This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/Fut3z_0NrsppnnypWgorA15khSo.roa
File:                     Fut3z_0NrsppnnypWgorA15khSo.roa (raw, json)
Hash identifier:          PZ+31QMYFpcaajDE6Kz0RM280Aw/GsarIS/b6Pxddvs=
Subject key identifier:   16:EB:77:CF:FD:0D:AE:CA:69:9E:7C:A9:5A:0A:2B:03:5E:64:85:2A
Certificate issuer:       /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial:       019B7AC93D723B00D913CE5F026EBAE23A36
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/Fut3z_0NrsppnnypWgorA15khSo.roa
Signing time:             Thu 01 Jan 2026 18:19:27 +0000
ROA not before:           Thu 01 Jan 2026 18:19:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     5511
IP address blocks:        45.87.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:3d:72:3b:00:d9:13:ce:5f:02:6e:ba:e2:3a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
        Validity
            Not Before: Jan  1 18:19:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=16eb77cffd0daeca699e7ca95a0a2b035e64852a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cb:af:59:d7:89:fb:bb:60:06:23:25:10:d8:
                    68:cc:87:46:aa:d5:43:88:24:bb:f8:62:9c:f7:a3:
                    7e:8c:29:c3:ab:09:14:1f:0c:1f:67:0a:9f:12:9c:
                    1b:44:8c:d3:e5:c3:70:c7:2b:0f:ce:d1:69:5c:f3:
                    0b:a9:2f:50:d8:64:a9:51:24:54:84:27:42:9c:e5:
                    9d:fd:34:0f:86:c9:e7:8e:1f:ec:b2:27:08:81:40:
                    30:18:2b:02:5f:f5:07:c2:b6:63:8f:e2:0d:be:d7:
                    d5:c0:23:ec:f4:8a:24:94:f6:31:fd:c3:11:e4:87:
                    5e:87:68:e0:77:0a:be:db:61:8d:3b:07:cd:da:c0:
                    b2:d0:f9:f1:82:0b:44:b6:7c:e9:28:98:76:cd:35:
                    58:80:03:01:65:0d:d9:2c:13:a0:b7:f8:72:4a:61:
                    87:62:6d:27:4c:96:3d:c4:96:d9:ce:b7:2d:09:bf:
                    d4:bd:35:20:2a:03:48:df:6a:a7:32:02:65:e0:54:
                    1b:29:fe:d0:22:77:cb:87:4e:fd:07:6c:ba:27:d9:
                    57:64:2a:94:e9:72:91:8a:12:4f:c0:ae:64:d8:65:
                    60:06:6a:90:b5:29:10:3b:26:f1:90:8f:9d:82:35:
                    1a:f8:84:76:72:46:44:c5:20:9b:d3:9a:20:2d:f3:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EB:77:CF:FD:0D:AE:CA:69:9E:7C:A9:5A:0A:2B:03:5E:64:85:2A
            X509v3 Authority Key Identifier:
                keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/Fut3z_0NrsppnnypWgorA15khSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:ff:07:52:94:4e:91:4e:9d:3b:3a:11:ce:6b:2b:41:4d:14:
         29:54:34:2b:27:3f:7d:32:ef:0c:60:f6:b8:08:fe:d6:5d:d9:
         22:f2:5f:9f:09:21:b2:7a:95:02:28:7b:c3:11:35:be:20:20:
         25:f6:57:70:5d:24:cf:06:b9:df:cc:29:52:90:4d:75:8f:2c:
         56:ca:af:e3:25:2f:bb:a8:9e:e4:89:d5:3d:35:9e:07:99:75:
         dd:01:f7:7e:dc:7b:1b:48:a8:7a:de:61:60:c7:3e:b6:60:e7:
         c2:d6:79:d5:43:5a:79:3f:a0:20:d6:b8:1d:7a:09:bc:66:5e:
         96:31:a5:82:79:8a:27:13:16:cb:f2:24:f5:7e:ef:3e:a5:cb:
         cb:a8:9d:3d:08:dc:9f:50:4a:1c:a7:d3:3e:be:c9:b8:55:cf:
         9f:16:ed:01:31:52:c2:cd:74:c1:c7:e5:7f:cf:db:c7:eb:87:
         05:e6:58:06:b2:e5:b4:36:45:9d:6d:b0:af:d1:44:00:b4:5c:
         6d:c7:8c:b0:8b:f8:b9:b9:bc:88:42:3c:3c:7a:a1:e1:0f:9a:
         ca:99:e5:ad:c7:e6:36:3d:f1:29:44:e4:d8:dc:ef:1d:f4:e5:
         f0:3c:7d:c6:34:a2:d3:88:c0:ed:38:95:75:bc:60:de:29:a1:
         c6:11:bc:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6yT1yOwDZE85fAm664jo2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1
MTNhMGYwHhcNMjYwMTAxMTgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmViNzdjZmZkMGRhZWNhNjk5ZTdjYTk1YTBhMmIwMzVlNjQ4NTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMuvWdeJ+7tgBiMlENhozIdGqtVD
iCS7+GKc96N+jCnDqwkUHwwfZwqfEpwbRIzT5cNwxysPztFpXPMLqS9Q2GSpUSRU
hCdCnOWd/TQPhsnnjh/ssicIgUAwGCsCX/UHwrZjj+INvtfVwCPs9IoklPYx/cMR
5Ideh2jgdwq+22GNOwfN2sCy0PnxggtEtnzpKJh2zTVYgAMBZQ3ZLBOgt/hySmGH
Ym0nTJY9xJbZzrctCb/UvTUgKgNI32qnMgJl4FQbKf7QInfLh079B2y6J9lXZCqU
6XKRihJPwK5k2GVgBmqQtSkQOybxkI+dgjUa+IR2ckZExSCb05ogLfMUkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBbrd8/9Da7KaZ58qVoKKwNeZIUqMB8GA1UdIwQY
MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt
MWQyMWQxYmNlM2ZlLzEvRnV0M3pfME5yc3Bwbm55cFdnb3JBMTVraFNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl
LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVeiMA0G
CSqGSIb3DQEBCwUAA4IBAQCZ/wdSlE6RTp07OhHOaytBTRQpVDQrJz99Mu8MYPa4
CP7WXdki8l+fCSGyepUCKHvDETW+ICAl9ldwXSTPBrnfzClSkE11jyxWyq/jJS+7
qJ7kidU9NZ4HmXXdAfd+3HsbSKh63mFgxz62YOfC1nnVQ1p5P6Ag1rgdegm8Zl6W
MaWCeYonExbL8iT1fu8+pcvLqJ09CNyfUEocp9M+vsm4Vc+fFu0BMVLCzXTBx+V/
z9vH64cF5lgGsuW0NkWdbbCv0UQAtFxtx4ywi/i5ubyIQjw8eqHhD5rKmeWtx+Y2
PfEpROTY3O8d9OXwPH3GNKLTiMDtOJV1vGDeKaHGEbyR
-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:07 2026 by rpki-client