This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/fTPoxCe4jGfBgPBLkUKcm_JbirE.roa
File:                     fTPoxCe4jGfBgPBLkUKcm_JbirE.roa (raw, json)
Hash identifier:          02Sw+k6mgA2rz0rcR6vWe/Ze2n73fjDgyV/8LWMOJoc=
Subject key identifier:   7D:33:E8:C4:27:B8:8C:67:C1:80:F0:4B:91:42:9C:9B:F2:5B:8A:B1
Certificate issuer:       /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial:       019B7BA391C1BBBEFD4BC6D14D5C16625F75
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/fTPoxCe4jGfBgPBLkUKcm_JbirE.roa
Signing time:             Thu 01 Jan 2026 22:17:55 +0000
ROA not before:           Thu 01 Jan 2026 22:17:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208645
IP address blocks:        45.91.244.0/22 maxlen: 22
                          185.91.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:91:c1:bb:be:fd:4b:c6:d1:4d:5c:16:62:5f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
        Validity
            Not Before: Jan  1 22:17:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7d33e8c427b88c67c180f04b91429c9bf25b8ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:0a:3d:7d:c5:1b:f9:7d:83:8d:32:9f:3c:
                    45:bd:f4:d5:bc:15:7d:d4:21:18:4a:4c:cf:fc:cd:
                    fb:dd:99:48:e0:02:ac:aa:7f:5c:3c:33:d7:72:c5:
                    ad:b1:80:54:5d:8b:45:0d:b6:b1:8a:92:af:79:6d:
                    56:8e:e3:d6:a8:f4:90:56:36:bd:98:18:17:65:3d:
                    ea:00:82:42:5f:4b:42:cb:92:1d:15:a2:26:4c:ff:
                    ef:e5:0f:27:c9:5c:55:d9:2d:87:8a:b1:d4:30:0a:
                    8f:28:e1:b9:98:8a:6c:c6:5c:d4:26:84:81:e5:4d:
                    06:e9:c3:af:1f:ed:9d:c9:e2:b7:22:41:b2:7e:0d:
                    9d:55:87:d8:04:b6:11:7b:3f:ae:8b:70:16:09:51:
                    a9:56:25:08:24:a4:36:3b:a0:9e:30:c6:ba:1f:98:
                    3b:ee:56:22:3c:c2:b9:31:06:52:3b:91:55:02:ec:
                    4e:71:2a:c8:1a:62:ee:1e:fd:d9:2e:1b:60:2f:5e:
                    40:94:1b:47:06:bf:6a:0c:b2:da:c6:72:55:83:f4:
                    a9:a7:0b:22:55:0a:b3:c5:db:a3:97:48:bf:dc:4e:
                    0d:46:ae:d7:9d:2a:60:8b:bf:6a:c6:fe:2b:32:e6:
                    c2:c9:b2:d1:a1:76:bd:d2:ba:47:bb:db:f6:9c:1f:
                    91:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:33:E8:C4:27:B8:8C:67:C1:80:F0:4B:91:42:9C:9B:F2:5B:8A:B1
            X509v3 Authority Key Identifier:
                keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/fTPoxCe4jGfBgPBLkUKcm_JbirE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.244.0/22
                  185.91.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:05:23:81:4f:a4:da:7a:2d:be:5b:51:e2:67:fa:7f:2d:fa:
         9c:25:80:b3:7d:e5:c2:65:5f:a2:88:49:71:1c:14:18:d4:9e:
         e7:f2:73:c5:39:6b:8c:42:72:c9:67:1f:2c:34:2e:62:2f:8e:
         e4:87:95:6f:5b:b8:f9:1f:4f:77:ec:12:ac:5a:af:10:a1:cb:
         cf:4a:00:1f:a1:36:eb:47:30:a6:da:ef:26:2c:74:3f:b0:11:
         34:6d:36:99:5a:14:1b:1d:f1:23:b5:33:b4:5f:e5:4d:84:3e:
         37:a7:d6:bb:a2:18:77:8c:dc:63:68:7c:1b:e4:b4:b2:33:eb:
         59:7e:2f:d6:2e:a6:2a:2c:50:1d:18:e0:02:45:f7:60:a2:91:
         19:e7:5e:be:c3:d9:1a:7c:a2:a7:5e:eb:03:3f:65:00:68:88:
         ca:a8:0f:01:9e:8b:2b:15:5b:dc:40:8b:fd:f9:34:15:c3:00:
         c8:bf:3f:6e:8e:01:d8:3e:2b:ed:6b:fe:0b:bb:c9:67:0c:a6:
         06:c5:c8:ad:e1:f0:52:e7:be:ef:c2:19:f4:59:92:34:65:95:
         b5:e1:61:41:03:d6:7b:50:67:06:78:36:fe:76:54:0a:ca:7b:
         e3:5c:ea:e5:b2:8d:57:fd:b5:b3:23:b4:cc:7b:7d:c3:08:e9:
         78:6c:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:31:23 2026 by rpki-client