This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/Fnw0zHvzoat7GHpkTi7K_GI8Buw.roa
File:                     Fnw0zHvzoat7GHpkTi7K_GI8Buw.roa (raw, json)
Hash identifier:          4BYNISLW+6a1Rm7fYvPimlxLy4jJM2Fwgwu5hoZNF4o=
Subject key identifier:   16:7C:34:CC:7B:F3:A1:AB:7B:18:7A:64:4E:2E:CA:FC:62:3C:06:EC
Certificate issuer:       /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial:       019B7E37705E5C88BF991BC9AD0D911CB0E8
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/Fnw0zHvzoat7GHpkTi7K_GI8Buw.roa
Signing time:             Fri 02 Jan 2026 10:18:41 +0000
ROA not before:           Fri 02 Jan 2026 10:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204824
IP address blocks:        185.218.48.0/22 maxlen: 24
                          2a0b:d340::/29 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:70:5e:5c:88:bf:99:1b:c9:ad:0d:91:1c:b0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
        Validity
            Not Before: Jan  2 10:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=167c34cc7bf3a1ab7b187a644e2ecafc623c06ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:59:9f:24:ea:f8:89:d2:b1:6f:da:11:6b:
                    c7:a0:d7:b5:d2:8c:8f:61:92:ac:74:68:d0:44:23:
                    0f:71:f7:e1:72:29:e0:d8:a5:81:0d:78:29:bb:42:
                    cc:39:2d:90:b9:09:58:17:38:76:94:bb:b1:d4:59:
                    0c:3c:33:f0:95:2a:ba:ec:c2:2f:c8:fc:29:1d:92:
                    b7:7b:d6:11:b3:35:ee:c7:30:2e:26:47:9f:d1:74:
                    76:b1:a2:d0:23:42:81:2c:41:8a:03:76:80:3e:ef:
                    c9:15:da:13:ab:a9:11:ee:6f:fd:fa:16:7b:ec:7e:
                    ed:56:e7:dd:d9:2c:b5:07:e9:09:59:43:0e:bd:b6:
                    08:c3:14:6b:5c:4c:21:b1:6e:9a:6d:77:6a:46:70:
                    36:0f:57:18:c8:7a:41:55:ae:b0:15:76:1b:57:17:
                    8f:a4:0c:51:61:25:3b:36:3d:63:5d:e7:3b:f6:13:
                    f3:c1:11:6e:10:ad:87:45:ca:3e:fc:6d:a6:69:77:
                    0a:53:65:63:b0:65:b0:8e:29:44:ea:e0:e2:fb:0a:
                    81:3d:45:d0:94:1c:2f:c0:f8:53:38:f5:30:d6:46:
                    4e:a4:f8:2f:a1:66:64:bc:67:b1:2e:58:54:be:ae:
                    22:04:db:a3:10:d8:00:09:92:6c:d3:5e:2a:72:60:
                    12:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7C:34:CC:7B:F3:A1:AB:7B:18:7A:64:4E:2E:CA:FC:62:3C:06:EC
            X509v3 Authority Key Identifier:
                keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/Fnw0zHvzoat7GHpkTi7K_GI8Buw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.48.0/22
                IPv6:
