This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/FwQPCKrHVz4balVdLwibEI9Cfrk.roa
File:                     FwQPCKrHVz4balVdLwibEI9Cfrk.roa (raw, json)
Hash identifier:          8KMKnJZwG7UrXagLhxDUIpsQxMbosc9CWiPlwMkABfI=
Subject key identifier:   17:04:0F:08:AA:C7:57:3E:1B:6A:55:5D:2F:08:9B:10:8F:42:7E:B9
Certificate issuer:       /CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Certificate serial:       019B79100E4605FB9FCD5A5DC33D3D9DD048
Authority key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/FwQPCKrHVz4balVdLwibEI9Cfrk.roa
Signing time:             Thu 01 Jan 2026 10:17:33 +0000
ROA not before:           Thu 01 Jan 2026 10:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201719
IP address blocks:        85.92.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:0e:46:05:fb:9f:cd:5a:5d:c3:3d:3d:9d:d0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
        Validity
            Not Before: Jan  1 10:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=17040f08aac7573e1b6a555d2f089b108f427eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:be:3a:9e:3e:cc:9f:4e:13:2a:71:28:cf:ff:
                    4f:f4:36:e7:53:fe:04:f5:92:34:7b:a0:21:2f:7a:
                    5b:76:80:21:23:5f:8e:44:e7:7a:43:0a:b0:08:f5:
                    7e:ce:58:93:eb:0b:60:e8:27:09:a8:bf:13:68:4d:
                    6e:7b:9a:a1:3a:61:10:10:6a:b1:18:7b:91:a2:25:
                    7d:f3:c8:50:ed:11:2b:a2:fb:f4:56:84:7e:13:a4:
                    88:58:c4:b5:db:0b:ef:e7:41:c5:3d:b3:fa:50:83:
                    b4:7c:8f:69:ef:4a:c7:eb:1a:f6:ea:de:28:a9:dd:
                    e2:8f:c9:25:76:1e:75:45:90:30:61:33:85:72:a9:
                    ff:60:30:64:76:de:55:4e:f7:67:29:16:46:ca:02:
                    c0:e5:c5:29:a4:cf:97:6f:79:6a:ae:72:0d:28:8d:
                    46:b2:0f:98:b0:32:9d:95:12:f8:57:cb:de:20:e1:
                    2f:70:3e:6d:58:55:9f:10:c8:f8:7d:a4:29:47:c2:
                    fa:87:58:23:78:9f:26:41:d4:59:ef:a5:31:73:18:
                    42:6d:6d:e5:8e:8f:b1:6e:7d:46:fb:1f:91:8f:6d:
                    4f:42:57:7b:9b:84:03:21:ad:6e:c5:02:63:38:16:
                    6a:ed:5e:51:9b:68:d9:24:d4:60:55:73:99:9c:5c:
                    4e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:04:0F:08:AA:C7:57:3E:1B:6A:55:5D:2F:08:9B:10:8F:42:7E:B9
            X509v3 Authority Key Identifier:
                keyid:E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/FwQPCKrHVz4balVdLwibEI9Cfrk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.92.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:53:ae:39:84:8c:56:0c:77:21:43:84:92:fd:4c:03:8f:cb:
         94:54:0f:e0:2a:a0:37:94:72:9c:4c:68:5e:ea:d4:bb:1c:cb:
         a0:b1:d0:57:6e:c1:98:6f:93:50:94:1a:d3:c0:b2:58:5f:03:
         67:92:69:15:c4:d6:b0:8d:cf:29:92:01:b3:06:62:f1:57:e4:
         3d:95:45:4f:02:b8:78:3d:bc:a6:39:25:e6:22:4e:bd:f0:fe:
         2a:35:28:c5:4e:f5:18:1e:da:ee:96:f9:8a:5f:ff:3f:38:3c:
         3f:2f:fd:f4:ff:5a:41:96:58:96:f2:5a:69:07:ad:e6:8d:77:
         37:ea:d5:3a:4e:59:dd:fc:40:b3:b8:c7:23:e7:eb:2a:7c:c2:
         a7:c1:cc:0b:85:5d:c8:f3:44:40:05:12:2c:56:bf:5e:b6:50:
         e7:55:8d:2e:33:58:8b:c1:c4:3c:1b:5d:cc:d2:25:3b:9d:a4:
         03:a0:5f:c3:d1:97:79:6d:24:ea:e8:0b:b6:3d:13:72:59:22:
         e0:c7:c4:3e:2d:5e:03:e8:10:5b:e7:ba:a1:bd:66:a8:2f:e9:
         9b:61:ec:c0:30:ad:65:81:fa:f8:fd:fc:16:6c:31:1d:10:df:
         1b:58:d7:c3:71:85:cb:79:35:10:5e:87:11:6f:07:aa:9b:87:
         84:43:f4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:28:50 2026 by rpki-client