This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Fs_FP0zOdfmc7rvun5ERONpmOgw.roa
File:                     Fs_FP0zOdfmc7rvun5ERONpmOgw.roa (raw, json)
Hash identifier:          TWq1U2RPZO5KpxgW/s1ezL7KUt27fk4vKRxKtkmjh/c=
Subject key identifier:   16:CF:C5:3F:4C:CE:75:F9:9C:EE:BB:EE:9F:91:11:38:DA:66:3A:0C
Certificate issuer:       /CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Certificate serial:       019B77C7483BADE3360F3422F7B9FE618DFC
Authority key identifier: 21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Fs_FP0zOdfmc7rvun5ERONpmOgw.roa
Signing time:             Thu 01 Jan 2026 04:18:27 +0000
ROA not before:           Thu 01 Jan 2026 04:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     40551
IP address blocks:        185.22.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 15:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:48:3b:ad:e3:36:0f:34:22:f7:b9:fe:61:8d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
        Validity
            Not Before: Jan  1 04:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=16cfc53f4cce75f99ceebbee9f911138da663a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:75:ae:72:c5:18:5b:42:46:94:1b:c0:99:8d:
                    13:6a:f8:d7:45:e5:8b:32:ef:7d:86:1f:d0:a7:fa:
                    2c:c3:6f:7e:de:00:64:73:93:e2:e9:20:cd:15:b5:
                    2c:02:84:e6:82:66:43:ce:66:79:41:21:4c:6b:4b:
                    2e:48:67:cd:ad:8e:8f:7c:b3:b9:4a:76:98:02:d1:
                    9c:fe:5d:26:53:dc:2b:a2:31:4d:ea:7b:cb:46:65:
                    ee:48:61:41:b9:42:c1:08:6a:88:6c:f9:e8:7b:34:
                    8e:ef:32:dc:30:18:29:71:b8:8e:72:02:77:09:76:
                    03:4d:ba:6a:f4:3b:67:63:eb:93:81:d1:0b:1c:aa:
                    04:90:21:5d:93:00:3a:d2:83:9d:f0:63:5b:9d:2a:
                    6e:35:a6:39:16:48:bb:66:ca:0b:4f:41:50:c1:8a:
                    f3:77:41:2f:de:d1:3f:02:16:34:fa:b4:e5:27:8e:
                    b1:fb:a1:b2:88:b9:b7:f3:ee:32:6c:24:b9:03:ae:
                    0b:22:04:f0:29:35:42:c5:05:47:62:e5:9f:29:eb:
                    84:b3:89:14:ad:74:74:96:f2:ca:8c:0c:d8:c2:c4:
                    e1:66:82:ef:54:4b:45:15:e1:08:2a:33:24:55:2c:
                    02:51:84:32:aa:c4:dd:dc:05:42:50:c4:21:47:62:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CF:C5:3F:4C:CE:75:F9:9C:EE:BB:EE:9F:91:11:38:DA:66:3A:0C
            X509v3 Authority Key Identifier:
                keyid:21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Fs_FP0zOdfmc7rvun5ERONpmOgw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.22.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:46:d9:c0:00:03:c5:14:91:e1:ee:78:56:61:e1:fa:04:f3:
         b8:0c:4e:14:19:1d:73:09:a1:70:e2:3d:19:b0:1f:74:b6:69:
         64:ab:8d:d3:c8:9d:cc:06:e6:01:72:1d:bb:68:b3:5d:f6:65:
         2e:bc:32:3a:48:5e:65:7c:41:be:87:5d:24:dd:1b:e3:25:80:
         19:70:f0:f3:e1:fd:9f:01:9a:8c:ca:91:e8:c6:52:af:aa:2a:
         85:03:68:1b:94:c8:d0:be:94:cb:39:a4:7f:43:bd:4e:fb:af:
         3c:06:89:80:9b:75:25:90:d9:b6:79:68:a3:07:c0:a3:0d:17:
         e7:4b:fc:2b:be:f0:41:82:70:3b:75:75:25:6e:50:8a:92:c6:
         28:e5:a5:23:95:3c:98:43:da:25:dd:a2:23:76:43:ea:ce:21:
         f2:e2:27:82:8d:5f:c9:23:18:15:e5:ad:f2:3f:23:d6:79:3b:
         7e:a9:de:c8:9e:43:78:0c:25:e3:85:21:77:26:ab:5e:b3:32:
         00:95:85:c3:b8:b6:66:b7:ed:c9:b4:dd:c7:2f:ff:52:e3:c7:
         ac:fe:0e:aa:5a:d4:7d:a7:c0:cd:dc:68:16:76:44:6f:80:da:
         3b:85:34:d7:45:9c:b6:e1:08:b9:46:07:38:9c:a7:1d:f5:72:
         e4:92:43:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 23:42:21 2026 by rpki-client