This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/fSxv-fa820aQ4S9EYgBkeHgJYUs.roa
File:                     fSxv-fa820aQ4S9EYgBkeHgJYUs.roa (raw, json)
Hash identifier:          K47nAqoGk2oEUNxR6ydvT1zDvrh8m0EYPg1t6S3F6ac=
Subject key identifier:   7D:2C:6F:F9:F6:BC:DB:46:90:E1:2F:44:62:00:64:78:78:09:61:4B
Certificate issuer:       /CN=f89e229f860b058d23fd28a2926161b8786330c6
Certificate serial:       019B8D2652F39545DF91CC07520E847A3D47
Authority key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/fSxv-fa820aQ4S9EYgBkeHgJYUs.roa
Signing time:             Mon 05 Jan 2026 07:54:17 +0000
ROA not before:           Mon 05 Jan 2026 07:54:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15404
IP address blocks:        193.102.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:8d:26:52:f3:95:45:df:91:cc:07:52:0e:84:7a:3d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89e229f860b058d23fd28a2926161b8786330c6
        Validity
            Not Before: Jan  5 07:54:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7d2c6ff9f6bcdb4690e12f44620064787809614b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cc:09:33:8d:32:c9:32:61:de:9a:04:2f:81:
                    13:27:41:44:da:de:cf:3e:c4:10:54:a2:0c:79:07:
                    04:5b:d5:0a:42:50:2c:a9:5c:9c:e6:a9:ef:12:72:
                    46:ba:d2:57:9d:c4:65:48:c3:44:9c:62:46:ec:89:
                    0d:d9:74:2f:0d:be:9d:13:d8:f5:28:5a:83:a2:94:
                    2d:2e:fe:96:d0:da:c6:d3:31:c8:79:3d:34:05:dc:
                    9a:b1:80:86:fa:d1:e2:72:11:d3:6c:a8:f0:a2:17:
                    02:01:ea:c9:6f:07:32:6a:ab:ff:5e:ba:44:28:19:
                    34:c2:f4:4b:51:96:89:51:b5:c1:d5:55:aa:fc:36:
                    a4:f4:17:20:28:34:2a:80:d4:3b:ca:0c:1f:d9:2d:
                    59:02:4f:35:2e:54:89:a9:72:55:2c:09:23:3c:7c:
                    49:47:d0:34:b7:38:85:6e:c5:63:53:95:09:49:86:
                    61:c8:da:db:9b:1f:d6:58:66:10:1c:dd:29:d6:2d:
                    37:44:b9:54:e3:0c:a4:54:2f:df:ca:92:5d:52:62:
                    69:86:a3:e1:b5:9b:08:56:df:75:cb:52:94:9d:20:
                    56:8b:c1:1a:91:8c:a3:d6:bc:f1:c4:61:0c:bb:8a:
                    78:6f:75:62:4f:a6:57:76:05:60:09:17:56:b0:6d:
                    59:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2C:6F:F9:F6:BC:DB:46:90:E1:2F:44:62:00:64:78:78:09:61:4B
            X509v3 Authority Key Identifier:
                keyid:F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/fSxv-fa820aQ4S9EYgBkeHgJYUs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.102.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:c4:c4:63:08:8b:e7:c0:ff:87:d9:f3:5e:1f:f9:71:a0:1e:
