This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/FWSByoUh7cdSjLg_0lrpDtcYJjc.roa
File:                     FWSByoUh7cdSjLg_0lrpDtcYJjc.roa (raw, json)
Hash identifier:          G+tgHieIjt37VS+kuZqWIFKgYBF4R31XFVof8vXl0MM=
Subject key identifier:   15:64:81:CA:85:21:ED:C7:52:8C:B8:3F:D2:5A:E9:0E:D7:18:26:37
Certificate issuer:       /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial:       019B7834C753720AB758D1BAD0CBED368C9A
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/FWSByoUh7cdSjLg_0lrpDtcYJjc.roa
Signing time:             Thu 01 Jan 2026 06:18:03 +0000
ROA not before:           Thu 01 Jan 2026 06:18:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202053
IP address blocks:        109.71.54.0/24 maxlen: 24
                          109.71.55.0/24 maxlen: 24
                          2a03:3b00:1::/48 maxlen: 48
                          2a03:3b00:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:c7:53:72:0a:b7:58:d1:ba:d0:cb:ed:36:8c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
        Validity
            Not Before: Jan  1 06:18:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=156481ca8521edc7528cb83fd25ae90ed7182637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:50:18:58:e4:27:ea:1c:c5:94:e4:f5:1e:ae:
                    46:14:bd:e6:0f:ca:97:95:bf:ab:37:ee:17:3c:f3:
                    f9:70:0c:d5:11:3b:ae:ff:c8:e3:81:cc:f9:fc:f4:
                    27:dd:c6:29:fd:db:cc:97:a7:3e:fe:60:b3:e4:9d:
                    43:60:76:f9:e6:06:d5:65:67:7b:35:64:30:f6:5a:
                    e8:ea:17:c6:bf:ea:c7:fb:96:22:0a:12:fd:35:d3:
                    d3:b4:cd:43:5d:38:a2:0b:5c:46:8a:19:b0:ad:3b:
                    ab:27:66:0d:76:54:49:4d:df:c9:1a:76:b9:59:07:
                    df:a7:b5:f5:97:72:b6:bf:44:30:a6:24:43:03:40:
                    2f:99:f9:2e:1b:1d:e2:20:93:67:65:90:dd:7a:59:
                    0c:c0:69:0c:cc:41:4b:bc:52:e3:ca:95:03:ff:45:
                    31:87:7a:2b:43:bf:ef:d6:10:70:c5:c3:6a:31:79:
                    31:9f:49:ec:92:17:c9:ff:00:64:53:7b:3a:64:cb:
                    b4:51:13:b4:a1:40:df:3d:85:bd:43:07:ca:a4:5d:
                    11:b8:f7:8e:10:62:6b:9c:22:49:6f:3b:a5:8a:33:
                    68:58:a1:6c:65:15:b2:ef:5c:fd:1d:3c:c1:dd:6a:
                    16:42:a2:29:53:7d:4e:94:39:54:2d:20:01:3f:e6:
                    a5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:64:81:CA:85:21:ED:C7:52:8C:B8:3F:D2:5A:E9:0E:D7:18:26:37
            X509v3 Authority Key Identifier:
                keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/FWSByoUh7cdSjLg_0lrpDtcYJjc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.71.54.0/23
                IPv6:
                  2a03:3b00:1::-2a03:3b00:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         26:57:c8:4d:85:6c:0d:af:51:ac:43:25:f3:35:7b:be:d7:6f:
         4c:02:4d:b9:53:3a:7a:50:53:72:bc:e4:48:04:da:4e:c4:04:
         eb:59:72:2b:7a:60:84:30:70:6d:1b:09:f3:58:9f:d1:c3:ab:
         75:8a:66:1b:76:5c:b2:ea:b9:0a:ce:b0:50:be:65:2d:d4:3c:
         bd:a1:37:b5:8b:be:b9:87:38:48:bb:68:85:2f:d0:78:75:26:
         4a:14:74:6c:81:21:24:0c:91:ef:79:2b:5e:4b:8a:01:9f:39:
         7c:ac:55:7c:00:8c:36:35:19:71:ce:0a:1e:a4:2b:d2:bd:d2:
         c4:88:22:6d:a9:1a:bb:96:97:47:46:0e:63:1c:65:22:f6:cc:
         54:f5:80:74:7c:a4:09:d5:0a:0d:c3:87:4e:58:18:fd:e0:cc:
         bd:ec:ca:1a:9b:1e:1f:0c:22:2f:0b:72:19:0c:69:a0:80:7d:
         e2:08:c5:6c:98:f2:92:56:77:24:09:08:6c:64:52:db:c8:9a:
         c1:bd:b3:5f:8d:33:72:a9:bd:a2:af:3a:18:41:d8:e0:1e:7d:
         f9:25:44:d0:44:b4:4b:ab:d4:91:e5:a4:0e:bd:43:f0:86:22:
         5b:62:96:c3:37:48:33:24:f7:35:12:5f:27:5f:a3:6e:e1:b2:
         6a:68:9f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:38:59 2026 by rpki-client