This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p4luF7oGs2YEGPQDMIVTmWaTAcc.roa
File:                     p4luF7oGs2YEGPQDMIVTmWaTAcc.roa (raw, json)
Hash identifier:          TRR7nBOkIXFt/m/Q0ImDJDa/oRr3AZcyngPYbiTCuu8=
Subject key identifier:   A7:89:6E:17:BA:06:B3:66:04:18:F4:03:30:85:53:99:66:93:01:C7
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019B7FF19E603B6427A34743C387630EA1C5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p4luF7oGs2YEGPQDMIVTmWaTAcc.roa
Signing time:             Fri 02 Jan 2026 18:21:39 +0000
ROA not before:           Fri 02 Jan 2026 18:21:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3257
IP address blocks:        2a13:fc00::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Jan 2026 18:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f1:9e:60:3b:64:27:a3:47:43:c3:87:63:0e:a1:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jan  2 18:21:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a7896e17ba06b3660418f40330855399669301c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5c:8f:46:2a:9a:41:d2:7f:8a:6a:ee:b1:6a:
                    f7:ba:ef:3a:73:6b:60:c6:03:47:07:b3:94:60:82:
                    9e:98:b8:d4:a0:3b:74:6c:3b:51:99:5a:a4:d1:7a:
                    27:55:e5:7d:22:d1:74:0a:bb:c4:6e:aa:7c:e0:f0:
                    16:a5:3f:e8:e7:01:70:a6:18:a7:88:dc:55:05:cc:
                    32:b7:90:a7:9c:f0:95:19:1f:6a:49:3f:d3:2b:d2:
                    fd:68:c7:5b:fb:de:16:5b:44:ed:9c:f8:b6:4a:12:
                    18:eb:05:86:ac:1b:5b:05:26:7f:2b:3c:01:c9:6b:
                    dd:f4:20:11:16:17:f2:4e:2b:d1:8d:f8:38:41:ee:
                    51:28:e2:20:a7:6b:5d:da:ce:e7:00:04:dd:d0:8d:
                    95:87:25:5f:c6:87:b8:b1:83:de:fc:0f:c2:80:3a:
                    76:e3:9e:27:30:85:6e:1f:59:13:83:f0:8a:37:a4:
                    69:60:0a:02:35:a6:50:2c:37:0d:6b:b9:d4:8d:bd:
                    9e:78:19:55:72:c1:fc:44:8f:59:7a:8c:d7:af:f0:
                    c2:b0:5c:9a:10:e1:09:ae:55:93:6f:00:37:f6:20:
                    3c:c6:2f:82:11:40:cb:e4:2d:8e:4c:55:c2:83:d4:
                    89:98:4e:f9:bc:7e:ff:9e:0f:bb:80:12:62:bc:5d:
                    f6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:89:6E:17:BA:06:B3:66:04:18:F4:03:30:85:53:99:66:93:01:C7
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p4luF7oGs2YEGPQDMIVTmWaTAcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:fc00::/29

    Signature Algorithm: sha256WithRSAEncryption
         9e:24:87:d7:22:f7:66:22:bd:dc:1a:f9:ee:77:3a:ff:69:a3:
         a7:16:d1:55:d8:62:41:26:08:2b:32:31:c8:c1:b1:19:7d:b7:
         05:25:42:f4:4d:af:19:8e:06:4b:43:32:82:19:25:99:7c:21:
         23:17:df:be:d5:05:e7:06:6a:3c:e1:dc:b9:92:60:e6:f4:4c:
         f0:d2:ec:73:5f:e2:2e:63:62:91:6a:71:ac:42:1b:05:da:73:
         4c:51:8f:83:3a:f7:f3:31:52:a8:77:2f:1f:9b:02:c3:97:f1:
         27:74:c2:e8:56:b9:bc:be:08:6e:f4:d6:e5:2d:a0:66:39:e6:
         fc:4d:2c:81:e9:18:c2:b0:30:a3:38:c7:ab:48:58:e7:9a:29:
         cf:bc:cc:4b:72:4a:ab:25:d9:03:13:af:14:ed:49:12:de:ed:
         68:0d:34:1d:c9:af:63:27:b0:42:61:8d:d8:58:f6:8c:cb:01:
         87:d2:80:cb:d5:d5:f8:21:1f:fb:3b:5b:98:71:34:44:8c:59:
         a3:52:be:17:23:7f:40:60:1c:0e:4b:66:b2:0e:f6:06:0f:8f:
         7e:7a:04:46:14:dd:61:0a:af:8d:78:02:2c:89:64:4e:a4:fa:
         e5:a9:d3:11:3b:e0:f4:fd:e3:f2:8e:00:24:c0:e2:ae:e1:c2:
         b4:56:6b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 02:49:12 2026 by rpki-client