This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/FtmrAWvs32J-0LCY5jlebMT1Rfw.roa
File:                     FtmrAWvs32J-0LCY5jlebMT1Rfw.roa (raw, json)
Hash identifier:          rHUlX8ur2N+m0zFmk9zgsq6JuE1TKDjTeQ3hfqt+3hA=
Subject key identifier:   16:D9:AB:01:6B:EC:DF:62:7E:D0:B0:98:E6:39:5E:6C:C4:F5:45:FC
Certificate issuer:       /CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Certificate serial:       019B7A5B532DE10ABDEDC7AA1DDF0C06913D
Authority key identifier: 5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/FtmrAWvs32J-0LCY5jlebMT1Rfw.roa
Signing time:             Thu 01 Jan 2026 16:19:24 +0000
ROA not before:           Thu 01 Jan 2026 16:19:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199496
IP address blocks:        185.132.140.0/22 maxlen: 24
                          185.132.142.0/23 maxlen: 23
                          185.183.19.0/24 maxlen: 24
                          2a06:e240::/29 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:53:2d:e1:0a:bd:ed:c7:aa:1d:df:0c:06:91:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc1503610bf82d8687b7aefb879a6578704f32a
        Validity
            Not Before: Jan  1 16:19:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=16d9ab016becdf627ed0b098e6395e6cc4f545fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e9:2b:b5:73:e6:1b:bd:6f:0f:74:e3:81:40:
                    eb:7c:a2:85:7a:76:98:dd:7e:3f:04:db:6e:7a:cb:
                    bb:56:c2:39:aa:da:6c:20:33:e1:88:79:90:f3:8d:
                    11:74:5a:00:51:15:fe:f7:1b:49:ef:5b:24:b5:8f:
                    98:fa:d0:c8:38:11:8b:8d:93:46:d5:b5:8c:48:c8:
                    6f:8e:00:06:cd:cd:f1:73:e1:4d:61:56:ec:7b:e5:
                    3a:ce:96:c1:c2:0a:81:8b:5c:cb:e6:11:7c:5c:74:
                    31:81:ab:9f:1a:c6:ca:7f:78:a8:05:4c:f7:9f:95:
                    fa:de:e1:87:7a:91:10:2e:1d:14:3b:51:39:86:8a:
                    5d:df:08:c5:83:7d:21:ed:63:ca:ed:a2:93:56:81:
                    eb:22:29:ae:d9:36:18:87:f7:2f:4b:1d:41:0f:74:
                    c3:28:16:b5:fb:2c:1e:c0:66:78:5d:7e:7d:c1:7e:
                    25:1e:87:0a:e0:71:b6:d4:e9:11:1d:03:93:7f:9d:
                    62:d6:1d:e7:68:88:17:97:63:7a:95:6e:f3:93:89:
                    c0:b3:31:46:a1:16:df:63:aa:3c:0c:2c:eb:46:50:
                    35:45:bc:f1:8b:cb:1f:4f:b0:97:97:f9:47:4d:b3:
                    c2:55:a4:b3:0b:f9:1e:60:6e:d1:1e:0d:64:f1:f1:
                    b1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D9:AB:01:6B:EC:DF:62:7E:D0:B0:98:E6:39:5E:6C:C4:F5:45:FC
            X509v3 Authority Key Identifier:
                keyid:5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/FtmrAWvs32J-0LCY5jlebMT1Rfw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.132.140.0/22
                  185.183.19.0/24
                IPv6:
                  2a06:e240::/29

    Signature Algorithm: sha256WithRSAEncryption
         65:60:5f:cf:ea:8a:3b:87:55:50:d3:91:db:71:18:8f:9d:46:
         ee:89:f8:58:d5:9f:6e:bd:3b:7c:2c:47:79:fe:9a:25:3e:0a:
         87:53:5a:1f:e3:6b:76:f9:9e:2d:6a:f1:a8:c8:14:1f:ef:57:
         32:1b:6a:4d:5d:d6:11:96:27:f4:03:ca:b9:2a:d7:b4:a7:d3:
         2e:0c:b6:f1:f1:da:56:b6:28:ab:34:52:28:8d:30:93:6e:2f:
         08:97:06:ad:f1:55:a4:8f:6b:47:32:82:d6:cc:f4:73:e1:c9:
         39:70:63:ac:c2:e3:6a:d6:d1:9a:af:72:9c:b7:b2:5a:fc:f6:
         cc:db:96:16:9f:e6:18:4a:7b:c8:31:c8:65:0b:93:ab:c5:40:
         14:2b:92:c5:d6:62:db:bc:19:8d:49:0c:e5:59:3f:ba:c3:4d:
         e0:1f:e2:45:65:58:42:55:0c:be:63:f0:cc:81:9b:07:28:45:
         a8:ca:a1:7e:12:4d:6d:38:fb:21:56:68:bf:7c:2a:f1:e4:7c:
         f3:20:b1:b5:e3:6c:cf:8e:28:10:ec:be:72:35:c0:ec:39:6d:
         e4:fd:b4:31:cf:bb:37:a0:1b:fb:f8:8a:90:3b:0b:7c:03:6a:
         05:9f:13:e4:28:92:7e:64:0b:1e:b6:dc:af:7f:c0:7a:14:9c:
         1c:83:15:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:33 2026 by rpki-client