This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/F5f-3aC06oFfat6kysD7KzPEy7s.roa
File:                     F5f-3aC06oFfat6kysD7KzPEy7s.roa (raw, json)
Hash identifier:          uf9RFkZjIVlqZ17DS35sOy7dY67XFR7qpT1cpxsxJnM=
Subject key identifier:   17:97:FE:DD:A0:B4:EA:81:5F:6A:DE:A4:CA:C0:FB:2B:33:C4:CB:BB
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       019B7A5B30CCA05F106E7CDCF3CF660ABE46
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/F5f-3aC06oFfat6kysD7KzPEy7s.roa
Signing time:             Thu 01 Jan 2026 16:19:15 +0000
ROA not before:           Thu 01 Jan 2026 16:19:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     54103
IP address blocks:        193.201.203.0/24 maxlen: 24
                          194.55.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:30:cc:a0:5f:10:6e:7c:dc:f3:cf:66:0a:be:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Jan  1 16:19:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1797fedda0b4ea815f6adea4cac0fb2b33c4cbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:86:8e:c3:21:81:c2:ef:94:fd:7f:65:08:fd:
                    9f:2b:c1:0c:ac:30:8c:c8:54:7c:00:95:8a:7e:ea:
                    6d:11:e2:50:ca:3f:c5:94:40:72:f0:b1:ff:b1:88:
                    4b:8e:01:3c:28:d7:05:9c:34:d2:a4:d8:b3:66:55:
                    70:28:5b:db:5c:62:33:34:de:5a:6c:15:cd:b7:78:
                    31:01:2d:e3:50:6b:00:b8:18:04:c8:1f:27:8d:c0:
                    1f:26:1b:7c:39:de:c0:e9:2d:e2:1f:9d:56:73:e9:
                    06:89:a7:f0:ec:11:30:df:51:a0:a6:c9:3c:e4:5b:
                    ff:8a:3e:91:b5:88:88:72:00:2b:ac:7e:1c:b5:34:
                    8d:9d:29:7a:95:b8:55:06:5c:cf:1b:82:6f:a4:cd:
                    04:ab:16:60:31:52:cf:6d:86:fc:c4:76:d8:61:20:
                    1f:d5:c0:d1:50:ad:9b:60:5d:87:d4:12:ef:b3:16:
                    1b:3a:a8:ba:f9:c9:45:87:f0:1b:02:10:b4:a7:4f:
                    ac:d3:a1:61:36:ca:48:1e:bb:42:36:da:79:72:d6:
                    28:6c:98:37:ab:b5:ea:24:74:65:a6:16:ce:d9:91:
                    8a:2b:f2:65:d7:cb:c8:1a:e6:dd:41:53:c5:c5:74:
                    30:b6:9c:c0:46:b7:c9:a0:19:84:cd:6b:f0:7f:3f:
                    31:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:97:FE:DD:A0:B4:EA:81:5F:6A:DE:A4:CA:C0:FB:2B:33:C4:CB:BB
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/F5f-3aC06oFfat6kysD7KzPEy7s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.203.0/24
                  194.55.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:a5:b7:70:f2:3a:5e:28:68:d3:2e:81:d2:bb:27:94:67:52:
         82:09:1f:56:bb:ed:64:bf:1c:be:82:ce:86:1e:be:55:c1:63:
         bd:18:ec:85:01:e6:ce:50:79:bc:45:59:bd:a7:e4:c8:8f:15:
         99:81:c0:fa:aa:4b:77:46:fb:d2:17:d4:d6:69:b2:7a:b7:19:
         2a:09:f6:56:40:8c:6d:68:ab:cc:44:b7:14:aa:59:99:ae:aa:
         e3:19:36:77:a2:20:ea:3d:4a:31:11:42:1a:c7:a4:ac:53:68:
         7e:70:a3:4c:fd:ca:5b:99:0d:ca:cd:4b:5f:43:69:bf:b0:8c:
         62:82:55:7f:54:36:1a:2b:79:86:a3:75:94:fe:ff:0c:4e:e5:
         73:0e:ed:ac:92:23:26:29:91:fd:e3:ec:b6:66:b1:f1:e9:5f:
         a9:3a:20:4f:62:74:d4:72:db:8a:fc:36:2a:f2:fe:d7:97:7d:
         c9:3c:0d:ed:62:3e:54:c5:18:ad:70:c4:f2:8e:f6:89:62:5a:
         35:1d:6d:90:2f:e1:38:65:f5:f5:f2:f8:22:e6:0d:19:da:20:
         02:83:69:b7:44:91:9b:aa:0f:27:74:0c:51:46:c5:62:9e:e1:
         80:c2:c7:44:08:8a:ea:17:3b:d9:b7:d6:7f:e2:0d:2f:c1:eb:
         35:35:0d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:00:45 2026 by rpki-client