This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/fphIDTC90BjghJ8c2O8eRDnnu2Y.roa
File:                     fphIDTC90BjghJ8c2O8eRDnnu2Y.roa (raw, json)
Hash identifier:          eHm6xVBmCu2Lzre/Y4v2NYmdtDCG2u8NjYt++Pqi/5Q=
Subject key identifier:   7E:98:48:0D:30:BD:D0:18:E0:84:9F:1C:D8:EF:1E:44:39:E7:BB:66
Certificate issuer:       /CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Certificate serial:       019B7E3811F5B3625182E74B1E90C530B54E
Authority key identifier: 55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/fphIDTC90BjghJ8c2O8eRDnnu2Y.roa
Signing time:             Fri 02 Jan 2026 10:19:22 +0000
ROA not before:           Fri 02 Jan 2026 10:19:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51098
IP address blocks:        194.116.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:11:f5:b3:62:51:82:e7:4b:1e:90:c5:30:b5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
        Validity
            Not Before: Jan  2 10:19:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7e98480d30bdd018e0849f1cd8ef1e4439e7bb66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:cb:d7:cd:31:30:7d:6b:6b:76:8d:86:62:
                    3c:68:60:19:2c:97:54:0c:d0:e9:d7:7a:d9:fa:f6:
                    c4:8a:d7:4b:79:0b:6b:01:c0:54:b0:de:ec:7d:b4:
                    1d:b7:c6:02:1f:97:44:3e:64:3f:03:f7:38:0a:ec:
                    f5:1e:99:2b:88:ba:00:65:07:5d:df:8a:dc:d9:56:
                    01:61:ff:df:11:13:31:a4:e8:48:d9:a7:bc:b6:55:
                    75:08:c0:0c:72:52:01:d5:92:34:1f:e3:62:5c:c1:
                    91:cc:40:53:3c:8a:42:56:8d:72:04:14:1e:93:89:
                    62:0d:69:99:0e:68:6d:8b:94:da:0d:6e:fc:37:ea:
                    cf:f6:97:83:90:75:ee:f1:26:2f:c9:22:20:18:6b:
                    02:e4:81:c2:bb:de:3c:03:be:f9:f0:0d:ff:30:fc:
                    fd:58:8a:43:ce:1a:85:2b:36:c7:fa:bf:1f:0e:c5:
                    81:2b:f7:f0:94:d8:12:a8:85:2b:03:f9:51:2e:fd:
                    9b:3c:48:9e:1f:ff:7c:01:59:b6:b3:ea:b5:fb:ba:
                    eb:5b:c0:a0:cb:36:63:95:ba:c3:e0:71:3f:de:88:
                    a4:c8:65:e7:f7:06:fc:0d:de:f6:ac:f6:c9:d0:14:
                    39:38:6d:cc:ae:27:d7:c4:64:81:01:03:c3:55:4b:
                    05:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:98:48:0D:30:BD:D0:18:E0:84:9F:1C:D8:EF:1E:44:39:E7:BB:66
            X509v3 Authority Key Identifier:
                keyid:55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/fphIDTC90BjghJ8c2O8eRDnnu2Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.116.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:94:ca:fa:ae:46:a3:1e:15:21:98:db:54:db:88:17:11:88:
         1b:5b:26:ad:62:b3:77:82:a9:be:9c:92:60:a5:12:13:b4:30:
         83:b8:59:01:b6:b4:20:9e:b2:38:bc:0c:89:07:de:76:cc:4a:
         57:ef:fc:4e:6d:a9:06:4d:8c:4f:7f:03:fb:fd:f6:43:51:f7:
         09:a9:40:78:b7:0a:f9:13:d8:8b:08:e6:60:9d:80:e2:6a:81:
         a9:c2:d1:65:d8:41:3b:ba:7d:8b:1f:2b:89:99:47:8b:26:42:
         10:c4:9b:dc:19:72:e0:9c:2e:d7:e8:e7:ce:b9:05:67:16:c0:
         30:14:34:61:7e:79:68:62:a1:fc:cb:dd:20:fc:84:64:2d:69:
         c7:8f:e4:5a:57:f6:fe:3e:3f:2e:48:c6:9a:11:04:40:c6:21:
         63:9b:2a:e2:05:50:a5:f3:7c:76:3d:d4:ef:a2:c0:df:90:c8:
         0e:40:29:e5:f8:cd:52:4f:3c:eb:42:b2:fb:8b:8e:56:d8:03:
         e6:1c:eb:d2:bb:7f:1f:52:65:2d:24:45:72:39:a6:95:93:0f:
         31:37:63:9a:d8:65:d4:29:0a:c6:68:3b:11:38:28:31:30:f5:
         a1:7d:3e:7b:dc:46:21:4c:88:de:62:2e:bd:7f:ff:84:13:93:
         d4:d1:71:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:06:13 2026 by rpki-client