This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/feMFojo_DlzAyWv38GyKLyNHZVw.roa
File:                     feMFojo_DlzAyWv38GyKLyNHZVw.roa (raw, json)
Hash identifier:          LP5SdnkyZfF06ZDPQjU4cUHQyU7KbuQiq1nT04AjmzM=
Subject key identifier:   7D:E3:05:A2:3A:3F:0E:5C:C0:C9:6B:F7:F0:6C:8A:2F:23:47:65:5C
Certificate issuer:       /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial:       019B7AC7DE1D6BAA216F87C7E3D14D562541
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/feMFojo_DlzAyWv38GyKLyNHZVw.roa
Signing time:             Thu 01 Jan 2026 18:17:57 +0000
ROA not before:           Thu 01 Jan 2026 18:17:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208030
IP address blocks:        46.19.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:de:1d:6b:aa:21:6f:87:c7:e3:d1:4d:56:25:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
        Validity
            Not Before: Jan  1 18:17:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7de305a23a3f0e5cc0c96bf7f06c8a2f2347655c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:90:3e:57:c0:3b:db:9c:63:ea:f5:d7:d4:6b:
                    b2:84:12:aa:6e:da:79:d3:92:43:38:25:1d:f8:fe:
                    c9:aa:4a:99:1e:60:e6:84:47:ef:10:62:4c:0b:71:
                    68:40:d7:f3:ad:1d:04:52:81:4a:b4:a8:03:f8:36:
                    8d:1c:22:34:c5:23:07:0d:62:8d:26:aa:fc:67:28:
                    22:9d:d1:1a:8a:41:9b:1c:b6:f2:06:45:f9:77:c9:
                    f5:12:78:d9:16:86:1f:25:30:53:4f:dc:3a:65:c2:
                    ae:5d:8f:fb:2a:17:93:1b:1e:9c:63:2c:ee:b6:6a:
                    23:0c:76:06:97:fd:d3:dd:bb:d4:16:8d:85:09:4f:
                    0a:ad:c0:16:3c:4d:2a:a5:9e:25:6d:21:b3:d0:91:
                    b2:c2:ff:05:21:a0:7a:29:57:27:ac:cf:fe:3f:78:
                    d0:4b:8c:9a:74:ff:14:70:72:c4:9c:18:5b:cf:75:
                    40:85:58:0f:85:45:72:8e:c5:4c:a0:bf:1c:02:3a:
                    76:58:ad:fc:87:06:b1:39:05:25:82:fc:97:70:bd:
                    99:c9:a6:7c:6b:69:d4:56:74:91:27:ba:48:92:ba:
                    5c:97:1a:36:81:2c:36:13:bf:fc:67:9a:50:d5:ec:
                    39:61:02:a4:9a:02:98:83:35:65:11:e4:3b:ed:a5:
                    74:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E3:05:A2:3A:3F:0E:5C:C0:C9:6B:F7:F0:6C:8A:2F:23:47:65:5C
            X509v3 Authority Key Identifier:
                keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/feMFojo_DlzAyWv38GyKLyNHZVw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.19.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:01:79:89:95:5e:8b:b5:c4:5c:dd:55:81:b9:a4:89:c5:62:
         ef:21:51:dc:70:c9:67:58:7d:68:7d:b1:d7:7b:e7:6e:80:d3:
         57:cb:8c:4a:b6:2c:37:27:b3:26:e6:c3:a8:73:96:f6:10:b4:
         4c:ba:86:55:50:50:57:4f:fd:0b:fb:63:05:30:08:24:1b:30:
         94:36:a3:11:84:38:3c:e3:8b:95:cf:e2:f8:47:63:6d:b6:b6:
         59:87:3c:8a:d0:ee:61:de:13:f8:64:a3:f9:48:81:92:01:3d:
         b7:b5:c8:f4:14:c6:d4:d0:2d:a9:94:57:e6:61:74:0d:44:d2:
         c5:45:2c:23:78:ed:70:af:09:74:85:ea:0b:72:39:c3:52:f1:
         d4:bc:6f:fa:34:6f:2f:08:56:30:dc:0c:8c:6f:84:49:f2:e7:
         c1:58:e7:35:5b:70:3c:2a:50:f7:6e:bb:31:1a:a5:d4:4d:04:
         97:5b:5b:4b:b3:17:49:12:e7:8e:dd:97:fc:92:bd:4d:3a:ec:
         69:36:7f:75:16:61:53:ff:33:e5:c4:66:50:30:52:8e:c2:34:
         ad:26:14:2c:3a:ec:46:90:96:d4:03:e7:5c:09:df:4d:be:bd:
         b9:bb:7f:90:d0:6d:2d:3c:70:5a:85:99:bd:7c:95:44:46:19:
         51:9e:75:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:00:06 2026 by rpki-client