This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/4Fk1AAYm7kxoJmqBYu75IgemFgg.roa
File:                     4Fk1AAYm7kxoJmqBYu75IgemFgg.roa (raw, json)
Hash identifier:          Di0GwsWhWJ6sbzzm5sR6T5tgoqL/5gCIPZyyW+P5jP0=
Subject key identifier:   E0:59:35:00:06:26:EE:4C:68:26:6A:81:62:EE:F9:22:07:A6:16:08
Certificate issuer:       /CN=3c361707514c4420ce82bce1bb71995c25171be3
Certificate serial:       019B76EB05DF77E107CB9B0B83294C20BF6A
Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/4Fk1AAYm7kxoJmqBYu75IgemFgg.roa
Signing time:             Thu 01 Jan 2026 00:17:52 +0000
ROA not before:           Thu 01 Jan 2026 00:17:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205544
IP address blocks:        82.113.64.0/19 maxlen: 19
                          2001:1b88::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:05:df:77:e1:07:cb:9b:0b:83:29:4c:20:bf:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3
        Validity
            Not Before: Jan  1 00:17:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e05935000626ee4c68266a8162eef92207a61608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:06:6e:59:b3:9e:08:7d:0e:40:b0:c9:0d:
                    0b:66:ce:82:aa:e0:ca:a8:98:e7:e0:54:45:c5:4a:
                    60:23:ee:56:7b:71:b3:1b:d7:c1:08:d6:e3:e5:81:
                    cd:43:20:ea:b3:f4:b2:50:9e:f2:2e:df:d0:1b:95:
                    90:49:d8:93:9c:78:8b:40:8f:d0:a1:a5:15:37:1f:
                    35:78:f8:09:4f:92:5f:02:4a:40:89:b3:25:a1:28:
                    74:e1:2b:68:d9:bd:d0:5b:fd:0e:4b:82:84:0f:58:
                    8e:0f:ff:00:ef:93:4b:ec:e0:8c:8b:6d:a1:44:c5:
                    58:92:93:c7:95:43:da:7a:db:3a:66:8d:6b:e8:0b:
                    ac:6e:a8:44:53:a8:dd:9a:c8:7a:df:8c:58:c0:cc:
                    b4:45:ac:45:68:2d:93:b9:42:31:ab:78:f0:f4:df:
                    46:88:79:59:f5:8a:d3:63:30:80:30:f1:89:13:83:
                    16:bd:5f:f4:e3:89:b7:61:93:69:4d:d7:41:53:c6:
                    a4:bb:c2:55:30:9d:bc:e3:ce:df:99:cb:da:66:cc:
                    0d:5e:c3:57:07:72:70:cc:95:4d:43:5c:e4:82:0d:
                    3e:30:ff:f9:db:b5:77:53:ed:e5:99:e7:8f:36:d2:
                    08:ea:f5:91:ee:30:a4:0c:3f:74:67:7c:48:85:f9:
                    15:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:59:35:00:06:26:EE:4C:68:26:6A:81:62:EE:F9:22:07:A6:16:08
            X509v3 Authority Key Identifier:
                keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/4Fk1AAYm7kxoJmqBYu75IgemFgg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.113.64.0/19
                IPv6:
                  2001:1b88::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:40:1a:db:14:14:c5:66:46:e1:07:be:c3:9c:d2:b7:78:dc:
         da:39:ba:f7:2b:7a:bd:f7:15:de:9e:34:e3:18:d3:c4:9d:fb:
         a3:7e:11:d0:bf:38:8e:6a:8b:94:84:02:43:be:d3:ed:4c:d3:
         f6:39:2d:75:b5:a8:ca:13:b6:50:f3:78:cc:8c:ff:b1:22:39:
         d5:f3:23:d4:64:3f:db:bd:32:07:b6:15:22:f4:65:37:da:25:
         57:e7:0b:ef:04:1c:82:95:65:e3:62:d4:f6:8d:44:a0:b2:4b:
         92:90:8d:ca:fe:fc:d2:8b:72:e3:0f:5b:a0:0a:c8:61:36:9e:
         1d:33:1b:9a:d3:64:23:29:34:4b:8f:c1:9b:82:a9:41:9b:e1:
         24:db:46:89:0a:d5:b2:b6:ef:27:ca:0f:98:62:ff:c7:51:ff:
         6e:91:47:0d:b7:6e:0c:cd:00:d7:5c:98:c6:6b:c9:31:8f:89:
         35:1d:b0:e3:20:32:4a:0e:d0:82:3b:e8:31:50:68:3e:8b:96:
         99:c1:f7:1d:6a:b0:20:aa:82:d7:44:61:34:5d:4f:ec:fa:f4:
         5a:a6:8e:85:80:74:9b:6a:fd:43:5f:99:7f:69:1b:5c:c3:57:
         c2:2d:2e:7a:92:0f:1f:3c:d5:e3:2e:f9:f0:35:a5:ff:1c:32:
         8d:d3:00:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:06:47 2026 by rpki-client