This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/fzT6m7yfTXCj-_AX_jr_FdABgeo.roa
File:                     fzT6m7yfTXCj-_AX_jr_FdABgeo.roa (raw, json)
Hash identifier:          V87OGI8yShhu6uYBdg9rce79OVzvm1oTgwekYxO+Afg=
Subject key identifier:   7F:34:FA:9B:BC:9F:4D:70:A3:FB:F0:17:FE:3A:FF:15:D0:01:81:EA
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       019B7758B50D6959EE667A0187A61350A7AC
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/fzT6m7yfTXCj-_AX_jr_FdABgeo.roa
Signing time:             Thu 01 Jan 2026 02:17:40 +0000
ROA not before:           Thu 01 Jan 2026 02:17:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204876
IP address blocks:        194.62.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:b5:0d:69:59:ee:66:7a:01:87:a6:13:50:a7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Jan  1 02:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7f34fa9bbc9f4d70a3fbf017fe3aff15d00181ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d3:e6:52:8a:33:ec:17:70:d7:4e:77:16:09:
                    2e:a9:b1:06:0d:06:7d:1d:4d:a8:b4:e1:7c:4e:f9:
                    ce:66:ad:ea:ee:5d:ad:61:13:00:44:f9:51:f0:d9:
                    5d:10:7b:82:e6:c8:09:0c:83:24:b4:bf:54:6b:cf:
                    10:87:c5:c4:d1:12:59:0b:45:49:c0:6c:07:6f:53:
                    34:92:4e:f4:41:1b:0d:07:cc:0b:d8:a4:02:db:63:
                    64:9d:9e:0b:7c:9e:84:cd:6b:fa:d8:d9:32:b3:29:
                    c0:73:6d:54:e1:05:27:9a:10:9f:0d:c0:1a:a5:0d:
                    5a:9b:10:80:42:08:00:6d:a5:1e:49:b4:c4:04:1d:
                    16:80:78:ae:99:cc:08:ef:47:df:be:52:17:b3:43:
                    6e:92:97:ed:df:14:b4:01:cc:a1:ac:ff:b1:ba:bb:
                    d0:2b:85:6b:c4:94:ec:80:da:1e:14:2f:28:77:15:
                    c4:fe:91:dd:06:75:05:2e:c4:3f:4d:99:c7:5e:13:
                    ea:46:fa:0e:c5:f2:ec:c7:b1:1b:e4:90:28:79:86:
                    11:71:f0:c1:44:97:f9:8e:43:d9:0d:48:6c:f4:c8:
                    8b:4f:31:db:ec:9e:bc:4f:5b:a1:c9:35:9c:6f:71:
                    5c:57:cc:eb:80:e5:3c:b3:e8:53:52:8d:02:dd:71:
                    92:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:34:FA:9B:BC:9F:4D:70:A3:FB:F0:17:FE:3A:FF:15:D0:01:81:EA
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/fzT6m7yfTXCj-_AX_jr_FdABgeo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:fc:3f:f0:64:ba:78:41:17:20:bb:82:4a:79:9e:53:81:98:
         d3:28:95:81:bc:7b:c9:fa:fd:27:be:4f:98:5c:4d:12:73:02:
         e6:8b:ea:36:c6:5d:bb:74:ed:5c:e4:a8:32:dc:4f:bd:46:b9:
         43:2b:62:44:c2:78:15:36:b2:98:47:64:1e:18:c7:8d:4f:a3:
         34:7e:49:53:80:64:5d:79:ff:a2:f3:70:33:5f:36:6d:ab:c5:
         e2:f1:30:91:1f:fa:e6:c8:9f:1e:10:0d:d9:82:bc:be:55:3d:
         d1:cc:71:0d:ad:22:bd:e4:dc:7b:81:90:6b:8b:9b:0b:03:f6:
         0a:bc:68:ff:c5:61:ff:82:65:df:ae:45:c5:35:0b:61:1c:7c:
         1f:8b:dc:6d:c8:bd:ab:03:98:15:e7:3d:b2:fc:24:6f:1f:2e:
         85:96:d2:05:18:6c:25:76:92:b4:b4:e2:47:73:ed:67:e6:b4:
         41:51:21:ce:bd:55:4b:da:f1:28:22:ac:48:2f:ff:fe:d3:c0:
         c6:b7:ae:3e:6a:75:3e:e0:59:0f:98:e8:cd:54:e7:c2:65:62:
         5a:82:03:d2:be:fb:db:73:3a:b5:a2:85:69:b5:54:1f:11:16:
         4a:31:7e:49:67:7c:d2:70:4b:4d:e0:9a:0e:0c:91:16:d8:1c:
         05:92:1b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:11:46 2026 by rpki-client