This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/FVztUFkhUmgNammrig4lq2khRec.roa
File:                     FVztUFkhUmgNammrig4lq2khRec.roa (raw, json)
Hash identifier:          MBe/F0X2e05UmIZ71xdZyQkumN8ul5YjBsp/xc1ECtg=
Subject key identifier:   15:5C:ED:50:59:21:52:68:0D:6A:69:AB:8A:0E:25:AB:69:21:45:E7
Certificate issuer:       /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Certificate serial:       019AC4AF53C67756B4894123CCBA4253ECC9
Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/FVztUFkhUmgNammrig4lq2khRec.roa
Signing time:             Thu 27 Nov 2025 09:40:15 +0000
ROA not before:           Thu 27 Nov 2025 09:40:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     57043
IP address blocks:        91.217.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 00:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:c4:af:53:c6:77:56:b4:89:41:23:cc:ba:42:53:ec:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
        Validity
            Not Before: Nov 27 09:40:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=155ced50592152680d6a69ab8a0e25ab692145e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:41:fe:1f:8d:98:f4:43:d2:78:4a:f9:cd:74:
                    8e:9f:ed:50:93:15:b1:7e:f7:2c:a3:21:8b:ad:df:
                    0d:60:af:d8:98:cc:44:c0:92:0d:85:c5:0a:7c:e4:
                    c1:3b:5f:b4:ed:27:14:a4:f0:05:00:30:e7:7a:5a:
                    1c:0c:e7:b9:d1:df:b1:f2:e4:44:9d:99:73:ff:79:
                    4c:13:bc:5a:32:1a:81:e8:f8:9d:9e:17:70:23:e9:
                    96:be:66:13:a6:56:1e:06:b3:4b:2e:70:c7:d6:62:
                    de:a0:64:83:63:de:51:ab:a9:11:89:67:90:02:5b:
                    1b:be:41:a2:f6:e8:1c:3f:10:e5:a4:a5:be:4a:88:
                    ee:01:68:b0:5e:97:18:e0:05:ac:df:12:42:c2:d7:
                    44:ad:76:a1:3d:f2:e6:54:13:55:48:a3:46:4f:2e:
                    a8:a3:b6:9a:de:dc:33:28:5a:88:5c:3f:67:6b:44:
                    a4:42:8d:28:5e:68:89:b4:f0:11:ff:8c:d5:0e:aa:
                    2b:10:5a:92:b8:86:40:21:28:3f:66:a8:c5:91:62:
                    c2:72:5d:17:00:ce:3e:f7:0a:ee:4a:70:84:f1:49:
                    85:53:21:ab:07:41:14:ec:5e:bb:4e:60:97:bc:6f:
                    08:de:17:e4:c3:30:d2:b5:54:22:5e:6e:e0:0e:29:
                    6e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5C:ED:50:59:21:52:68:0D:6A:69:AB:8A:0E:25:AB:69:21:45:E7
            X509v3 Authority Key Identifier:
                keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/FVztUFkhUmgNammrig4lq2khRec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:f7:93:57:5e:70:85:d0:24:fa:d3:ad:af:ce:60:d6:42:e3:
         24:53:91:29:bc:30:7b:1c:bf:53:8e:2f:13:c9:bd:57:91:71:
         3c:11:11:74:d4:fc:e2:3e:31:58:52:55:7a:26:b1:98:5a:f5:
         7c:44:80:a2:eb:e8:52:f8:b9:80:63:03:a8:48:1a:9e:63:9a:
         23:36:9d:b9:4f:00:b2:ad:00:eb:21:ba:05:31:ab:6f:41:d8:
         b5:4f:49:01:09:7b:88:49:cd:03:81:a9:dc:83:9d:fb:26:52:
         4f:1b:7f:2f:50:4d:62:fb:65:8a:45:77:69:b6:9e:a2:dc:35:
         83:f6:d3:b0:3d:7b:45:98:ff:e5:6f:e9:12:4a:f3:0e:18:0e:
         55:a4:54:53:4c:98:b9:5e:f8:77:a9:20:ca:50:dc:d9:e0:24:
         e7:39:46:93:99:30:1a:5c:35:fb:d6:40:4a:ed:37:d8:e4:7f:
         8d:51:09:a9:a5:59:f2:92:db:17:f1:19:88:eb:15:b0:a8:0c:
         14:1d:a9:73:c3:c6:27:6f:17:23:2c:a3:e7:fc:ef:83:57:6c:
         d3:97:39:71:df:f2:3a:2a:d4:e5:99:c8:6d:7e:92:38:13:20:
         57:f5:ea:29:df:d3:7c:7f:50:73:bf:a9:f8:a6:65:79:5e:53:
         e9:83:5f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:09:29 2025 by rpki-client