This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/f_myMJMSIIWO9m-PmHiygg0XXSs.roa
File:                     f_myMJMSIIWO9m-PmHiygg0XXSs.roa (raw, json)
Hash identifier:          3LE3GccOE6KqVlj9DZ+EFPId6e66LFjW7NsGN3ZdmPc=
Subject key identifier:   7F:F9:B2:30:93:12:20:85:8E:F6:6F:8F:98:78:B2:82:0D:17:5D:2B
Certificate issuer:       /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial:       019B7D5D0531058B75A6839776A8A35B4CB0
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/f_myMJMSIIWO9m-PmHiygg0XXSs.roa
Signing time:             Fri 02 Jan 2026 06:20:06 +0000
ROA not before:           Fri 02 Jan 2026 06:20:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202395
IP address blocks:        185.254.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5d:05:31:05:8b:75:a6:83:97:76:a8:a3:5b:4c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
        Validity
            Not Before: Jan  2 06:20:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7ff9b230931220858ef66f8f9878b2820d175d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:aa:a7:ff:73:d6:22:3b:ae:a9:b8:a5:9a:
                    97:c7:40:71:35:94:6f:78:53:c7:6f:d0:40:58:6d:
                    e8:c9:12:c6:21:88:73:bd:9a:48:77:c5:0e:92:b9:
                    2a:8b:78:98:52:b9:d9:ca:53:1f:9c:8b:c0:7e:a3:
                    3e:08:83:9e:c1:46:e2:7c:71:dc:58:72:e0:8d:09:
                    88:df:b4:b5:77:67:00:c2:62:a0:da:78:5f:2f:a8:
                    d3:09:79:86:18:c6:aa:74:74:84:4b:5b:0f:12:47:
                    a7:1f:cc:8f:50:f9:68:b7:3c:47:3c:0c:03:31:c6:
                    08:8b:9c:c8:ab:dd:37:3b:a6:24:8c:2b:6f:72:24:
                    33:c0:ef:3d:72:70:0d:e5:ad:52:06:66:91:f0:d7:
                    e3:21:76:94:1e:14:8c:ed:d2:c9:12:c4:c1:38:69:
                    c4:ba:b9:7e:cc:fa:ec:b6:e9:88:23:55:6e:6b:4a:
                    c1:8d:37:73:7b:8c:66:c7:47:56:4e:24:98:83:d4:
                    af:b6:8f:d6:f6:31:bf:47:29:9f:ac:8c:3c:83:41:
                    17:1d:68:0d:dd:35:9a:98:95:8c:f5:35:22:82:81:
                    c1:68:7a:bb:bb:85:c4:d3:b0:d6:ab:1e:d0:12:ce:
                    8f:71:18:35:2d:00:57:49:d1:9a:65:15:50:3d:d8:
                    02:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F9:B2:30:93:12:20:85:8E:F6:6F:8F:98:78:B2:82:0D:17:5D:2B
            X509v3 Authority Key Identifier:
                keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/f_myMJMSIIWO9m-PmHiygg0XXSs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:ca:f1:6c:72:91:c9:64:ef:bb:81:c2:f5:3b:9c:ba:c5:a8:
         7c:22:ab:3f:b8:26:e2:d2:55:7f:43:72:23:5e:4f:14:b5:30:
         93:11:a0:6f:24:56:5a:0b:5d:77:e8:65:67:c7:ec:09:e1:e4:
         15:bd:0f:5d:d8:70:88:33:bb:e6:fc:42:6e:45:f5:cb:8e:55:
         1f:eb:23:12:23:8f:f4:7b:26:b2:ae:89:b5:5e:f9:3a:f9:9a:
         62:15:c5:e6:a1:d7:40:78:28:29:d4:03:9b:9e:97:f2:28:04:
         30:6d:b2:45:b3:70:99:86:28:78:74:9b:07:96:a0:83:21:60:
         51:ce:40:29:7f:3b:d4:97:e2:d7:18:b3:7b:81:7b:3a:ab:6d:
         36:ae:37:51:5d:82:81:a7:31:f2:37:86:06:9b:28:0c:f7:af:
         5b:aa:64:be:e0:69:60:e3:03:81:6d:46:f2:6c:a1:7d:79:e0:
         64:20:c5:19:ed:da:98:f3:c5:9c:21:8b:60:e2:33:a8:94:f6:
         21:16:c8:5b:c9:15:1a:f1:3d:e8:8d:e9:15:ab:de:fc:30:fc:
         a5:cf:3e:c2:12:d6:08:bb:30:83:7e:0e:5d:67:28:90:d1:a8:
         0e:e2:9e:25:b1:cf:46:fa:4c:a5:a7:12:c7:79:e9:39:74:76:
         3b:93:30:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:12:59 2026 by rpki-client