This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/fRUNIQ1_jYWQdZrSZ4luryAQJDQ.roa
File:                     fRUNIQ1_jYWQdZrSZ4luryAQJDQ.roa (raw, json)
Hash identifier:          ty6oOnSu+ZODj+9+2x+cpkE7v0JL9rnydZY11LzAwgQ=
Subject key identifier:   7D:15:0D:21:0D:7F:8D:85:90:75:9A:D2:67:89:6E:AF:20:10:24:34
Certificate issuer:       /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial:       019B78351B33D1C0D3DB45E110C969616C05
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/fRUNIQ1_jYWQdZrSZ4luryAQJDQ.roa
Signing time:             Thu 01 Jan 2026 06:18:24 +0000
ROA not before:           Thu 01 Jan 2026 06:18:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209588
IP address blocks:        147.78.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:1b:33:d1:c0:d3:db:45:e1:10:c9:69:61:6c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
        Validity
            Not Before: Jan  1 06:18:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7d150d210d7f8d8590759ad267896eaf20102434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:21:f6:99:68:82:65:cb:a4:9e:bf:99:26:14:
                    77:c0:eb:75:fc:68:dc:20:93:11:db:d4:80:4e:4c:
                    90:58:11:e5:15:e4:0c:d9:93:04:bc:a8:c6:e4:f2:
                    a4:57:c3:27:8d:8a:0e:36:3a:9c:ce:b0:1c:39:4a:
                    c1:e4:30:0b:50:23:35:06:be:cd:7f:b6:52:08:1d:
                    2e:04:75:f9:af:ae:b6:04:aa:66:b3:96:49:25:73:
                    71:2d:0a:b4:a7:a2:f0:43:ac:0d:81:90:2e:8d:a6:
                    e6:17:72:5f:ca:20:81:5d:89:e8:89:e4:34:3a:5a:
                    f6:b6:03:63:cf:2c:0f:43:fc:62:fc:d5:5c:d1:cc:
                    15:f5:30:28:e7:0b:6a:1e:f5:c4:5a:f9:92:75:bd:
                    62:c0:b7:b5:9d:ec:a2:ca:13:af:c9:fc:ff:17:6f:
                    b9:55:28:e5:c4:a9:a2:be:08:ac:af:c3:da:1c:b5:
                    26:2f:ff:38:fa:8d:bb:2b:cb:6c:db:25:3d:5c:4f:
                    46:53:84:4b:10:7f:4b:41:e1:b6:9a:ac:48:3c:5c:
                    6c:3d:0a:a6:1c:f8:65:2d:0e:b9:60:64:14:43:6c:
                    53:a3:6e:85:e0:40:49:4a:36:c2:28:30:50:2e:7d:
                    08:f7:4c:fb:1d:76:48:a0:48:1e:b6:03:8e:09:a8:
                    4a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:15:0D:21:0D:7F:8D:85:90:75:9A:D2:67:89:6E:AF:20:10:24:34
            X509v3 Authority Key Identifier:
                keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/fRUNIQ1_jYWQdZrSZ4luryAQJDQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:69:f7:12:7f:e6:08:ae:c3:a4:59:91:9f:62:84:67:c2:43:
         ed:58:f8:fa:e9:ae:a1:99:aa:3e:1f:52:e8:2e:15:d4:01:27:
         a1:d4:61:e7:78:f1:38:ae:db:64:7c:2e:34:35:98:03:9b:d4:
         ee:55:d0:da:9c:24:67:d2:70:31:fe:bc:e5:2d:72:e9:20:5e:
         1e:49:cd:c7:fd:c4:3a:ab:c3:1c:72:cd:93:02:39:5e:30:cf:
         6c:d0:ef:b5:15:99:50:59:7e:64:02:62:2d:c2:eb:d6:50:f6:
         02:e5:66:69:a7:67:bc:1c:c2:cd:3a:4c:a2:79:17:8a:2e:2c:
         d7:e3:5e:58:a3:a0:b0:36:8c:bf:3a:af:98:82:43:c9:2a:3e:
         66:27:52:fc:80:7a:63:30:20:f8:e3:aa:bd:ee:75:38:c3:17:
         17:bf:d4:ae:d0:4b:32:f2:2c:8e:5f:60:85:4e:f3:ce:fa:29:
         1e:35:1a:ee:8a:45:fc:4c:86:1a:aa:21:39:5b:ed:fb:1d:85:
         32:c9:e0:44:0a:c2:d6:93:f7:59:23:17:a0:72:60:b0:43:fe:
         39:c8:f4:e4:db:31:9e:5e:63:52:a6:50:69:0c:bd:97:5b:a9:
         d9:7c:aa:34:12:f4:d2:90:f6:29:b3:78:fd:6f:55:ef:12:ba:
         8a:f8:f4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:15:46 2026 by rpki-client