                  2a0b:d340::/29

    Signature Algorithm: sha256WithRSAEncryption
         48:72:71:11:63:f5:6e:e6:20:ca:8d:9e:9e:0c:7b:88:f7:92:
         fd:7e:47:9c:12:21:98:f9:32:e7:d4:c5:2d:97:7c:20:db:d3:
         0f:65:db:2f:be:a7:a2:33:80:22:28:95:56:72:85:ef:1d:e9:
         6e:ad:d4:a6:59:21:38:aa:2f:b7:f5:33:1e:fb:56:1c:e0:54:
         ac:e2:25:66:4d:98:93:7a:ca:11:9c:e7:a7:f2:f9:0f:03:f6:
         c9:fd:d0:bd:3e:d2:47:fc:4c:17:07:0d:54:62:08:d0:82:37:
         45:44:80:1d:fd:3d:a8:58:3e:86:bb:51:da:5e:5e:ea:5b:57:
         21:c4:6d:89:87:7c:bc:95:85:cb:0b:2f:98:8d:70:9e:e5:b5:
         da:cf:57:00:73:7c:7b:55:14:07:57:1e:9f:1b:40:d4:0b:24:
         96:6a:04:15:75:3b:4a:85:de:81:02:9e:c8:82:d1:bf:a5:0f:
         e0:11:96:a3:64:88:17:43:1e:c3:ec:19:fa:05:8b:b0:f5:33:
         92:e9:94:2a:ae:d5:90:4f:b8:dd:d6:e8:2d:a7:bd:da:08:37:
         40:41:61:03:3c:56:1b:d0:64:77:89:4f:f2:fb:88:77:c1:53:
         86:ae:6d:d7:d0:1e:67:f8:24:de:23:ec:51:b6:38:64:f2:b2:
         a2:e0:98:8a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt+N3BeXIi/mRvJrQ2RHLDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMzY4ZTcwMjY5ZGU2NjBjYmMxNGRmOWM3NjNiMDE4Nzg4
YTFmZmMwHhcNMjYwMTAyMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjdjMzRjYzdiZjNhMWFiN2IxODdhNjQ0ZTJlY2FmYzYyM2MwNmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9tZnyTq+InSsW/aEWvHoNe10oyP
YZKsdGjQRCMPcffhcing2KWBDXgpu0LMOS2QuQlYFzh2lLux1FkMPDPwlSq67MIv
yPwpHZK3e9YRszXuxzAuJkef0XR2saLQI0KBLEGKA3aAPu/JFdoTq6kR7m/9+hZ7
7H7tVufd2Sy1B+kJWUMOvbYIwxRrXEwhsW6abXdqRnA2D1cYyHpBVa6wFXYbVxeP
pAxRYSU7Nj1jXec79hPzwRFuEK2HRco+/G2maXcKU2VjsGWwjilE6uDi+wqBPUXQ
lBwvwPhTOPUw1kZOpPgvoWZkvGexLlhUvq4iBNujENgACZJs014qcmAS6QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBZ8NMx786Grexh6ZE4uyvxiPAbsMB8GA1UdIwQY
MBaAFBs2jnAmneZgy8FN+cdjsBh4ih/8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mNjU5NjAtYjAzYy00OThjLWI2ZDUt
NjA5NTFlOTc1ODhjLzEvRm53MHpIdnpvYXQ3R0hwa1RpN0tfR0k4QnV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9mNjU5NjAtYjAzYy00OThjLWI2ZDUtNjA5NTFlOTc1ODhj
LzEvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudowMA0E
AgACMAcDBQMqC9NAMA0GCSqGSIb3DQEBCwUAA4IBAQBIcnERY/Vu5iDKjZ6eDHuI
95L9fkecEiGY+TLn1MUtl3wg29MPZdsvvqeiM4AiKJVWcoXvHelurdSmWSE4qi+3
9TMe+1Yc4FSs4iVmTZiTesoRnOen8vkPA/bJ/dC9PtJH/EwXBw1UYgjQgjdFRIAd
/T2oWD6Gu1HaXl7qW1chxG2Jh3y8lYXLCy+YjXCe5bXaz1cAc3x7VRQHVx6fG0DU
CySWagQVdTtKhd6BAp7IgtG/pQ/gEZajZIgXQx7D7Bn6BYuw9TOS6ZQqrtWQT7jd
1ugtp73aCDdAQWEDPFYb0GR3iU/y+4h3wVOGrm3X0B5n+CTeI+xRtjhk8rKi4JiK
-----END CERTIFICATE-----
Generated at Wed Jan 21 10:29:17 2026 by rpki-client