This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/Fve8k_OZNdjUkZnIqvSmNlcd0Lg.roa
File:                     Fve8k_OZNdjUkZnIqvSmNlcd0Lg.roa (raw, json)
Hash identifier:          UBZQn4YtqRGaTXDZC6SHIOianNxT0DmdDIUesthKpiY=
Subject key identifier:   16:F7:BC:93:F3:99:35:D8:D4:91:99:C8:AA:F4:A6:36:57:1D:D0:B8
Certificate issuer:       /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Certificate serial:       019B7F8331AB044A067C5ACF02FA777F5BF2
Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/Fve8k_OZNdjUkZnIqvSmNlcd0Lg.roa
Signing time:             Fri 02 Jan 2026 16:21:02 +0000
ROA not before:           Fri 02 Jan 2026 16:21:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198932
IP address blocks:        193.242.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:31:ab:04:4a:06:7c:5a:cf:02:fa:77:7f:5b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
        Validity
            Not Before: Jan  2 16:21:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=16f7bc93f39935d8d49199c8aaf4a636571dd0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:ad:f2:10:38:73:bf:8d:da:8b:30:33:3f:
                    27:af:05:1f:fb:ac:bd:e2:13:45:11:62:c6:2b:12:
                    d5:a8:b1:f5:76:d5:00:14:38:23:0c:62:25:e3:e0:
                    8d:5b:25:c0:61:86:0b:80:8a:7e:19:99:8f:37:0d:
                    63:84:b9:51:83:6e:c7:47:4e:b2:97:a9:e7:93:4b:
                    5f:52:07:87:dd:4c:f2:d5:fc:b1:5e:81:83:86:da:
                    59:73:87:f4:42:23:ba:7b:df:4d:ba:70:c6:15:f1:
                    94:8f:e7:98:0b:64:ab:54:e6:05:30:c0:00:d5:7d:
                    2d:f8:89:0f:e0:12:63:25:34:29:79:9f:d6:66:3f:
                    f0:0e:17:87:17:69:48:12:2a:27:56:c7:1f:99:eb:
                    30:35:5d:27:ed:32:f9:c1:b6:d6:f9:e5:aa:b1:bf:
                    fb:a6:1d:99:77:cb:4c:89:95:e9:56:c7:ad:ef:5a:
                    88:3b:0e:0e:48:58:d4:ab:68:eb:51:e9:1c:22:48:
                    a6:10:ce:f2:59:4f:52:ff:a1:3d:43:c5:01:f9:4d:
                    a9:cf:5d:cb:89:e0:7c:71:0b:2e:ca:25:d2:36:74:
                    fe:0f:9e:26:e1:5e:5d:7c:01:e7:6e:b9:b9:8f:46:
                    47:5e:6c:60:2f:96:7b:9b:97:cd:d1:b5:76:91:11:
                    54:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F7:BC:93:F3:99:35:D8:D4:91:99:C8:AA:F4:A6:36:57:1D:D0:B8
            X509v3 Authority Key Identifier:
                keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/Fve8k_OZNdjUkZnIqvSmNlcd0Lg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.242.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:67:12:97:8e:cf:57:f2:97:ec:a1:49:35:14:60:a9:a0:ba:
         e0:5a:5e:a6:71:dc:60:0a:f0:76:ca:fc:de:6b:c7:91:cb:29:
         73:62:96:f5:bc:44:5a:80:a8:fb:2b:f9:70:cf:01:d6:8d:3f:
         41:bb:56:a1:fa:f9:c9:18:8c:5c:c3:cf:e1:71:cd:bb:b5:67:
         25:5c:be:d7:c2:81:65:4e:4a:da:76:62:18:53:32:ae:e7:86:
         6f:3c:aa:18:8b:6a:ce:72:5e:d1:97:a0:b9:52:2d:61:28:44:
         12:59:36:8b:30:19:ae:56:77:3c:f8:d8:17:d5:41:8e:0d:43:
         c4:f7:80:5c:c8:41:3e:ea:46:8b:07:75:f6:ed:94:36:53:c4:
         64:99:26:f1:3c:69:85:ee:2a:46:f8:3a:16:f2:62:bf:6e:72:
         fc:3f:47:dc:9d:4a:0e:af:a6:08:38:40:92:0a:0a:c0:6c:5b:
         51:1f:b8:dd:b4:81:65:d5:75:6f:b3:af:15:2f:70:7e:7c:23:
         2d:ee:62:43:2a:b1:af:92:f1:f9:5f:2d:5c:4d:14:9e:81:62:
         79:08:93:6b:7a:d2:cc:e7:e5:da:d5:6d:21:fa:aa:50:76:3e:
         12:67:14:c3:0f:85:5a:2b:c6:a9:77:0f:4b:d1:7d:8c:87:ff:
         c2:39:7c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:09:33 2026 by rpki-client