This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/fYLCCzfbWXPH3SUPbGeu8kd3Y0c.roa
File:                     fYLCCzfbWXPH3SUPbGeu8kd3Y0c.roa (raw, json)
Hash identifier:          wet/ul5WYInbKP1Qf7rh6+FoldIJUWdGNxqjcl+Wv1E=
Subject key identifier:   7D:82:C2:0B:37:DB:59:73:C7:DD:25:0F:6C:67:AE:F2:47:77:63:47
Certificate issuer:       /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial:       019B7D5B1090FB0E32124E8C1ACA73E58801
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/fYLCCzfbWXPH3SUPbGeu8kd3Y0c.roa
Signing time:             Fri 02 Jan 2026 06:17:58 +0000
ROA not before:           Fri 02 Jan 2026 06:17:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     53107
IP address blocks:        82.118.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 07:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:10:90:fb:0e:32:12:4e:8c:1a:ca:73:e5:88:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
        Validity
            Not Before: Jan  2 06:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7d82c20b37db5973c7dd250f6c67aef247776347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:fc:ac:90:82:0d:fd:dd:b1:ae:cc:af:f9:
                    1f:94:0f:bb:c2:46:cb:1e:47:a5:07:35:8a:9a:a2:
                    cb:5a:6e:ad:47:1a:9b:64:c4:92:53:52:1a:da:09:
                    a5:ff:f8:bf:4b:6b:5c:b3:b8:18:ba:f5:27:7f:a8:
                    93:8d:b1:ca:53:63:c8:d6:54:2b:65:dd:10:e9:41:
                    fb:77:06:64:62:27:c6:3b:81:90:d7:9d:3c:1c:23:
                    a0:36:b9:b6:ab:ba:f6:77:cf:7c:08:0b:69:f5:b9:
                    91:8b:c5:f0:ed:b1:a2:d5:42:e4:79:7d:03:d1:1b:
                    ee:27:d7:7a:10:cb:be:e0:82:a8:e9:91:57:b4:7d:
                    e4:89:69:ee:d4:13:99:2c:dc:e9:ca:ed:16:b7:c6:
                    db:69:e6:24:ca:b9:0d:69:ee:2d:b3:3a:34:3a:1a:
                    72:dc:70:af:a6:1d:39:56:82:d6:49:1f:48:39:3e:
                    03:f3:1e:1e:45:ac:3b:4a:6c:47:d1:8a:25:a9:f0:
                    d6:24:a7:f2:d5:43:a8:ac:62:06:d7:ba:bf:56:1a:
                    13:82:12:7d:fd:25:08:c2:e6:40:fc:1f:ae:b6:e8:
                    c2:07:cd:8b:65:c4:ef:cd:c1:7c:bf:d9:65:53:23:
                    4c:25:53:8c:0f:7f:30:3f:36:9e:42:2c:14:33:19:
                    ce:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:82:C2:0B:37:DB:59:73:C7:DD:25:0F:6C:67:AE:F2:47:77:63:47
            X509v3 Authority Key Identifier:
                keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/fYLCCzfbWXPH3SUPbGeu8kd3Y0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.118.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:29:ec:61:1c:df:b9:d1:04:85:d5:48:c8:8a:74:b1:53:7e:
         d4:d9:fc:e5:f3:a2:bb:0e:a6:a2:01:25:89:f1:b6:d7:ac:50:
         7e:56:19:09:dc:0a:89:5a:c2:f2:eb:ef:2d:df:4e:19:2b:b5:
         4b:d6:4b:b8:c7:1f:8d:e7:df:37:c4:41:63:ca:2e:67:20:d4:
         fe:5b:5b:5e:1c:f1:81:3a:e1:d4:59:3a:fd:73:44:0a:d2:90:
         c5:c1:fe:93:3f:a4:ab:1f:bf:91:e8:08:64:83:82:a1:0e:31:
         89:06:a5:e3:0e:f1:24:d6:a9:8e:9f:4b:e7:23:75:27:98:99:
         10:aa:4c:88:7f:d4:d0:48:0b:4d:88:69:6b:ce:4c:7b:30:e9:
         96:79:71:81:88:8b:6f:77:30:24:be:24:dd:1e:29:b4:53:96:
         34:12:ef:90:47:07:d0:84:2f:72:f5:07:fc:dd:a2:0c:c1:78:
         d7:ce:c1:8c:d0:7c:ae:1a:87:5b:b8:85:e7:44:6c:19:da:97:
         91:90:d0:28:54:f3:cf:54:8d:b3:ce:6d:97:1e:fd:70:bc:a5:
         b7:e0:e6:ed:57:e4:ae:b7:d5:f4:ba:25:e8:c3:59:a9:de:64:
         d1:c5:82:b6:b5:09:27:ce:1c:63:ee:1c:25:32:42:c7:39:c0:
         54:52:81:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 16:22:41 2026 by rpki-client