This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/FAyCV_5AMkm3Dh7cfCjXmtUZjwg.roa
File:                     FAyCV_5AMkm3Dh7cfCjXmtUZjwg.roa (raw, json)
Hash identifier:          peTRcdeTP20Eip2O22kje1Yb5TbeukYoj6gR+Z/N6g0=
Subject key identifier:   14:0C:82:57:FE:40:32:49:B7:0E:1E:DC:7C:28:D7:9A:D5:19:8F:08
Certificate issuer:       /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial:       019B7AC94B2E8B47FA610079950154A919F7
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/FAyCV_5AMkm3Dh7cfCjXmtUZjwg.roa
Signing time:             Thu 01 Jan 2026 18:19:30 +0000
ROA not before:           Thu 01 Jan 2026 18:19:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50083
IP address blocks:        5.59.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:4b:2e:8b:47:fa:61:00:79:95:01:54:a9:19:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
        Validity
            Not Before: Jan  1 18:19:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=140c8257fe403249b70e1edc7c28d79ad5198f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cd:de:ab:da:96:ce:93:2e:e5:27:ab:3a:21:
                    be:1f:ff:8b:e3:ff:31:89:59:70:3a:78:9b:35:ab:
                    10:7f:80:56:e2:5a:cd:55:0d:cf:82:16:5c:80:9c:
                    5e:76:de:b8:3f:e0:11:79:80:a3:60:52:c0:f0:64:
                    73:96:64:65:18:27:e7:f3:69:55:99:d9:30:3d:aa:
                    86:cd:84:dc:67:86:ab:2a:b6:3c:14:aa:db:9e:a8:
                    76:8c:20:43:f6:5f:8b:ec:5a:6f:58:4c:50:fc:5f:
                    cf:fb:1b:5b:a8:b2:66:48:d4:9f:b6:4d:a0:6a:b7:
                    86:06:a9:2b:be:15:a2:35:66:a3:98:e1:55:e4:47:
                    ac:8d:f7:a9:6e:69:75:5f:c2:09:01:e5:1c:ab:4f:
                    5a:9a:53:75:d2:54:e5:f6:9d:15:0f:23:9b:1b:00:
                    48:ba:fb:9c:b5:a2:4b:0f:72:db:da:23:6b:29:a3:
                    6b:f8:64:b7:7b:7b:21:83:d7:d4:93:f8:1f:0f:58:
                    e5:e4:5c:38:b3:32:e4:ac:0b:32:e8:66:8c:b9:ed:
                    85:6b:a7:00:0e:dc:22:eb:47:23:86:75:25:3a:29:
                    67:ae:3c:d5:32:65:7b:1f:0b:b1:0a:e6:6b:b4:32:
                    ef:55:8c:01:7c:a9:c2:5a:aa:68:a5:66:f8:97:4f:
                    f6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0C:82:57:FE:40:32:49:B7:0E:1E:DC:7C:28:D7:9A:D5:19:8F:08
            X509v3 Authority Key Identifier:
                keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/FAyCV_5AMkm3Dh7cfCjXmtUZjwg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.59.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:a7:40:32:2b:02:da:2c:1d:e3:22:8f:5a:b6:77:ac:4f:2e:
         d3:ee:c6:41:48:8c:e0:c4:6d:5e:70:88:d5:84:52:e0:d7:54:
         5c:1c:72:25:1c:c4:d0:68:8e:8f:e0:6b:6a:c0:51:40:18:78:
         13:e7:a3:df:df:97:a5:63:be:7b:29:bf:d1:4f:52:51:97:5e:
         fe:bb:01:54:3b:69:09:06:72:6f:6e:46:48:b6:96:ec:14:5e:
         a4:ab:82:db:1e:d1:3a:81:cd:65:dc:59:5b:81:c3:24:4c:b0:
         d7:98:b5:e5:cd:61:36:66:94:d2:36:f9:4a:c7:3a:23:cc:28:
         a1:db:f4:27:cb:07:5f:c8:4d:d8:73:55:6d:46:cd:e1:80:1a:
         4a:6b:eb:58:01:c0:e3:e5:93:4e:9e:73:2a:a6:dc:1c:37:ed:
         2c:ec:e7:2f:c4:a4:fd:1f:b6:55:1f:1d:cd:99:5d:cd:11:d2:
         0b:80:bb:1a:cf:5c:70:6a:ac:d3:46:73:ce:9e:e4:82:0e:cd:
         ea:a2:da:21:a7:32:12:09:1a:72:5a:1f:05:46:5e:fa:56:ab:
         76:2d:87:15:2f:a8:df:df:3e:43:1c:3f:91:68:0f:85:a9:8c:
         a1:8e:5d:fe:4c:7c:4b:fe:2b:9c:92:9b:26:00:82:58:9e:2a:
         55:cd:72:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:12:44 2026 by rpki-client