This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/FLCXZv52Px-CZzRLYFaR8M7eofc.roa
File:                     FLCXZv52Px-CZzRLYFaR8M7eofc.roa (raw, json)
Hash identifier:          IKg7ZRnEyD+XaQYKD0fKaXhVGFOe87NFrwlrLUXRFsc=
Subject key identifier:   14:B0:97:66:FE:76:3F:1F:82:67:34:4B:60:56:91:F0:CE:DE:A1:F7
Certificate issuer:       /CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Certificate serial:       019B7B35415B4EE3E9A94435DB0C4C0AD1E7
Authority key identifier: 7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/FLCXZv52Px-CZzRLYFaR8M7eofc.roa
Signing time:             Thu 01 Jan 2026 20:17:26 +0000
ROA not before:           Thu 01 Jan 2026 20:17:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208273
IP address blocks:        93.115.60.0/24 maxlen: 24
                          93.115.61.0/24 maxlen: 24
                          2a05:840:50::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:41:5b:4e:e3:e9:a9:44:35:db:0c:4c:0a:d1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
        Validity
            Not Before: Jan  1 20:17:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=14b09766fe763f1f8267344b605691f0cedea1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:4f:83:76:60:35:94:e6:f9:39:4d:4d:92:
                    13:d4:b7:ac:e2:8c:7d:15:1a:c8:cf:96:6e:2c:aa:
                    de:5e:28:79:60:9f:bc:c2:54:9d:17:ae:65:f8:6a:
                    f4:0c:ae:0c:3c:35:50:d9:08:4d:ba:4a:ba:45:59:
                    72:6c:a9:d1:81:be:5b:3b:d5:ab:fb:27:13:91:18:
                    8c:97:ae:19:0a:b2:fe:3e:0f:b0:58:35:5d:fd:af:
                    53:49:50:55:28:1c:7c:75:94:92:84:14:c6:9c:a6:
                    b3:ac:6f:84:5a:91:9f:61:c1:de:5d:78:ce:8a:d0:
                    d7:03:0b:28:28:f7:ac:76:a2:ef:88:24:ae:51:33:
                    68:7e:87:41:26:b1:18:07:26:dc:b4:d0:0f:e4:1e:
                    bb:21:37:83:ec:1d:9d:34:0b:99:1e:b0:b5:46:b8:
                    b8:30:ac:42:1b:f6:c0:f4:c2:23:37:00:1d:e4:82:
                    f2:cc:fa:28:f0:50:1e:4d:a3:0e:c5:1e:64:ce:1c:
                    89:e1:84:0b:cb:19:af:f2:f6:75:87:ea:8f:0d:32:
                    fe:00:b8:1c:63:e5:4f:ab:e6:5e:63:d6:ab:f1:89:
                    91:ac:61:1e:29:87:5f:99:85:57:4c:87:a3:69:74:
                    29:3f:be:1d:b0:52:5c:60:c5:bd:85:c1:2d:af:a4:
                    95:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B0:97:66:FE:76:3F:1F:82:67:34:4B:60:56:91:F0:CE:DE:A1:F7
            X509v3 Authority Key Identifier:
                keyid:7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/FLCXZv52Px-CZzRLYFaR8M7eofc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.115.60.0/23
                IPv6:
                  2a05:840:50::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:d5:25:f1:96:52:7a:d5:1f:84:24:3f:67:01:20:02:4d:c0:
         f1:53:89:93:1d:f0:9d:19:4d:91:6f:2f:df:c8:6b:7e:1a:f2:
         78:7d:74:e7:9a:eb:31:4b:5f:b0:83:76:06:76:5c:15:0a:f9:
         6e:8b:d3:9d:5f:f7:c5:94:f1:4d:c9:ed:23:64:e2:83:97:d9:
         85:94:c5:9c:0a:33:38:d6:60:32:93:fb:40:98:8a:09:05:23:
         c3:ec:9a:d4:d5:f7:d6:d5:c2:96:75:e0:a7:20:e5:29:cd:bd:
         c2:26:a7:3f:c4:69:43:ad:fa:0f:98:b2:6c:9c:ad:d9:55:a6:
         95:4f:f2:98:6f:f6:ea:c5:f1:aa:92:62:a1:ec:72:b8:3f:74:
         43:8d:fa:ed:d6:cc:b5:41:1f:f6:6e:aa:d9:8c:7f:8a:af:7f:
         1b:4d:43:51:f0:80:29:dc:ab:b0:8e:f6:71:34:a6:84:4d:70:
         d4:77:4d:81:34:29:5b:e3:c6:db:d3:65:98:85:d7:f0:fa:b1:
         ea:29:34:6f:ff:af:d3:ff:47:a7:0f:ce:b2:0d:7c:f1:53:a3:
         97:86:56:8c:0b:c1:cf:61:f7:7b:9c:2a:f9:22:ec:96:d5:be:
         ee:ce:84:e8:4f:45:83:bb:61:0e:88:f5:f5:32:80:d2:d3:96:
         e1:7a:41:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:31:56 2026 by rpki-client