This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/FabFFdy3U_O03lvA54DJKxDsAns.roa
File:                     FabFFdy3U_O03lvA54DJKxDsAns.roa (raw, json)
Hash identifier:          yObQvqyuC+s8zhRrbtNxcXG+ou4DfLrVSa2E3yUYI1E=
Subject key identifier:   15:A6:C5:15:DC:B7:53:F3:B4:DE:5B:C0:E7:80:C9:2B:10:EC:02:7B
Certificate issuer:       /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial:       019B7CEE63C74AA1421CFB9EF1C9D09A68A8
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/FabFFdy3U_O03lvA54DJKxDsAns.roa
Signing time:             Fri 02 Jan 2026 04:19:16 +0000
ROA not before:           Fri 02 Jan 2026 04:19:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199058
IP address blocks:        87.229.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:63:c7:4a:a1:42:1c:fb:9e:f1:c9:d0:9a:68:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
        Validity
            Not Before: Jan  2 04:19:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=15a6c515dcb753f3b4de5bc0e780c92b10ec027b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:68:33:6d:d5:0d:6c:1e:5f:14:f2:4b:6d:88:
                    37:d6:33:3f:04:25:8e:7a:19:6f:d6:4b:e0:a3:26:
                    60:39:66:9f:40:bd:1b:a3:57:84:0d:88:08:15:c2:
                    dc:f0:8c:86:86:81:3d:dd:f8:b6:e5:13:f9:85:8c:
                    ba:14:d6:7e:ad:e2:e3:f9:8a:12:fb:19:ba:50:9c:
                    70:69:f4:e7:b7:43:b3:49:f4:45:11:2f:f2:5a:aa:
                    61:ef:b1:67:3c:33:d1:82:3f:4c:cb:f5:66:25:98:
                    1c:a5:a6:ca:0f:80:b8:f9:e3:47:84:9a:bf:7d:3e:
                    33:52:11:51:d4:c4:0d:ae:7e:42:22:3d:57:4b:c4:
                    97:4f:87:e9:55:61:d6:4b:29:31:8b:95:7b:91:0d:
                    33:67:cf:c1:8c:4e:1d:41:ac:21:a9:a9:88:4b:63:
                    43:d4:55:c6:3a:98:c2:91:53:46:96:5d:e1:0c:68:
                    32:dc:15:47:ba:f2:f8:8f:fa:2f:31:86:7a:c4:b2:
                    a8:05:9c:ec:8b:1d:56:87:ef:23:e1:a8:42:e9:13:
                    da:bf:6b:e9:69:ed:5a:41:22:1d:75:71:99:9c:49:
                    df:b7:b2:fb:9e:97:e3:d1:a9:71:4c:c0:ef:c2:db:
                    1b:60:92:89:19:5e:c9:54:ee:35:d2:df:3d:27:db:
                    2f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A6:C5:15:DC:B7:53:F3:B4:DE:5B:C0:E7:80:C9:2B:10:EC:02:7B
            X509v3 Authority Key Identifier:
                keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/FabFFdy3U_O03lvA54DJKxDsAns.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.229.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:14:d1:f0:7f:ed:6c:ce:5d:e3:11:7f:20:fc:c7:69:c4:2a:
         11:ea:e8:75:7a:7f:96:b6:04:2d:1e:60:8e:67:72:5f:1b:98:
         bf:0d:db:10:c9:0d:1c:cb:9d:29:a5:aa:b9:56:28:55:0c:0f:
         e0:ee:83:f2:2e:80:ef:22:37:13:2e:cf:11:8d:25:06:b8:b4:
         cf:54:f9:98:c3:1f:d5:60:76:ee:99:79:74:41:21:bf:59:fb:
         7c:e7:72:3a:19:9f:e4:91:40:bf:78:8f:38:3b:33:b2:ca:42:
         db:fc:9b:3f:fa:8d:d7:82:73:e8:6c:a9:9c:52:b6:d7:5a:7e:
         19:e9:63:89:5b:76:47:ad:9e:dc:4e:44:cc:e0:95:b2:0a:74:
         f8:8f:b8:3f:9c:48:3d:e0:57:c7:b1:56:3b:a7:61:52:e9:80:
         21:59:d0:b7:69:d7:03:06:08:e5:29:e6:c6:0f:57:0a:cb:24:
         a6:5e:3d:25:3a:a8:dc:56:42:65:d4:f2:9b:58:8a:88:75:35:
         54:ba:34:71:39:21:24:e5:56:f2:6f:24:b2:a8:ef:3c:1f:90:
         c7:5a:c5:bf:2b:42:5a:ac:b5:d3:04:80:c8:95:80:55:86:51:
         f2:f4:ec:b8:8f:24:5c:fc:52:10:d6:e1:10:af:5b:b1:6e:fc:
         87:f5:ea:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:20:55 2026 by rpki-client