 02 Jan 2026 12:20:22 +0000
ROA not before:           Fri 02 Jan 2026 12:20:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     2200
IP address blocks:        134.246.0.0/16 maxlen: 16
                          192.44.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:da:ef:3a:f7:cd:aa:06:ab:2c:d2:47:7b:d7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
        Validity
            Not Before: Jan  2 12:20:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=16af6360800b2b8f10dda5d3b2967e10e0548c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d4:f5:54:cd:29:ca:ee:f4:22:49:a6:45:87:
                    2c:a6:85:5e:01:94:fe:3f:05:0c:8b:18:07:fb:3e:
                    c4:18:83:7f:48:a0:12:90:43:90:ae:39:2f:e3:db:
                    a7:46:5e:75:47:4b:22:ed:83:77:81:ec:3a:4d:74:
                    77:3c:03:9e:6a:98:dc:0e:c2:93:48:ae:a8:45:02:
                    3b:2b:f7:ed:16:e8:43:20:ec:70:93:74:28:af:9b:
                    15:43:01:fa:26:93:dd:92:8c:4d:cb:22:61:d0:2d:
                    14:de:2d:55:64:91:d2:23:bf:96:b6:33:78:61:4b:
                    03:39:fc:44:1b:24:68:42:68:ff:4b:81:e7:09:27:
                    f3:e7:fb:36:ec:7f:82:d6:da:88:69:93:df:bc:4f:
                    0d:69:b5:b6:ae:c4:e5:a1:20:fc:68:24:8c:0f:0b:
                    72:0d:00:c9:1d:40:1c:09:14:e8:e5:7d:93:19:5f:
                    1c:70:73:c4:09:8a:3d:f9:56:42:13:a8:2b:12:1a:
                    d6:2a:0e:00:7a:9b:c1:2b:34:70:35:08:d1:07:a3:
                    eb:3e:94:af:9b:f7:9e:98:88:10:1a:77:82:4c:6a:
                    58:dd:cc:f5:11:b3:0f:95:86:c9:ea:8a:cb:b5:24:
                    77:f4:db:88:84:22:99:a2:1b:de:02:dd:41:84:5e:
                    90:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AF:63:60:80:0B:2B:8F:10:DD:A5:D3:B2:96:7E:10:E0:54:8C:09
            X509v3 Authority Key Identifier:
                keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/Fq9jYIALK48Q3aXTspZ-EOBUjAk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.246.0.0/16
                  192.44.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:dd:69:26:61:24:31:cc:27:1a:35:2a:c5:ca:5a:73:13:33:
         ba:d1:45:fb:eb:09:e7:b4:92:19:f1:66:1f:07:91:87:87:77:
         be:9b:77:ef:bd:c7:a9:8a:92:b3:ee:ad:4c:91:7c:35:bd:e6:
         6b:eb:75:e9:8b:97:1e:28:a0:6e:dc:b2:0a:f0:a4:73:37:b0:
         3c:a5:5b:5c:71:38:0d:8a:fa:b0:14:9c:ae:53:d4:86:c7:8c:
         c2:b2:60:98:22:65:35:a7:c5:3f:d2:57:0e:70:4b:0b:ec:b4:
         a1:e5:53:13:b4:54:40:56:83:bc:2a:a2:b0:67:87:cd:26:c5:
         7c:5c:81:19:76:70:da:a3:90:8d:5a:3f:93:cf:6c:1a:16:29:
         95:90:68:cd:11:a7:2c:a9:14:d3:30:8a:d2:26:f6:18:1f:b5:
         be:5a:5c:6f:f4:2f:6b:a2:33:d3:4d:89:0b:6e:bb:e1:02:66:
         e7:6c:18:13:27:af:d7:f4:54:02:8b:4a:e9:7e:08:6e:b5:a1:
         6b:de:dc:36:bf:f8:3d:bd:4f:e0:bb:1b:50:d0:30:44:63:42:
         df:80:06:f2:ce:db:06:17:f5:5c:a4:e8:f4:da:db:0c:0f:f6:
         7d:95:c1:42:e4:92:fc:89:5c:7f:c9:9d:38:ea:5e:b1:37:0d:
         fe:55:3f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:06:11 2026 by rpki-client