This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/_F5w43RHV6dx3R_wQAV5wzUAHzc.roa
File:                     _F5w43RHV6dx3R_wQAV5wzUAHzc.roa (raw, json)
Hash identifier:          BxgPa91m82H9cRlL0aKlQX+98I+Jq5YFGlS8SucX+mo=
Subject key identifier:   FC:5E:70:E3:74:47:57:A7:71:DD:1F:F0:40:05:79:C3:35:00:1F:37
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       019B7EA559CB98B91634AC60F92E81C373F0
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/_F5w43RHV6dx3R_wQAV5wzUAHzc.roa
Signing time:             Fri 02 Jan 2026 12:18:44 +0000
ROA not before:           Fri 02 Jan 2026 12:18:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201480
IP address blocks:        2a10:4646:250::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Jan 2026 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a5:59:cb:98:b9:16:34:ac:60:f9:2e:81:c3:73:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: Jan  2 12:18:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fc5e70e3744757a771dd1ff0400579c335001f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a8:8c:2a:e6:59:9b:14:c6:5c:54:7a:d7:af:
                    e9:68:6f:2f:84:38:32:4d:e6:44:22:b8:f8:67:0c:
                    47:e9:57:d7:7a:13:fa:b4:d5:6c:ab:80:95:e8:2f:
                    ec:b2:a1:6b:c8:e8:16:b2:0a:6c:d1:6f:5d:d7:35:
                    76:d7:ef:0d:3b:f7:ff:fe:48:0d:39:51:ea:fd:56:
                    14:3c:d5:c1:61:48:dd:5a:a8:60:1a:42:96:82:c8:
                    87:57:99:f8:c6:7b:7c:3d:bc:16:7c:13:5a:c2:0d:
                    d2:0d:b0:53:ef:4c:b7:4d:ce:ef:05:0b:1f:18:19:
                    38:8a:53:de:9d:3b:58:70:7e:1d:03:af:4f:6b:df:
                    ab:10:53:c4:43:46:3c:00:d9:3b:f5:04:1a:89:f4:
                    f8:11:a4:d7:44:e1:8e:a2:7c:51:96:cd:a9:02:a1:
                    e2:e2:f6:c0:70:26:ce:75:30:9b:e0:cc:70:29:cf:
                    90:bd:53:e9:ac:5b:84:02:76:52:64:31:0f:dc:3d:
                    89:5f:5f:a2:3b:80:ff:c0:43:9f:f2:98:f6:ba:98:
                    87:18:58:48:ef:d7:d6:d4:cf:23:46:ff:98:9d:20:
                    b7:88:a5:54:6d:f0:d3:79:3f:cf:2e:ec:45:82:0f:
                    47:40:88:ff:c7:df:c1:4d:5b:2f:d7:cc:db:af:3f:
                    42:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5E:70:E3:74:47:57:A7:71:DD:1F:F0:40:05:79:C3:35:00:1F:37
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/_F5w43RHV6dx3R_wQAV5wzUAHzc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:250::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:39:50:91:aa:6f:45:8e:43:9d:ef:a1:07:94:d0:d0:fe:e6:
         27:18:e2:aa:cb:80:f3:04:ac:11:c7:97:5b:b4:97:85:26:0a:
         f9:67:29:21:3b:b1:e2:d3:49:b5:68:1f:9e:4f:61:ec:16:f2:
         47:bf:45:42:66:59:c5:93:2b:d3:40:a8:fb:30:eb:5a:72:53:
         1c:54:b8:24:9e:ba:02:0c:12:75:18:69:e2:d7:a3:99:79:e5:
         77:e8:61:24:0c:3c:9d:59:e0:d1:3c:a8:ae:3a:cf:4a:b8:b6:
         47:9d:e0:57:c8:0a:d6:9a:ff:f2:00:ca:c4:2f:6e:db:11:e0:
         4f:06:fb:77:c2:c9:4d:95:82:38:da:89:44:4d:61:d5:9a:74:
         68:51:47:cf:4a:ad:4f:78:8d:92:67:6a:90:3d:32:6e:b1:3f:
         65:c3:6b:a4:ba:d0:a4:bf:94:ea:7e:6a:aa:bd:8b:b8:44:a6:
         64:89:96:30:e1:f2:81:3d:82:17:2d:0a:64:0a:e2:8a:6d:a5:
         92:2e:07:90:4c:78:e9:3d:3f:d7:aa:07:38:9f:e6:36:50:f9:
         4a:23:21:03:4a:79:43:45:7d:25:17:e6:78:f9:8c:c2:2f:9f:
         8d:6b:92:bc:fa:5b:97:f5:ce:a3:1e:53:5c:71:47:91:5e:ea:
         80:51:da:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 22:55:38 2026 by rpki-client