This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/fkccfi7U2J0VPclLxq1z-10Vueg.roa
File:                     fkccfi7U2J0VPclLxq1z-10Vueg.roa (raw, json)
Hash identifier:          0x4LuqEdaNq3L3rQXr3MKnKIAXFaI3RqdUjnhTRxMC0=
Subject key identifier:   7E:47:1C:7E:2E:D4:D8:9D:15:3D:C9:4B:C6:AD:73:FB:5D:15:B9:E8
Certificate issuer:       /CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4
Certificate serial:       019B7EA69F577ABE6D2366B879034B1816B9
Authority key identifier: 3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/fkccfi7U2J0VPclLxq1z-10Vueg.roa
Signing time:             Fri 02 Jan 2026 12:20:07 +0000
ROA not before:           Fri 02 Jan 2026 12:20:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207533
IP address blocks:        212.6.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:9f:57:7a:be:6d:23:66:b8:79:03:4b:18:16:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4
        Validity
            Not Before: Jan  2 12:20:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7e471c7e2ed4d89d153dc94bc6ad73fb5d15b9e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:9a:08:77:f1:cb:44:ab:4d:3a:03:1f:ea:
                    51:58:17:c6:23:69:96:85:46:df:5d:00:34:b4:ae:
                    a3:08:61:c4:af:a2:4e:bd:e0:50:57:23:38:7e:a5:
                    7d:1d:1d:4b:e7:94:f4:86:64:34:d5:1e:c3:90:44:
                    8d:db:52:97:c7:80:4f:00:a3:43:57:9e:36:f7:65:
                    d8:52:69:83:05:36:95:d7:3a:c4:d8:2d:2a:e6:98:
                    30:fe:0a:71:81:77:8a:16:17:98:ce:a1:83:7e:45:
                    0f:ea:e8:b4:a0:87:0d:86:fc:cc:4e:8f:59:c4:56:
                    9d:98:fe:e2:b7:86:7a:b5:f7:aa:1e:d8:3e:c8:56:
                    77:b4:b5:08:8a:8e:2c:1e:5c:51:de:b5:b4:85:48:
                    65:21:9e:c6:8a:6a:5e:b7:6e:ba:24:c2:36:2e:98:
                    6f:d4:eb:a7:68:2d:f1:39:f8:bc:fc:a6:67:00:26:
                    47:f1:79:d6:13:cf:93:19:92:7c:41:d7:57:eb:b5:
                    ee:b9:d4:1b:2d:94:d0:a9:96:c2:aa:72:fb:53:37:
                    81:6b:7f:2d:60:cb:43:b8:13:74:a5:c7:c3:97:7c:
                    c2:a1:e4:8e:ae:3a:9c:fb:f7:51:df:e2:06:8a:69:
                    06:8a:41:25:9d:6a:fe:c2:80:4e:df:83:c5:f4:e5:
                    08:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:47:1C:7E:2E:D4:D8:9D:15:3D:C9:4B:C6:AD:73:FB:5D:15:B9:E8
            X509v3 Authority Key Identifier:
                keyid:3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/fkccfi7U2J0VPclLxq1z-10Vueg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.6.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:16:1c:a1:9b:1d:48:22:9f:ac:f5:a5:c4:c7:db:57:05:2c:
         0a:a4:fd:ed:98:f3:5b:14:ed:ca:ab:1a:b5:e4:f7:f4:56:80:
         cb:06:82:ef:f2:f1:d5:b0:c1:08:95:74:6e:43:1e:65:21:23:
         79:f1:a1:e1:41:37:2d:99:d5:f3:16:1c:ec:fd:a5:f4:7d:a7:
         91:6d:e4:cb:99:ff:06:be:e2:cb:36:86:d0:e9:48:41:f3:39:
         5a:a4:b8:8a:37:e3:be:ca:60:bb:5f:50:d8:42:74:49:6f:9d:
         03:e7:99:e3:e6:cb:a3:0b:39:7f:ed:c2:ff:67:15:72:df:f4:
         06:02:fc:93:6b:ed:5c:19:f6:83:bd:c8:7e:6e:62:25:8c:c8:
         84:0d:0a:b6:5f:74:00:d6:b2:0a:52:b4:e0:7d:74:0a:99:ca:
         29:bf:64:da:6a:ae:d3:dc:1e:78:66:84:51:19:09:95:2c:58:
         cb:f7:20:60:ee:c3:b1:b7:c3:f5:89:a6:39:8d:e9:6e:6e:9e:
         d6:b2:ee:2f:b6:01:8d:04:94:44:b6:97:f2:cc:fb:6f:45:75:
         1a:e7:8d:2e:ee:9e:66:9d:b1:cb:dd:3a:48:36:9d:c7:0f:bf:
         07:71:b0:b4:10:99:92:33:16:18:74:36:f9:aa:bf:2a:3e:84:
         f5:65:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:29:18 2026 by rpki-client