This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/fGwA4UVWnTInJTQFBgLjgqqUvWA.roa
File:                     fGwA4UVWnTInJTQFBgLjgqqUvWA.roa (raw, json)
Hash identifier:          smORfipzlcV9Mgc7rKdtsSqeDOL72wHcawRQUAa2fws=
Subject key identifier:   7C:6C:00:E1:45:56:9D:32:27:25:34:05:06:02:E3:82:AA:94:BD:60
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019AE501C515C294A07DAB2EBCD1FA54DC3F
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/fGwA4UVWnTInJTQFBgLjgqqUvWA.roa
Signing time:             Wed 03 Dec 2025 16:18:09 +0000
ROA not before:           Wed 03 Dec 2025 16:18:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213323
IP address blocks:        80.96.48.0/23 maxlen: 23
                          80.97.144.0/23 maxlen: 23
                          80.97.150.0/23 maxlen: 23
                          81.181.28.0/23 maxlen: 23
                          81.181.114.0/23 maxlen: 23
                          81.181.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e5:01:c5:15:c2:94:a0:7d:ab:2e:bc:d1:fa:54:dc:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Dec  3 16:18:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7c6c00e145569d32272534050602e382aa94bd60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9e:f4:14:5c:09:15:5b:52:5d:bb:f8:c8:be:
                    23:a2:21:7f:c9:3a:79:ca:0c:32:f2:d4:ad:bd:93:
                    18:88:62:83:a2:90:d3:06:33:4f:4a:9c:d0:40:1b:
                    6f:7a:3f:fc:01:0e:ce:88:35:67:5a:73:fa:3e:65:
                    d3:46:72:b4:2c:b1:03:c1:f3:f0:0b:32:fb:86:3f:
                    97:72:48:47:88:e5:37:fd:67:9d:cd:8e:fc:7c:a9:
                    76:54:a9:ff:52:e7:b9:b8:29:5b:6f:0e:c6:0b:da:
                    19:15:a4:71:60:87:79:5c:b4:03:37:5f:26:1f:0e:
                    b4:58:2c:24:0c:e0:c2:cb:83:cf:13:4a:87:d2:f0:
                    72:98:45:ca:dc:c0:6c:f5:e8:6d:c9:d6:fd:a3:e5:
                    86:8d:9f:63:16:93:f3:0e:1e:51:67:b1:94:ba:bc:
                    07:ce:e7:4e:b9:64:d0:ce:d5:07:81:fd:08:89:4b:
                    3e:43:dc:be:e0:27:bd:c0:4d:1e:ef:a2:d3:2e:10:
                    24:b1:05:d8:fd:85:84:a8:d3:7c:ca:5a:a1:2a:76:
                    60:a1:d8:0f:21:fd:91:53:59:83:fc:ac:e4:9c:c4:
                    77:6b:2b:8c:32:2b:f1:e0:48:58:95:82:f5:67:aa:
                    75:da:c8:6e:ec:1e:1b:f2:fb:e4:86:a3:1c:c9:67:
                    15:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6C:00:E1:45:56:9D:32:27:25:34:05:06:02:E3:82:AA:94:BD:60
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/fGwA4UVWnTInJTQFBgLjgqqUvWA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.48.0/23
                  80.97.144.0/23
                  80.97.150.0/23
                  81.181.28.0/23
                  81.181.114.0/23
                  81.181.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:29:ad:94:b3:08:a5:6e:38:21:da:f1:55:90:13:b0:eb:df:
         4d:04:44:28:80:48:4a:c1:be:86:bd:9f:27:e3:8f:c5:e9:34:
         4d:fc:3f:15:7c:00:94:a1:15:cb:26:1d:64:d0:23:3c:60:56:
         44:05:4b:19:a0:5f:76:58:f2:0d:30:e1:b1:7a:86:53:49:13:
         0e:ad:05:80:19:33:ed:28:ea:58:9b:1b:13:42:b5:f0:f5:6b:
         be:bb:93:1c:20:e1:40:b2:13:fc:e7:10:98:83:a4:8f:2e:82:
         52:4e:b2:8f:63:98:d2:c6:5e:58:e3:c9:00:84:cc:fd:10:f1:
         2a:ed:93:fe:c6:c0:be:90:16:40:ec:68:05:d2:01:36:cd:b0:
         34:c8:f5:37:84:91:da:22:3d:a5:6c:df:9f:f9:c7:8d:22:fc:
         97:3c:ac:38:bc:c2:f3:d3:55:9a:42:8d:b2:65:61:b4:be:c8:
         f4:7b:8b:78:47:eb:4a:72:f0:84:70:35:f2:a5:ce:23:42:58:
         87:f0:63:2a:a3:dc:be:78:9f:2f:e4:83:58:94:83:b2:36:8a:
         24:f0:d2:2c:f7:f1:7e:e3:1d:91:44:31:d1:a6:8d:6e:26:2c:
         28:bb:7f:3a:75:fd:c4:97:ba:8d:7d:25:c7:1a:18:dd:fc:44:
         69:b4:28:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 20:14:21 2025 by rpki-client