This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/fzpf91ZVxSyjkpJthW1ioGWIhp4.roa
File:                     fzpf91ZVxSyjkpJthW1ioGWIhp4.roa (raw, json)
Hash identifier:          ryNazaSm80nyBlQG4XkXpwOiUN2WFZ22ImBpcGYlMTQ=
Subject key identifier:   7F:3A:5F:F7:56:55:C5:2C:A3:92:92:6D:85:6D:62:A0:65:88:86:9E
Certificate issuer:       /CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c
Certificate serial:       019B7D5B433DB35BBFC3CADEAF230B755335
Authority key identifier: 8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/fzpf91ZVxSyjkpJthW1ioGWIhp4.roa
Signing time:             Fri 02 Jan 2026 06:18:11 +0000
ROA not before:           Fri 02 Jan 2026 06:18:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     12447
IP address blocks:        77.75.24.0/21 maxlen: 24
                          185.132.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:43:3d:b3:5b:bf:c3:ca:de:af:23:0b:75:53:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c
        Validity
            Not Before: Jan  2 06:18:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7f3a5ff75655c52ca392926d856d62a06588869e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8e:80:f6:de:a5:87:8a:9b:ba:3c:26:95:85:
                    2f:0b:d6:5c:2b:95:d2:c8:e4:f1:c7:2d:0c:7f:1c:
                    ab:36:4d:9d:45:63:62:dc:07:24:bc:0b:d3:99:4e:
                    5d:4d:20:f5:86:2b:90:93:ab:ec:14:40:35:ab:b9:
                    76:57:66:7c:34:47:6a:74:0a:2d:4b:f1:c9:c3:f5:
                    5b:52:c4:5b:31:d9:07:f3:df:93:03:9c:11:99:db:
                    b2:c0:a8:78:26:8e:fc:a3:d2:dd:0e:d1:09:63:05:
                    2b:6f:be:fa:23:73:5a:58:8a:fc:e9:d8:4a:05:14:
                    09:b2:c6:29:9d:a0:ea:1c:18:ed:da:ef:ab:50:cd:
                    a5:52:07:f3:f2:91:46:b6:26:9b:46:cb:db:78:80:
                    35:0e:d3:29:14:4f:7d:51:0d:8d:be:fb:37:c6:66:
                    52:ac:a4:ff:dc:ee:76:3f:1f:53:ed:12:8b:0a:6d:
                    4a:6f:5e:15:33:bf:6e:67:a5:2b:ee:0c:ff:a3:4d:
                    5e:5c:16:04:73:76:54:d3:e4:77:4c:d2:75:53:ea:
                    60:a6:71:fc:f0:cf:3a:8a:d3:68:33:72:5a:50:a6:
                    ce:6f:0d:3c:cd:19:ab:56:4a:2e:7d:d0:66:c4:f0:
                    0c:53:b5:12:9b:46:44:23:19:c0:36:82:71:4d:1b:
                    21:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3A:5F:F7:56:55:C5:2C:A3:92:92:6D:85:6D:62:A0:65:88:86:9E
            X509v3 Authority Key Identifier:
                keyid:8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/fzpf91ZVxSyjkpJthW1ioGWIhp4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.24.0/21
                  185.132.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:fa:a1:27:95:f1:78:cc:b6:da:8d:81:d6:be:cf:a3:3a:7e:
         8f:05:ce:36:d4:fa:61:64:d1:8a:ae:51:7c:19:a2:21:9c:18:
         84:af:e9:11:aa:ea:28:f1:34:0f:21:85:10:18:ca:1a:70:20:
         cf:b1:04:08:f9:53:42:cc:66:a2:60:00:6f:4e:4b:57:4f:01:
         fc:47:5a:69:7b:02:fc:e1:dd:bf:c6:84:0c:92:40:66:36:a1:
         56:15:19:b7:c6:8b:f5:b2:6b:1d:0f:2f:ad:0c:ab:00:25:46:
         67:b8:65:28:4b:ac:a6:6d:63:67:0c:ed:8f:56:fb:c5:0e:c8:
         1b:d2:0f:81:f5:ef:ba:22:7f:0f:2f:07:6a:d4:26:85:03:00:
         cd:6f:89:b9:db:df:91:1a:f7:9e:31:28:68:7d:83:2a:13:1a:
         22:a0:b7:d1:73:ff:d3:6c:ab:c2:24:1f:70:79:eb:06:39:b8:
         03:4a:b9:ec:fb:65:e8:fe:24:96:c9:fe:1d:91:7a:68:2f:e1:
         12:ff:ee:f0:ec:d8:e9:e3:d8:3f:b3:a5:63:31:e2:27:22:03:
         1f:44:c6:a6:56:41:61:26:83:0a:a3:09:51:85:2c:d4:b0:ad:
         b1:8b:ab:a6:7a:63:5f:75:95:7b:43:d0:41:b3:88:77:84:fe:
         53:b2:52:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:30 2026 by rpki-client