This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FYlYIe05gZ_9g1BqFFkum1PScaM.roa
File:                     FYlYIe05gZ_9g1BqFFkum1PScaM.roa (raw, json)
Hash identifier:          ZebOQodqb1fkfWMX3FLNCvAB6+jtZfGZnswkca+PMRM=
Subject key identifier:   15:89:58:21:ED:39:81:9F:FD:83:50:6A:14:59:2E:9B:53:D2:71:A3
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       019B78A3490ADE1DA2B2EB4C951EB690B530
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FYlYIe05gZ_9g1BqFFkum1PScaM.roa
Signing time:             Thu 01 Jan 2026 08:18:45 +0000
ROA not before:           Thu 01 Jan 2026 08:18:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214280
IP address blocks:        45.149.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 02:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:49:0a:de:1d:a2:b2:eb:4c:95:1e:b6:90:b5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 08:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=15895821ed39819ffd83506a14592e9b53d271a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:85:28:ab:36:b3:15:94:52:ec:f6:8d:f6:
                    cb:a6:0b:b9:57:62:95:02:e4:b5:40:0d:3d:af:20:
                    c9:17:47:b1:49:61:c0:61:ba:50:ec:c5:19:8a:96:
                    ba:92:8b:66:c8:40:91:0a:51:4c:f8:8e:13:74:dd:
                    19:f6:6b:81:8d:bf:58:47:96:f4:98:bf:64:cf:f5:
                    68:e0:52:e8:44:14:e7:39:65:4a:9a:cf:f7:7d:d3:
                    b6:6e:d8:ef:77:cf:9b:0b:10:b7:87:a5:32:64:9b:
                    8c:1e:fa:47:88:cc:06:1c:03:c2:3a:d2:3b:68:f6:
                    14:f1:c3:5a:1c:e6:ec:50:f4:e1:6e:0c:2c:6e:ae:
                    52:d1:dc:f3:16:0b:91:89:ce:f0:45:ec:2f:59:89:
                    d1:bd:16:cc:ee:1a:6d:23:a6:cb:5f:c0:7b:69:12:
                    29:94:f9:df:cd:76:1a:71:d4:a2:39:72:2c:9d:4d:
                    08:a9:71:1b:fb:64:8d:f5:32:1e:c4:c2:ec:d3:0b:
                    e7:3e:c5:75:ac:1d:51:10:f9:9b:14:f1:21:67:ab:
                    47:f2:7a:b4:3a:9a:fa:33:75:2e:21:87:be:d3:56:
                    59:4d:fe:8b:7d:00:d3:4b:72:c5:01:54:15:00:6f:
                    28:68:2b:3a:73:4b:e5:2c:8c:1e:39:d3:75:e5:7d:
                    71:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:89:58:21:ED:39:81:9F:FD:83:50:6A:14:59:2E:9B:53:D2:71:A3
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FYlYIe05gZ_9g1BqFFkum1PScaM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:24:dc:46:28:7e:34:9b:15:df:61:bb:7d:2b:05:0d:d8:0f:
         c1:3b:ff:50:93:d5:83:6d:b3:34:ce:85:e8:60:92:fe:18:91:
         9f:ff:0d:6f:bc:02:f6:90:5e:a9:12:70:ee:d9:b1:e1:2f:49:
         15:b2:79:1f:81:eb:dc:70:99:47:04:51:80:26:b3:82:da:06:
         e8:20:b4:3c:8b:f2:be:58:48:d3:f1:f9:b4:06:55:ac:eb:5f:
         1b:7f:24:fa:d2:b7:bf:15:42:b3:79:2b:e8:7a:f1:34:13:5c:
         8f:48:32:56:39:19:9e:36:06:49:79:f6:96:2f:e8:02:2a:ba:
         87:7f:09:57:4d:ec:12:ae:15:31:85:59:81:b0:96:9b:d5:2c:
         77:2f:0f:3d:9b:c4:51:9c:7d:6c:2a:12:b7:f7:8f:62:87:73:
         00:40:92:7f:96:f0:2d:15:85:18:5a:10:51:13:bc:3b:9e:e4:
         f9:07:c5:02:4a:69:a5:33:c9:3a:62:ec:59:de:60:d6:ae:e0:
         ed:bc:89:fb:e2:08:ff:58:a0:4e:b3:99:2d:ec:a3:b3:6b:71:
         eb:2f:13:36:7f:1f:e2:a4:a4:35:1e:af:7c:c2:62:3f:78:4f:
         ba:e6:c4:d5:10:3d:38:3f:36:3a:84:20:4b:d5:3e:7a:47:bd:
         7f:fe:d5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 12:05:21 2026 by rpki-client