This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa
File:                     FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa (raw, json)
Hash identifier:          H5CfogAC8zmS7Yt1GHn4G+lxqysJq8BhzYyLCFKXkBo=
Subject key identifier:   15:5F:E7:63:6F:A4:82:AD:CB:59:2C:AA:57:F9:AD:EF:54:6D:99:FD
Certificate issuer:       /CN=54296d23def4c8521c647dc68acb3c123f611d89
Certificate serial:       019B7F823A87D1E8638382AACB9EF6AA5CB5
Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa
Signing time:             Fri 02 Jan 2026 16:19:59 +0000
ROA not before:           Fri 02 Jan 2026 16:19:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8708
IP address blocks:        185.133.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:82:3a:87:d1:e8:63:83:82:aa:cb:9e:f6:aa:5c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89
        Validity
            Not Before: Jan  2 16:19:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=155fe7636fa482adcb592caa57f9adef546d99fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:45:42:85:6c:6f:66:59:88:01:00:79:6a:
                    9d:ba:81:2c:33:4c:f8:75:22:c9:e8:0b:7d:e9:b8:
                    6a:85:f8:21:2d:ab:d9:b6:06:46:58:a9:ed:f3:b6:
                    1b:4c:d0:3a:e6:73:02:64:15:30:28:0e:69:56:90:
                    23:5d:7f:5a:f9:cb:0a:6a:6e:45:61:3a:1a:9d:72:
                    5a:20:72:ef:0a:45:28:77:39:7d:84:fe:2c:8f:91:
                    e1:79:7f:2b:fc:69:39:1b:a2:48:b1:2b:7e:16:0b:
                    13:d6:12:f8:86:10:18:89:8e:cd:43:63:0d:d1:20:
                    89:d4:66:74:b6:74:d2:c2:c9:fd:2b:15:47:94:51:
                    66:c0:cf:70:12:43:21:60:2c:fb:e8:cf:93:d0:f0:
                    f7:6b:cf:4a:7a:20:f7:4f:8e:f2:bd:88:3c:c7:d8:
                    b9:a1:71:18:87:86:21:8b:03:16:10:a6:32:cb:34:
                    31:03:3c:ce:0a:d9:3d:6c:9f:70:f9:0e:c6:85:7e:
                    13:19:d4:27:2c:29:df:f5:08:1c:0f:de:16:0b:60:
                    4e:96:79:2c:29:72:41:da:8e:17:1c:cb:83:61:bd:
                    11:2d:61:a2:14:50:6b:2d:e1:dc:c0:ed:85:0c:4b:
                    95:d3:51:84:86:f4:f1:96:bf:ce:12:a8:2f:42:a7:
                    52:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5F:E7:63:6F:A4:82:AD:CB:59:2C:AA:57:F9:AD:EF:54:6D:99:FD
            X509v3 Authority Key Identifier:
                keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.133.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:87:d5:8d:9d:7b:b2:23:9d:36:74:5c:c8:54:2a:8c:41:5a:
         f7:1c:ce:16:af:0d:a7:e8:ec:85:8f:66:d0:7f:98:7e:1d:01:
         bf:13:c3:e1:e5:92:97:57:e1:77:1d:0c:4a:f1:f7:68:48:15:
         fc:40:63:20:18:cc:09:f5:24:22:cf:6e:a3:22:dd:98:86:3d:
         70:74:86:d7:5d:6d:ca:d6:b6:5a:74:aa:63:76:03:bc:85:c3:
         66:d1:4b:a3:fc:53:2d:ce:56:22:eb:c2:ab:50:d4:8f:89:b4:
         fd:ed:3e:e2:de:5c:68:ff:90:dd:e2:62:c3:1c:4a:6d:2b:bb:
         b3:13:66:98:91:26:df:6f:fe:a7:c1:9d:e2:ad:13:c6:50:de:
         04:9b:7b:29:c5:72:ae:0d:2d:81:59:31:68:ca:a5:c1:5d:fb:
         4c:21:56:40:83:fd:a7:b9:c9:eb:8b:49:01:af:ed:49:cf:c8:
         fc:49:de:f7:52:78:2c:f7:e2:c4:1d:7b:3a:6e:38:fa:6e:84:
         73:28:eb:ac:79:a5:00:ff:31:4e:8f:69:fb:97:c4:76:a2:9d:
         a4:fa:3c:37:2b:73:4c:15:ed:01:ab:c1:7d:53:93:c8:fb:33:
         0f:85:4b:85:41:99:54:5a:f8:0f:c5:dc:0c:2d:fa:08:b0:ed:
         4f:23:ea:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:03:05 2026 by rpki-client