This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/FlRhYyU5KWqMBFxcsxhHK8JGkgI.roa
File:                     FlRhYyU5KWqMBFxcsxhHK8JGkgI.roa (raw, json)
Hash identifier:          LerB+EHbGtYIBcGnSEDKbVb334OwXWnKx/1mjIc2mvE=
Subject key identifier:   16:54:61:63:25:39:29:6A:8C:04:5C:5C:B3:18:47:2B:C2:46:92:02
Certificate issuer:       /CN=67cfadab1d434c4c26118c9a629e74fa9f37c461
Certificate serial:       019B9552A036A6241BAA323D29ADB66B7708
Authority key identifier: 67:CF:AD:AB:1D:43:4C:4C:26:11:8C:9A:62:9E:74:FA:9F:37:C4:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8-tqx1DTEwmEYyaYp50-p83xGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/FlRhYyU5KWqMBFxcsxhHK8JGkgI.roa
Signing time:             Tue 06 Jan 2026 21:59:38 +0000
ROA not before:           Tue 06 Jan 2026 21:59:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        193.84.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z8-tqx1DTEwmEYyaYp50-p83xGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:95:52:a0:36:a6:24:1b:aa:32:3d:29:ad:b6:6b:77:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67cfadab1d434c4c26118c9a629e74fa9f37c461
        Validity
            Not Before: Jan  6 21:59:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=165461632539296a8c045c5cb318472bc2469202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ff:2d:9e:9e:a7:48:29:77:c5:0b:43:a7:07:
                    1c:b9:c1:39:1c:32:8b:fe:be:c2:4f:18:20:25:03:
                    dd:51:7e:e8:8f:16:18:cf:da:0a:f1:11:b8:83:d0:
                    44:dc:4b:f6:87:14:47:b9:ff:1d:a9:03:b5:fc:cd:
                    d3:36:12:f6:e5:a2:78:cc:88:de:3d:92:73:a1:42:
                    5a:23:82:5d:e4:a5:7e:83:b5:69:05:05:0e:01:c7:
                    ba:39:1b:44:2b:e8:e0:3f:ea:38:4d:05:bd:b5:ce:
                    97:8d:8b:a4:59:f3:b0:7b:d1:35:4a:ab:0e:5a:8b:
                    eb:60:8a:8a:a7:52:4b:21:2b:bd:6a:f2:02:f7:86:
                    51:db:eb:1d:14:52:7d:88:46:0e:32:0e:dc:64:24:
                    71:16:a8:f3:00:7b:c9:83:7e:6b:9e:e1:7a:c9:67:
                    42:8a:41:db:69:bb:3b:c2:e1:07:6a:dc:92:d1:1c:
                    f4:6d:1c:4f:f4:07:65:56:66:bc:5c:e4:9b:ff:47:
                    b5:89:eb:b8:b2:54:af:2a:03:8f:55:db:0e:59:80:
                    64:b2:53:ff:8e:dd:16:e8:c5:c6:73:d2:f4:2f:37:
                    10:3e:f7:7d:fe:e1:9c:21:1a:db:ee:8d:10:15:17:
                    4d:d3:cc:4f:73:c2:55:f8:66:6b:5a:8c:32:d4:8f:
                    f7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:54:61:63:25:39:29:6A:8C:04:5C:5C:B3:18:47:2B:C2:46:92:02
            X509v3 Authority Key Identifier:
                keyid:67:CF:AD:AB:1D:43:4C:4C:26:11:8C:9A:62:9E:74:FA:9F:37:C4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tqx1DTEwmEYyaYp50-p83xGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/FlRhYyU5KWqMBFxcsxhHK8JGkgI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:dd:e8:fb:d2:33:6f:5e:fd:62:4b:08:12:af:8b:d4:cc:e5:
         04:17:a8:ba:a6:5a:b2:dd:e4:5d:c9:dd:0e:53:fa:30:a8:2a:
         6b:fb:87:c2:d0:ec:e7:b9:90:c8:ab:56:f0:83:34:07:75:51:
         33:80:a1:7c:53:29:9d:f8:8a:a9:f5:15:54:78:41:7d:77:98:
         ef:e0:56:df:a5:a6:69:4c:8d:8b:25:15:e4:83:e5:f9:c0:30:
         55:0a:c2:b8:47:0d:c6:cb:c7:a7:bc:50:e0:d6:0a:d9:a2:91:
         80:e0:6e:1b:46:5a:e0:bc:56:30:dc:94:96:f5:8d:2e:0a:71:
         b2:bc:1e:c5:a9:63:b6:9a:9c:35:f1:c7:43:28:34:8e:75:55:
         ed:78:ef:7c:a4:b0:75:88:12:76:9d:02:31:68:40:4c:c0:97:
         e6:c3:f3:83:22:d6:38:ce:35:1a:40:20:64:39:2e:32:7b:ab:
         cd:05:ed:91:37:53:d5:af:50:4d:62:4a:ef:79:f8:35:b3:08:
         94:60:e3:4e:48:19:c4:b7:8a:04:0a:82:55:25:17:e3:6f:ee:
         e9:a2:57:eb:18:16:dd:31:3b:9c:20:f1:4f:b4:ab:b9:d5:57:
         84:87:50:de:59:44:9e:72:fc:ff:14:60:cd:a2:10:0a:aa:ea:
         c1:09:99:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:58:39 2026 by rpki-client