This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/FBbI-chpDfInFPQFSTPQicClgxU.roa
File:                     FBbI-chpDfInFPQFSTPQicClgxU.roa (raw, json)
Hash identifier:          UDB0xrzsJ6UqEihfhCIpxKl0a7I/CsBPB1Jxqd+ggpk=
Subject key identifier:   14:16:C8:F9:C8:69:0D:F2:27:14:F4:05:49:33:D0:89:C0:A5:83:15
Certificate issuer:       /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Certificate serial:       019BA28D6725BF634E7747130C6BBA0963FD
Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/FBbI-chpDfInFPQFSTPQicClgxU.roa
Signing time:             Fri 09 Jan 2026 11:38:54 +0000
ROA not before:           Fri 09 Jan 2026 11:38:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     401776
IP address blocks:        185.226.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 15:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a2:8d:67:25:bf:63:4e:77:47:13:0c:6b:ba:09:63:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
        Validity
            Not Before: Jan  9 11:38:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1416c8f9c8690df22714f4054933d089c0a58315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:63:13:b9:13:af:f5:06:58:1d:dc:11:30:
                    20:9c:d6:21:6e:16:1d:bc:c4:ad:06:ce:d4:c5:d6:
                    95:bc:eb:4f:3f:59:b3:b4:b2:24:b0:74:ea:89:36:
                    86:c1:37:81:ef:41:ad:69:c6:aa:18:1c:07:92:21:
                    3d:a8:6d:85:98:67:b0:76:c6:10:8e:bf:1c:0c:38:
                    6d:87:82:06:b9:86:74:3c:25:a3:83:94:19:80:b3:
                    41:56:8a:ac:c4:5c:60:14:49:f9:24:69:a2:93:49:
                    05:62:18:b9:cf:de:ea:44:07:f4:30:b2:b9:58:99:
                    59:02:8f:f0:1c:b0:69:84:f6:d9:27:aa:19:60:d3:
                    0c:39:88:b6:10:f6:c0:f3:e1:b1:d5:49:56:9f:34:
                    e6:af:67:73:93:e2:3c:9a:bc:ab:68:17:75:c0:49:
                    0b:34:5d:4b:be:0c:ad:c1:98:38:f7:ed:3d:93:dc:
                    62:0e:fe:61:12:87:f2:b5:a8:19:ed:96:46:0d:06:
                    39:11:d8:e0:1b:8e:f1:0a:61:92:bb:20:eb:cb:e3:
                    84:97:54:40:95:44:bf:87:d4:8d:87:6f:d9:60:88:
                    fd:7f:35:44:43:49:a8:41:a4:fa:2c:a3:5d:e9:d4:
                    2f:79:b5:7b:cb:54:89:6d:95:95:14:7d:70:9d:7c:
                    d7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:16:C8:F9:C8:69:0D:F2:27:14:F4:05:49:33:D0:89:C0:A5:83:15
            X509v3 Authority Key Identifier:
                keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/FBbI-chpDfInFPQFSTPQicClgxU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:04:2b:a8:36:3f:3c:a7:f4:34:63:f0:00:39:16:5d:b1:ed:
         b1:43:ee:aa:3d:b7:97:2c:60:9c:3f:cb:07:c0:34:a7:27:a8:
         f1:f8:a0:5f:60:5d:a2:a1:57:1d:3a:b4:43:9b:42:25:e9:04:
         bb:d2:23:2e:21:0f:de:07:87:86:5d:cc:33:d9:a4:bf:af:51:
         92:cd:58:52:86:3a:1b:69:0b:b5:99:b4:2e:54:94:ea:48:47:
         e4:5e:8a:39:34:cf:77:5b:66:b7:c6:39:47:81:47:16:1a:26:
         9b:18:2c:f9:08:13:0d:f7:8f:06:7b:2e:d6:91:39:3a:b2:d2:
         f6:24:be:a0:4c:17:72:13:ae:87:4b:c6:0f:47:cc:b5:f8:4d:
         12:41:a1:2f:78:9f:a5:50:72:8d:de:dd:b1:26:74:88:99:5f:
         65:b6:a6:7e:08:3d:14:6c:fa:24:e9:a2:5a:dc:e8:fb:33:fe:
         de:d1:9b:5a:33:2b:7c:fb:2f:d9:07:b8:9b:40:b8:ee:18:5c:
         60:16:0d:82:86:e5:3b:c9:2c:80:2e:fb:e9:36:df:a3:32:6d:
         59:7b:b5:07:53:e4:08:25:fe:c7:bd:34:59:24:42:72:d0:5f:
         6b:fc:fe:47:8b:7e:f4:e7:14:59:e7:83:87:cb:29:16:7b:f8:
         80:b8:87:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 22:19:44 2026 by rpki-client