This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/fiuDAzI4SIRR_2g3FzHMddSJC80.roa
File:                     fiuDAzI4SIRR_2g3FzHMddSJC80.roa (raw, json)
Hash identifier:          95Ucai10ikxenExMaTkLAinB4oSN/m/1cjRDEudlYp0=
Subject key identifier:   7E:2B:83:03:32:38:48:84:51:FF:68:37:17:31:CC:75:D4:89:0B:CD
Certificate issuer:       /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial:       019B7C1231C744E43AA7C2B36718623F83DB
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/fiuDAzI4SIRR_2g3FzHMddSJC80.roa
Signing time:             Fri 02 Jan 2026 00:18:45 +0000
ROA not before:           Fri 02 Jan 2026 00:18:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     12777
IP address blocks:        193.255.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:31:c7:44:e4:3a:a7:c2:b3:67:18:62:3f:83:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
        Validity
            Not Before: Jan  2 00:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7e2b83033238488451ff68371731cc75d4890bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:68:07:77:ea:d1:73:57:f1:24:64:80:37:1d:
                    be:34:2a:91:97:23:68:12:1d:ab:22:eb:b0:20:be:
                    90:20:8f:9c:61:03:a5:45:13:a0:97:17:64:aa:d6:
                    64:11:7e:75:a1:df:c6:12:f0:4b:c0:a3:63:0e:ed:
                    7d:fc:94:86:61:d9:eb:8d:08:7e:09:5f:53:bb:89:
                    f0:8f:2d:5e:61:66:34:72:e3:75:9c:8b:83:e2:38:
                    e2:12:6a:8b:15:87:2f:be:10:aa:20:46:ba:6d:6d:
                    8e:71:40:80:d2:85:db:22:a2:0a:b9:0a:74:31:51:
                    4e:d2:e8:eb:55:f0:0b:af:53:a1:3a:4c:2a:f3:3d:
                    c3:10:85:bf:9c:7c:d6:a0:1b:fa:04:48:d5:6b:2e:
                    b4:22:7d:71:e5:75:24:96:5c:2a:6a:fa:0a:06:51:
                    e3:45:00:77:ca:1a:8b:66:57:2c:ab:e8:e0:19:d3:
                    98:96:9e:93:df:93:7d:dc:2a:a7:1c:2e:05:f7:aa:
                    13:ce:31:1e:2c:ae:cb:18:a0:e8:d8:49:c8:e6:05:
                    fb:84:e4:45:b3:1b:7e:e0:18:4e:4e:df:18:c3:04:
                    15:94:03:40:65:a1:cd:10:54:45:de:9b:c2:1c:8f:
                    85:59:0b:dd:be:94:66:1f:2b:7d:60:22:bb:89:44:
                    e9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2B:83:03:32:38:48:84:51:FF:68:37:17:31:CC:75:D4:89:0B:CD
            X509v3 Authority Key Identifier:
                keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/fiuDAzI4SIRR_2g3FzHMddSJC80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.255.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:a9:6e:d2:6e:bb:16:55:a8:d1:ff:cd:5e:25:a9:7d:08:0b:
         0a:cb:21:34:fd:a3:87:4b:5c:f5:8c:9c:69:c7:4b:9e:76:0d:
         79:8c:e4:52:b0:88:5e:75:d6:4b:2b:3c:aa:ff:e2:0b:07:8a:
         45:64:80:ee:01:47:88:90:78:f5:c2:50:ff:9f:f1:5b:06:5d:
         3e:04:95:dc:ba:58:ae:7d:ab:8e:cd:97:04:64:5c:e2:ae:1a:
         e5:19:07:23:c3:be:c1:29:cd:e6:6b:66:c8:94:d9:85:6c:b2:
         bf:87:9a:bb:bb:a8:15:66:50:ae:20:b9:40:c3:00:42:76:6c:
         6e:df:b0:ec:7c:d4:d6:8a:66:b8:bb:a2:b6:7e:3e:9a:cc:f2:
         63:88:41:98:7d:fc:a0:7e:70:2b:e7:b7:5b:cd:be:ca:10:d9:
         f9:bd:fb:54:e0:ed:b4:c8:9c:e4:99:02:77:c6:16:b9:a8:7d:
         5d:f4:02:fb:db:13:da:7a:89:2e:0d:38:dd:53:9b:d8:12:ad:
         a2:2c:57:33:5b:b5:81:9c:a3:53:0d:d6:c8:50:f1:46:43:1a:
         78:30:93:39:d5:8e:fe:94:00:65:3a:3d:d9:3e:e5:28:99:62:
         7e:1c:9c:48:71:0c:3c:8e:0e:8d:7a:5c:7f:4d:db:ba:04:83:
         a7:5a:8f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:04:33 2026 by rpki-client