         99:52:80:f5:19:a4:d9:8a:06:01:2e:19:ca:9b:35:64:55:49:
         de:1c:85:da:bb:66:ff:88:d9:e2:80:df:84:01:13:77:80:0d:
         ac:7f:65:4d:f5:8a:32:b9:16:1e:fd:b9:2d:5b:cb:8c:cd:7c:
         03:76:e6:d2:27:1e:37:36:0f:2e:19:be:9e:e7:79:18:47:e9:
         6d:53:31:b8:76:c1:1e:35:65:35:fc:56:c9:3c:34:e7:70:06:
         97:2b:71:fb:ea:61:01:76:2b:e5:25:89:05:40:ad:e9:f2:88:
         11:b7:b6:ce:62:94:90:0c:1b:01:ac:4e:7f:40:d0:e2:bc:38:
         04:b6:7f:0c:43:d2:7f:7f:4c:0e:7a:a7:b7:fe:30:1f:fd:86:
         a6:88:0f:00:6d:65:79:04:f3:6d:fc:74:a6:a0:e8:a2:73:33:
         90:84:58:7b:e4:73:d3:40:42:49:fc:f9:aa:23:00:9e:b0:89:
         c1:2f:69:a5:d6:19:77:17:27:55:a2:52:72:2a:6a:56:08:92:
         cb:d8:94:e6:15:12:fa:b5:3a:0f:41:e2:25:e3:33:ff:85:96:
         58:67:7c:6a:ab:a5:82:99:51:6c:0c:a9:94:8a:3d:31:1e:ce:
         f5:b0:7c:50
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZuNJlLzlUXfkcwHUg6Eej1HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OWUyMjlmODYwYjA1OGQyM2ZkMjhhMjkyNjE2MWI4Nzg2
MzMwYzYwHhcNMjYwMTA1MDc1NDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDJjNmZmOWY2YmNkYjQ2OTBlMTJmNDQ2MjAwNjQ3ODc4MDk2MTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8wJM40yyTJh3poEL4ETJ0FE2t7P
PsQQVKIMeQcEW9UKQlAsqVyc5qnvEnJGutJXncRlSMNEnGJG7IkN2XQvDb6dE9j1
KFqDopQtLv6W0NrG0zHIeT00BdyasYCG+tHichHTbKjwohcCAerJbwcyaqv/XrpE
KBk0wvRLUZaJUbXB1VWq/Dak9BcgKDQqgNQ7ygwf2S1ZAk81LlSJqXJVLAkjPHxJ
R9A0tziFbsVjU5UJSYZhyNrbmx/WWGYQHN0p1i03RLlU4wykVC/fypJdUmJphqPh
tZsIVt91y1KUnSBWi8EakYyj1rzxxGEMu4p4b3ViT6ZXdgVgCRdWsG1Z0wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFH0sb/n2vNtGkOEvRGIAZHh4CWFLMB8GA1UdIwQY
MBaAFPieIp+GCwWNI/0oopJhYbh4YzDGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1KNGluNFlMQlkwal9TaWlrbUZodUhoak1NWS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvOGNjYTMzLWMyYjEtNDU0MS05ZWYy
LWFhMGViNTNlOTBiOS8xL2ZTeHYtZmE4MjBhUTRTOUVZZ0JrZUhnSllVcy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYTQvOGNjYTMzLWMyYjEtNDU0MS05ZWYyLWFhMGViNTNlOTBi
OS8xLzEtSjRpbjRZTEJZMGpfU2lpa21GaHVIaGpNTVkuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBZk8w
DQYJKoZIhvcNAQELBQADggEBAGXExGMIi+fA/4fZ814f+XGgHplSgPUZpNmKBgEu
GcqbNWRVSd4chdq7Zv+I2eKA34QBE3eADax/ZU31ijK5Fh79uS1by4zNfAN25tIn
Hjc2Dy4Zvp7neRhH6W1TMbh2wR41ZTX8Vsk8NOdwBpcrcfvqYQF2K+UliQVAreny
iBG3ts5ilJAMGwGsTn9A0OK8OAS2fwxD0n9/TA56p7f+MB/9hqaIDwBtZXkE8238
dKag6KJzM5CEWHvkc9NAQkn8+aojAJ6wicEvaaXWGXcXJ1WiUnIqalYIksvYlOYV
Evq1Og9B4iXjM/+FllhnfGqrpYKZUWwMqZSKPTEezvWwfFA=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:14:13 2026 by rpki-client