This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/FBXfctEgUEE-S-dd_yWnTE1RG6E.roa
File:                     FBXfctEgUEE-S-dd_yWnTE1RG6E.roa (raw, json)
Hash identifier:          rE0ZErAPOBAQk49VT2i9Zl+euws9XDKoSIpvW9WnBUc=
Subject key identifier:   14:15:DF:72:D1:20:50:41:3E:4B:E7:5D:FF:25:A7:4C:4D:51:1B:A1
Certificate issuer:       /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial:       019B7D5CFC8BF055940BF407596CCFD1034B
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/FBXfctEgUEE-S-dd_yWnTE1RG6E.roa
Signing time:             Fri 02 Jan 2026 06:20:04 +0000
ROA not before:           Fri 02 Jan 2026 06:20:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24756
IP address blocks:        85.219.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:fc:8b:f0:55:94:0b:f4:07:59:6c:cf:d1:03:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
        Validity
            Not Before: Jan  2 06:20:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1415df72d12050413e4be75dff25a74c4d511ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b0:31:7c:08:88:b8:d0:3d:f7:72:38:b1:b8:
                    b0:dd:83:86:67:e8:4b:a4:63:65:22:9b:ec:f0:87:
                    fd:7b:f8:5e:76:2a:0a:8e:69:70:84:dd:c3:68:e1:
                    a8:5c:0a:58:e7:b5:82:a9:44:a9:5b:44:fb:2b:c6:
                    9d:76:72:2c:c1:d7:72:38:1e:0f:ed:9e:43:a8:74:
                    e3:3d:31:44:43:cb:9a:dc:e6:9b:b8:a6:a8:a1:16:
                    95:78:61:01:a9:9b:f9:49:be:74:c4:f3:8f:57:d9:
                    b4:47:73:3c:fd:2d:f4:69:0c:1c:fe:a0:47:bf:ea:
                    6e:06:36:25:40:a2:28:46:ad:e7:9e:56:46:3e:45:
                    26:dc:d3:db:cb:ca:48:ef:ad:c4:86:4d:d0:77:b5:
                    3c:03:3d:12:14:31:b1:42:25:f0:17:5f:6a:57:1b:
                    ed:ec:6e:c1:b6:4c:80:6a:81:c6:14:5f:60:c4:18:
                    81:31:dc:8b:f4:e1:f7:c8:2b:9a:44:47:78:ee:02:
                    8f:f5:99:d9:29:ee:e4:4c:58:67:f8:44:d1:20:be:
                    fb:03:e4:e5:f2:1c:19:27:ab:87:09:58:7a:64:4a:
                    05:4d:92:df:98:fa:33:ed:ec:3f:69:5a:21:ab:03:
                    9e:bd:1e:82:40:aa:f5:7f:8a:6b:92:3e:15:8a:5d:
                    fd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:15:DF:72:D1:20:50:41:3E:4B:E7:5D:FF:25:A7:4C:4D:51:1B:A1
            X509v3 Authority Key Identifier:
                keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/FBXfctEgUEE-S-dd_yWnTE1RG6E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.219.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:77:9f:86:64:c9:b0:81:1f:04:13:eb:c7:18:37:51:0e:15:
         87:95:3b:52:00:c1:b0:a0:c6:a4:06:01:7a:1f:a8:5c:1d:64:
         33:d7:d3:b7:a1:c0:3f:a5:a6:1f:12:a3:40:fb:40:db:ba:26:
         d9:52:c9:6e:5c:90:aa:5e:82:c7:93:3c:54:35:37:f8:3e:d3:
         7e:59:d8:05:65:3a:a6:85:0d:a5:2f:b5:16:f5:60:f9:d9:a1:
         8d:f9:e5:d1:7a:f3:b0:ff:d2:c1:8e:3b:2d:ae:1b:ec:45:24:
         31:6c:d7:3e:f1:28:6e:9b:e7:d7:6f:2f:f4:15:d9:91:21:4e:
         41:1d:0e:c7:f3:db:f4:34:f2:c4:c8:80:32:74:23:39:f4:10:
         43:a5:91:5e:69:3f:f4:af:0a:9a:d1:4f:c1:13:9d:4d:30:27:
         cb:41:46:23:bd:46:5f:2d:3b:63:ba:77:aa:95:d7:00:3a:aa:
         03:85:ad:94:b9:7f:34:49:02:15:a9:31:7f:66:70:48:18:8c:
         bf:33:05:c3:7f:07:d0:52:3b:6f:5a:90:bb:9c:34:68:b1:6f:
         5a:d4:f2:f3:87:8a:44:46:03:01:3b:b5:bc:71:31:8a:ed:67:
         17:7e:6e:7a:06:f6:22:60:90:e4:75:03:f3:9a:85:b8:6c:e3:
         13:cb:03:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9XPyL8FWUC/QHWWzP0QNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj
ZWY5MzMwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDE1ZGY3MmQxMjA1MDQxM2U0YmU3NWRmZjI1YTc0YzRkNTExYmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07AxfAiIuNA993I4sbiw3YOGZ+hL
pGNlIpvs8If9e/hedioKjmlwhN3DaOGoXApY57WCqUSpW0T7K8addnIswddyOB4P
7Z5DqHTjPTFEQ8ua3OabuKaooRaVeGEBqZv5Sb50xPOPV9m0R3M8/S30aQwc/qBH
v+puBjYlQKIoRq3nnlZGPkUm3NPby8pI763Ehk3Qd7U8Az0SFDGxQiXwF19qVxvt
7G7BtkyAaoHGFF9gxBiBMdyL9OH3yCuaREd47gKP9ZnZKe7kTFhn+ETRIL77A+Tl
8hwZJ6uHCVh6ZEoFTZLfmPoz7ew/aVohqwOevR6CQKr1f4prkj4Vil39uwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBQV33LRIFBBPkvnXf8lp0xNURuhMB8GA1UdIwQY
MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt
OTFlMzE4NGJiMGFiLzEvRkJYZmN0RWdVRUUtUy1kZF95V25URTFSRzZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi
LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdvGMA0G
CSqGSIb3DQEBCwUAA4IBAQAjd5+GZMmwgR8EE+vHGDdRDhWHlTtSAMGwoMakBgF6
H6hcHWQz19O3ocA/paYfEqNA+0DbuibZUsluXJCqXoLHkzxUNTf4PtN+WdgFZTqm
hQ2lL7UW9WD52aGN+eXRevOw/9LBjjstrhvsRSQxbNc+8Shum+fXby/0FdmRIU5B
HQ7H89v0NPLEyIAydCM59BBDpZFeaT/0rwqa0U/BE51NMCfLQUYjvUZfLTtjuneq
ldcAOqoDha2UuX80SQIVqTF/ZnBIGIy/MwXDfwfQUjtvWpC7nDRosW9a1PLzh4pE
RgMBO7W8cTGK7WcXfm56BvYiYJDkdQPzmoW4bOMTywPB
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:13:21 2026 by rpki-client