This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/4F8H7nNNelFubPxa-Se_4jhtbVs.roa
File:                     4F8H7nNNelFubPxa-Se_4jhtbVs.roa (raw, json)
Hash identifier:          0pMog6BIURq0CwttFDOe27twy9MaL7OZIJcruUdS1Oc=
Subject key identifier:   E0:5F:07:EE:73:4D:7A:51:6E:6C:FC:5A:F9:27:BF:E2:38:6D:6D:5B
Certificate issuer:       /CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218
Certificate serial:       019A4F4748FFCC87D775CA1CD820387B98AE
Authority key identifier: 6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/4F8H7nNNelFubPxa-Se_4jhtbVs.roa
Signing time:             Tue 04 Nov 2025 14:31:03 +0000
ROA not before:           Tue 04 Nov 2025 14:31:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        217.118.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:47:48:ff:cc:87:d7:75:ca:1c:d8:20:38:7b:98:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218
        Validity
            Not Before: Nov  4 14:31:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e05f07ee734d7a516e6cfc5af927bfe2386d6d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e5:29:7c:8a:b3:b3:9e:c5:38:c0:af:b4:e6:
                    22:2e:e9:de:60:53:f0:23:34:fa:2a:ad:18:49:14:
                    c6:45:fa:63:ac:36:0f:47:f9:a0:62:e0:34:a6:ee:
                    9d:2d:49:6b:6d:6b:32:5b:e9:4d:dd:7f:a5:44:d4:
                    0e:09:ac:9c:ec:25:b6:93:06:29:79:15:27:16:ff:
                    95:28:8f:52:d2:e0:e9:95:9a:41:b8:39:06:14:fd:
                    c4:84:b2:fe:87:ba:50:ae:27:5e:8b:e2:5a:c8:0b:
                    18:52:d8:0d:03:21:9f:87:f9:f2:28:fa:5b:2b:af:
                    f1:1a:7b:74:5e:15:e4:c3:28:7d:96:81:63:17:83:
                    52:34:81:54:e8:15:ab:15:2e:95:e5:b2:41:13:37:
                    08:00:7e:1c:05:d5:4b:1f:aa:92:6d:b3:36:81:5e:
                    8c:89:2d:7b:22:48:9b:d1:44:ea:22:4c:bd:0a:bd:
                    34:f5:61:f6:22:62:b6:5a:fa:50:97:36:cc:2a:e9:
                    2f:16:0b:eb:ad:aa:97:cf:a6:8e:c0:2c:1f:2a:bf:
                    56:d2:5b:b7:ec:33:ca:16:d1:32:6d:c3:3d:61:be:
                    67:99:70:71:9d:f8:59:26:dc:43:db:24:07:d4:a8:
                    c4:f6:24:8d:8d:f6:e0:8c:60:4f:87:ba:b7:ca:af:
                    a6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5F:07:EE:73:4D:7A:51:6E:6C:FC:5A:F9:27:BF:E2:38:6D:6D:5B
            X509v3 Authority Key Identifier:
                keyid:6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/4F8H7nNNelFubPxa-Se_4jhtbVs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.118.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:34:d5:dd:78:18:55:64:3f:ab:f8:b3:43:eb:11:ab:d2:c9:
         88:89:c2:7d:17:14:2d:e6:69:6e:46:70:54:53:4f:61:fa:c0:
         8f:6d:aa:08:08:b8:fc:2f:78:f8:05:ae:7a:ac:15:3a:4b:90:
         8e:f3:c1:0b:29:57:2d:a8:c0:44:ef:03:d6:12:3a:62:88:25:
         2b:0c:11:f7:fa:c8:35:c4:f9:91:53:24:6d:d9:ef:b7:c5:01:
         96:6a:1c:a8:af:8a:14:1f:9b:76:19:7a:02:44:11:a6:4c:2d:
         e3:e0:44:8b:83:63:f4:be:0d:4c:93:06:4b:9b:40:f5:0d:d8:
         5a:a0:dc:75:04:12:8a:98:ac:d5:eb:33:65:c1:be:f4:a4:68:
         50:2b:3d:fd:5d:58:e5:30:a8:55:b4:f1:00:50:68:7b:53:87:
         b9:c5:e1:1c:67:c6:97:22:16:88:66:49:ad:46:4e:e2:cf:44:
         05:89:fc:fc:6d:e7:02:2b:94:bb:95:7d:41:8f:e7:4a:ae:ab:
         a5:3c:c5:35:58:05:02:ef:46:95:30:16:07:15:12:66:49:90:
         51:69:2d:28:62:11:f9:6e:d1:2b:08:09:7f:c7:50:37:fb:d5:
         13:51:af:1a:01:21:58:0d:3a:e7:45:80:75:d7:5a:15:a4:16:
         e1:05:ae:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZpPR0j/zIfXdcoc2CA4e5iuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmN2IzNWMwOGJhNDkzMDFhNmNjNDMwYWRhOTQ5M2NlZDdl
ZDQyMTgwHhcNMjUxMTA0MTQzMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDVmMDdlZTczNGQ3YTUxNmU2Y2ZjNWFmOTI3YmZlMjM4NmQ2ZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOUpfIqzs57FOMCvtOYiLuneYFPw
IzT6Kq0YSRTGRfpjrDYPR/mgYuA0pu6dLUlrbWsyW+lN3X+lRNQOCayc7CW2kwYp
eRUnFv+VKI9S0uDplZpBuDkGFP3EhLL+h7pQridei+JayAsYUtgNAyGfh/nyKPpb
K6/xGnt0XhXkwyh9loFjF4NSNIFU6BWrFS6V5bJBEzcIAH4cBdVLH6qSbbM2gV6M
iS17Ikib0UTqIky9Cr009WH2ImK2WvpQlzbMKukvFgvrraqXz6aOwCwfKr9W0lu3
7DPKFtEybcM9Yb5nmXBxnfhZJtxD2yQH1KjE9iSNjfbgjGBPh7q3yq+mvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOBfB+5zTXpRbmz8Wvknv+I4bW1bMB8GA1UdIwQY
MBaAFG97NcCLpJMBpsxDCtqUk87X7UIYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNzMXdJdWtrd0dtekVNSzJwU1R6dGZ0UWhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OGQwNjAtOThmMi00MDAzLThmZjEt
ZDI0YzM1ZGZhYzk0LzEvNEY4SDduTk5lbEZ1YlB4YS1TZV80amh0YlZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy81OGQwNjAtOThmMi00MDAzLThmZjEtZDI0YzM1ZGZhYzk0
LzEvYjNzMXdJdWtrd0dtekVNSzJwU1R6dGZ0UWhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XbyMA0G
CSqGSIb3DQEBCwUAA4IBAQC6NNXdeBhVZD+r+LND6xGr0smIicJ9FxQt5mluRnBU
U09h+sCPbaoICLj8L3j4Ba56rBU6S5CO88ELKVctqMBE7wPWEjpiiCUrDBH3+sg1
xPmRUyRt2e+3xQGWahyor4oUH5t2GXoCRBGmTC3j4ESLg2P0vg1MkwZLm0D1Ddha
oNx1BBKKmKzV6zNlwb70pGhQKz39XVjlMKhVtPEAUGh7U4e5xeEcZ8aXIhaIZkmt
Rk7iz0QFifz8becCK5S7lX1Bj+dKrqulPMU1WAUC70aVMBYHFRJmSZBRaS0oYhH5
btErCAl/x1A3+9UTUa8aASFYDTrnRYB111oVpBbhBa4/
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:48:48 2025 by rpki-client