This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/fKvVor01qPV-ORu7n9y9qnaHTq4.roa
File:                     fKvVor01qPV-ORu7n9y9qnaHTq4.roa (raw, json)
Hash identifier:          6ofwzO42r/7tumxMn3VHGwc5argotSWNwp1rVW1buqA=
Subject key identifier:   7C:AB:D5:A2:BD:35:A8:F5:7E:39:1B:BB:9F:DC:BD:AA:76:87:4E:AE
Certificate issuer:       /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial:       019B7F809BE9CF31F6951245040E051E9E51
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/fKvVor01qPV-ORu7n9y9qnaHTq4.roa
Signing time:             Fri 02 Jan 2026 16:18:13 +0000
ROA not before:           Fri 02 Jan 2026 16:18:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201430
IP address blocks:        185.80.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:80:9b:e9:cf:31:f6:95:12:45:04:0e:05:1e:9e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
        Validity
            Not Before: Jan  2 16:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7cabd5a2bd35a8f57e391bbb9fdcbdaa76874eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:aa:7a:e4:ac:26:8b:bb:ae:8d:84:4e:8f:70:
                    0f:92:32:9e:52:83:7e:15:6c:51:4b:5b:ad:67:aa:
                    4c:ee:97:ce:a1:00:4e:d4:32:72:96:17:d2:95:aa:
                    1c:73:a5:4f:06:67:52:4c:e3:0c:3d:ce:14:7c:33:
                    68:01:af:43:8e:5f:a1:49:f7:16:f2:9a:90:a8:1f:
                    84:fb:20:7d:54:73:19:ef:c6:b5:63:61:36:f3:57:
                    c1:ba:f9:5a:77:5a:33:6c:d5:1e:ec:35:a0:d3:68:
                    80:bc:8b:7c:c0:41:29:e0:12:5f:c4:4b:bc:1b:b4:
                    15:06:e9:36:0b:89:0f:15:69:c3:a7:be:07:0b:bc:
                    dc:b6:4c:21:ce:05:27:20:82:2e:9f:e7:ed:b0:b9:
                    28:fb:ed:aa:43:67:14:6d:55:e9:00:60:7a:66:55:
                    90:28:ff:0c:5e:c8:b2:6c:19:5e:a2:1e:c4:b2:dc:
                    fe:37:f5:0b:f4:26:73:54:56:88:cb:4c:31:c0:04:
                    10:08:69:6b:73:95:02:b9:12:38:bc:b5:36:c4:69:
                    c0:6d:f6:e7:50:e8:1c:61:7b:d6:46:cc:05:67:71:
                    53:33:0a:8d:0e:56:39:da:a9:d1:e0:3b:f3:05:9b:
                    48:bb:a8:67:7c:8f:8b:d3:9d:90:7c:c9:95:78:25:
                    5e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AB:D5:A2:BD:35:A8:F5:7E:39:1B:BB:9F:DC:BD:AA:76:87:4E:AE
            X509v3 Authority Key Identifier:
                keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/fKvVor01qPV-ORu7n9y9qnaHTq4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:c3:47:b6:e0:81:b0:01:3a:d6:bf:f0:dc:fa:f1:84:1c:95:
         3a:fd:d8:80:e8:e1:3d:ef:2e:37:1d:08:1a:72:a2:95:ee:bb:
         b4:6f:17:e7:f5:8d:14:a4:ea:ea:dc:55:ea:44:7c:7c:b4:c5:
         61:f6:7a:46:ae:bd:46:61:2d:96:c1:ec:8e:2e:22:e7:28:d6:
         66:2f:78:0e:df:ad:bb:9a:25:a4:04:ee:42:11:15:0e:eb:8d:
         6a:69:e0:16:1e:02:d0:63:46:90:48:08:fe:38:cb:a6:04:02:
         d7:eb:63:1f:ec:4e:78:50:85:f1:e3:76:e4:df:a5:4d:0a:91:
         15:2c:b7:ca:55:e0:78:1c:3d:13:38:bd:d0:29:29:21:04:40:
         63:de:a6:e5:ee:47:a3:d3:83:55:fa:72:8a:52:84:fe:0a:18:
         5c:aa:c3:75:c4:db:d1:2b:97:af:a3:90:fb:42:ac:01:e0:82:
         9e:c0:ec:bf:b5:b7:d1:fb:67:f2:3a:05:df:7b:75:22:11:eb:
         4b:79:49:13:19:ab:2c:69:6c:22:60:a2:44:8d:e3:ff:a1:26:
         9c:bc:9e:ce:d1:bc:cc:6a:bd:2b:58:18:df:c9:c7:bf:81:d3:
         b2:16:c3:41:2d:17:66:6c:26:88:06:a7:25:18:dc:97:8a:2a:
         fe:2a:ab:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:32 2026 by rpki-client