This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/TFVe-dXGuNawzmnfdegYq6flUl8.roa
File:                     TFVe-dXGuNawzmnfdegYq6flUl8.roa (raw, json)
Hash identifier:          vQbZ+TX1ZBjYH0NW4eiYLXLkpBqwSOxwA5OLO5L2sYg=
Subject key identifier:   4C:55:5E:F9:D5:C6:B8:D6:B0:CE:69:DF:75:E8:18:AB:A7:E5:52:5F
Certificate issuer:       /CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390
Certificate serial:       019B76EB3EE3F43F7660B08D3C297F0C9450
Authority key identifier: CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/TFVe-dXGuNawzmnfdegYq6flUl8.roa
Signing time:             Thu 01 Jan 2026 00:18:07 +0000
ROA not before:           Thu 01 Jan 2026 00:18:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51778
IP address blocks:        194.5.228.0/22 maxlen: 23
                          2a0c:e740::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:3e:e3:f4:3f:76:60:b0:8d:3c:29:7f:0c:94:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390
        Validity
            Not Before: Jan  1 00:18:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4c555ef9d5c6b8d6b0ce69df75e818aba7e5525f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bd:e8:1e:03:25:2f:5b:79:f3:77:89:b6:4e:
                    8c:01:ec:c3:a9:85:6b:de:4e:8a:9e:10:ee:67:a0:
                    90:d7:b1:30:9f:31:34:f3:f0:06:7a:d9:23:74:e5:
                    5f:2c:aa:1e:f2:f7:17:07:0a:f3:fa:ac:7a:e4:62:
                    22:57:2d:3c:7a:57:f8:c1:2b:9f:26:c3:4e:fe:24:
                    19:95:7d:29:b6:e8:23:3c:d3:c1:0d:26:c2:23:7a:
                    0c:75:60:e1:52:f4:9d:ff:44:3c:dd:66:38:e2:a5:
                    ed:04:39:2e:df:ed:88:2d:31:1b:7c:74:39:5e:49:
                    fe:0f:96:b8:fa:25:34:17:f3:19:f6:8e:db:29:88:
                    85:fa:d8:26:ff:05:18:1b:16:9d:7b:48:a4:3d:a4:
                    8d:57:a9:e5:04:d0:5f:8e:b2:ce:6a:5d:13:4b:a6:
                    8f:a0:59:3a:fb:8e:5c:9e:83:a0:86:84:46:5b:76:
                    12:95:c2:0b:1e:54:ed:15:ca:c4:78:0f:57:fc:51:
                    7a:4c:50:44:0f:f7:ba:a6:0b:da:25:2c:82:df:8d:
                    bb:8a:0f:3e:71:44:4d:d2:a4:ac:50:a5:5c:ac:10:
                    58:a3:e1:52:23:66:f7:f8:44:8f:03:0f:6f:3c:99:
                    4f:e0:5d:2f:d0:77:90:ba:41:a3:35:e9:f3:a6:37:
                    80:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:55:5E:F9:D5:C6:B8:D6:B0:CE:69:DF:75:E8:18:AB:A7:E5:52:5F
            X509v3 Authority Key Identifier:
                keyid:CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/TFVe-dXGuNawzmnfdegYq6flUl8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.5.228.0/22
                IPv6:
                  2a0c:e740::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:37:15:b3:20:1c:21:50:c1:0e:3b:69:22:8b:5e:9f:f7:0c:
         c5:0c:6c:49:91:c2:bc:27:1f:9f:82:78:a5:43:8d:de:a4:58:
         81:30:68:9f:3a:3b:c0:a2:74:bf:7e:17:e0:6c:cf:e9:e3:9a:
         2e:be:a4:17:ac:12:7d:32:f4:a9:2c:9c:48:c5:e7:f2:b7:79:
         b0:b6:3f:f8:ef:aa:25:53:aa:f9:52:fe:a2:dd:b8:6f:2a:de:
         68:56:ad:d4:8f:9e:93:0c:b9:f5:f9:79:32:48:e4:c9:af:7c:
         80:18:54:8d:e2:67:32:97:2d:b0:ef:e6:b5:f2:40:6a:ee:31:
         98:38:a9:f9:db:4e:63:6a:2e:72:bf:0e:9e:d0:da:0b:cc:91:
         66:02:dc:e4:f4:38:c4:35:00:e1:64:f9:d3:02:bb:a9:5f:d8:
         89:26:5a:10:75:ee:23:70:24:2e:02:e9:41:b1:89:8c:7e:29:
         24:90:b9:57:3d:8f:14:ce:23:60:05:bf:a9:46:c8:d5:8c:83:
         9f:9e:9f:83:ad:ec:1c:52:d4:b6:4f:8a:fc:f6:21:75:e6:e0:
         d4:8b:8b:0b:01:f8:1c:1a:e4:ef:d1:85:9d:3d:f6:27:30:1e:
         bf:a6:96:b9:5e:14:7c:0a:53:fd:cc:e6:6a:ed:34:1c:6e:78:
         a9:d0:65:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:54 2026 by rpki-client