This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/FtL8JAR5L3QuiWjveQYYqx5Vysc.roa
File:                     FtL8JAR5L3QuiWjveQYYqx5Vysc.roa (raw, json)
Hash identifier:          TDzblppwWN3R0n7X/3t6Y/QCHzmL0n6aO41HLuZVCKU=
Subject key identifier:   16:D2:FC:24:04:79:2F:74:2E:89:68:EF:79:06:18:AB:1E:55:CA:C7
Certificate issuer:       /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial:       019B79ED45CA7D9F644D920102ACC89E07EB
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/FtL8JAR5L3QuiWjveQYYqx5Vysc.roa
Signing time:             Thu 01 Jan 2026 14:19:11 +0000
ROA not before:           Thu 01 Jan 2026 14:19:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47713
IP address blocks:        95.140.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:45:ca:7d:9f:64:4d:92:01:02:ac:c8:9e:07:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
        Validity
            Not Before: Jan  1 14:19:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=16d2fc2404792f742e8968ef790618ab1e55cac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:e2:b8:9f:42:31:5a:b6:d9:40:76:77:ca:
                    4a:6b:a0:60:70:61:61:06:de:c9:f3:58:94:55:7e:
                    ec:18:31:51:a5:aa:26:27:ab:03:07:75:d0:85:f3:
                    16:80:67:04:c3:14:40:f2:50:9a:c0:0c:aa:38:52:
                    3c:df:0a:86:18:d8:4a:5e:eb:e5:a6:2c:ac:cf:87:
                    30:05:1c:49:27:cd:24:7d:13:94:be:f8:c9:43:8f:
                    2e:87:da:94:bc:26:33:a2:cd:ab:c8:6c:70:18:b8:
                    11:91:a5:50:e7:aa:81:8c:f5:53:ad:4e:6c:54:c2:
                    26:02:63:f1:fd:0a:94:d0:26:4f:66:0a:c8:66:ec:
                    7b:a7:2e:94:8b:fb:e7:2f:ef:d1:70:51:10:b6:01:
                    5e:85:db:73:99:f1:a1:1e:03:65:bd:e9:01:cf:ec:
                    75:b6:e7:d1:e2:be:21:b5:69:07:64:6d:ac:cb:e7:
                    2f:c9:08:2f:8b:9d:5e:84:96:35:95:56:7c:7f:bd:
                    1b:7c:d4:6f:f2:cb:70:8d:ce:55:82:11:4b:3e:2f:
                    cc:3b:75:54:bb:50:b9:5b:7c:07:dc:c5:48:6b:f1:
                    68:3c:c9:35:6a:d8:8a:58:69:b8:3d:f9:e1:8f:66:
                    fb:98:fa:06:8d:68:5f:19:1f:a3:87:46:b1:5b:21:
                    47:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D2:FC:24:04:79:2F:74:2E:89:68:EF:79:06:18:AB:1E:55:CA:C7
            X509v3 Authority Key Identifier:
                keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/FtL8JAR5L3QuiWjveQYYqx5Vysc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.140.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:f2:b9:6b:2b:32:7e:20:0c:aa:18:82:d2:cb:1c:5a:98:6e:
         a2:dc:b4:0a:a0:b4:51:40:31:32:c3:71:6b:e0:9c:f0:74:c2:
         f8:84:da:e9:2b:7f:f2:a2:86:1d:45:af:5d:94:37:29:cb:f2:
         5f:a6:ef:27:dc:f2:be:be:31:d7:82:a1:ae:8c:22:d4:ad:a5:
         ed:9f:60:88:2d:80:3c:2a:b0:ff:15:cb:ed:77:c1:57:eb:d0:
         c2:f4:b6:c8:a0:c7:e0:a8:db:d0:22:a3:d9:17:c9:63:15:a2:
         5b:7b:c0:da:04:82:3c:53:95:95:02:ad:9e:ba:d4:0e:ab:73:
         62:77:b7:b4:6a:fd:af:bb:e0:c5:38:23:7e:e4:5e:a8:8b:e5:
         bd:53:86:80:bc:7d:36:37:69:33:2e:f3:45:ad:f2:00:2e:d0:
         07:97:2e:50:bc:8b:6f:30:76:72:5a:54:fb:36:91:90:5a:b1:
         f5:4d:59:11:93:09:64:16:49:ae:66:88:01:f4:ac:66:18:11:
         1b:5b:65:b8:89:47:39:7c:0f:bf:7c:65:d4:ef:c2:95:54:39:
         d4:f8:ab:36:00:40:d0:48:9e:38:8a:a8:1c:82:9d:64:dd:5d:
         b1:5a:c0:9c:52:bf:f1:3d:83:81:27:b6:79:d8:53:21:1f:49:
         f3:15:a2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:31 2026 by rpki-client