This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FzkylkyfsTERKHkNSyG7NYX7PFM.roa
File:                     FzkylkyfsTERKHkNSyG7NYX7PFM.roa (raw, json)
Hash identifier:          KCyk6mEqQ4GizUgyaQebyj7USGjnhOS5zwP6WPe/6dc=
Subject key identifier:   17:39:32:96:4C:9F:B1:31:11:28:79:0D:4B:21:BB:35:85:FB:3C:53
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B3553AE63ED6151B89D098BDC3DC5D2
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FzkylkyfsTERKHkNSyG7NYX7PFM.roa
Signing time:             Thu 01 Jan 2026 20:17:30 +0000
ROA not before:           Thu 01 Jan 2026 20:17:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     5606
IP address blocks:        85.120.16.0/24 maxlen: 24
                          85.120.17.0/24 maxlen: 24
                          85.120.18.0/24 maxlen: 24
                          85.120.19.0/24 maxlen: 24
                          85.122.182.0/23 maxlen: 23
                          193.226.68.0/24 maxlen: 24
                          193.226.69.0/24 maxlen: 24
                          193.226.70.0/24 maxlen: 24
                          193.226.71.0/24 maxlen: 24
                          194.102.91.0/24 maxlen: 24
                          217.156.46.0/24 maxlen: 24
                          217.156.47.0/24 maxlen: 24
                          217.156.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:53:ae:63:ed:61:51:b8:9d:09:8b:dc:3d:c5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=173932964c9fb1311128790d4b21bb3585fb3c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:8d:49:3a:c4:ce:a6:98:3c:95:9b:da:ee:
                    27:f3:86:99:7c:90:7f:98:b6:2d:21:a7:22:8d:3e:
                    59:68:00:d3:38:01:9d:5f:32:95:c3:db:f5:d2:cd:
                    42:40:d3:50:c0:3d:8a:72:ac:a9:12:32:bf:76:0a:
                    79:52:50:5c:93:f8:2e:c9:53:33:bd:49:51:80:65:
                    e9:f3:07:28:48:a1:3d:1c:c5:60:b4:fc:5d:93:f7:
                    a9:0a:4d:1c:82:9d:67:68:e6:52:d3:a8:25:13:6d:
                    39:af:34:0e:a6:7c:74:ba:97:be:34:eb:c2:0a:aa:
                    6f:8a:2d:8d:03:d2:84:70:3e:0c:22:2c:6b:48:1d:
                    33:00:94:8f:3b:5d:d4:aa:91:8d:e4:92:bd:9c:d7:
                    db:78:a4:77:f5:be:d5:1d:af:b7:a7:5c:bc:b9:aa:
                    73:91:83:0b:16:8d:84:22:0b:8b:79:7f:a6:61:b4:
                    61:52:47:30:51:e3:d7:25:df:fb:1f:b4:21:c2:d0:
                    50:d5:a8:26:43:17:65:b6:d6:11:c8:51:d9:61:cf:
                    cd:12:90:28:48:47:a4:1b:dc:18:fe:74:44:a4:9b:
                    ba:c6:de:1a:68:db:fb:4b:25:f1:31:83:bb:ad:a8:
                    36:7d:76:99:25:10:a1:ea:cd:77:df:74:90:6b:4e:
                    74:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:39:32:96:4C:9F:B1:31:11:28:79:0D:4B:21:BB:35:85:FB:3C:53
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FzkylkyfsTERKHkNSyG7NYX7PFM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.120.16.0/22
                  85.122.182.0/23
                  193.226.68.0/22
                  194.102.91.0/24
                  217.156.46.0/23
                  217.156.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:a9:05:bc:61:03:19:3b:aa:b2:af:b8:72:3b:af:26:91:f2:
         e7:a6:75:f9:58:ab:23:07:24:63:7b:16:06:7e:16:76:68:21:
         59:e7:cb:a7:3f:e0:1f:7e:9a:55:53:71:a7:26:f7:7d:fe:84:
         cc:bf:00:22:d2:55:f8:08:75:1b:36:4e:a9:c4:df:fe:dc:7a:
         84:62:2a:d6:30:6b:61:63:2d:33:7b:4f:0b:de:62:78:26:62:
         25:bc:88:e5:37:8f:fc:2a:60:12:00:de:e6:74:cb:bc:b9:32:
         9f:bd:b5:4c:9a:17:c4:8c:b4:85:50:ee:ef:0d:3c:b4:ee:6b:
         36:0e:a9:f2:82:3f:7b:9f:fb:b4:da:f1:32:97:eb:00:49:31:
         a4:aa:d1:d1:6d:e3:cd:88:94:df:af:8d:0e:65:88:ef:6d:c5:
         22:03:e2:ad:9b:83:3f:6c:34:73:c6:70:02:7e:19:b6:79:5f:
         8c:e7:c0:63:cd:a2:cf:9e:fa:4e:e5:4f:a2:ca:f8:6c:98:ef:
         0b:38:4a:e7:81:26:00:c7:34:19:c4:da:98:33:76:0c:a1:77:
         48:ba:31:94:94:d5:49:31:41:ff:5a:b5:a8:ae:9d:39:c9:81:
         6e:02:72:55:b6:0e:f6:f7:ec:a9:12:0f:5e:bf:57:08:41:04:
         13:79:d1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:49:03 2026 by rpki-client