This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/FBCGTG64vLpl2gDVPvanQJATgB8.roa
File:                     FBCGTG64vLpl2gDVPvanQJATgB8.roa (raw, json)
Hash identifier:          axM4/0Pr+RIyWyZE+LhS3ebRSN92aTrPRUXzdJeL/U0=
Subject key identifier:   14:10:86:4C:6E:B8:BC:BA:65:DA:00:D5:3E:F6:A7:40:90:13:80:1F
Certificate issuer:       /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial:       019B78A347C7FD03C9E6421CD0FE9DF7C3FC
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/FBCGTG64vLpl2gDVPvanQJATgB8.roa
Signing time:             Thu 01 Jan 2026 08:18:45 +0000
ROA not before:           Thu 01 Jan 2026 08:18:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202656
IP address blocks:        185.193.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 17:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:47:c7:fd:03:c9:e6:42:1c:d0:fe:9d:f7:c3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
        Validity
            Not Before: Jan  1 08:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1410864c6eb8bcba65da00d53ef6a7409013801f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:16:bb:87:69:ca:9b:f0:0e:1b:df:d9:95:90:
                    c7:93:e8:a3:91:ca:07:50:22:ad:b2:4c:50:d8:8d:
                    3f:00:43:8e:a6:4d:92:68:a4:c5:aa:99:38:9b:be:
                    b9:fc:2e:61:15:bb:1f:1b:88:2c:34:fc:e1:49:75:
                    74:80:e2:47:8a:3f:5b:0f:19:5b:c1:bc:33:50:ec:
                    c4:60:1b:5b:08:ec:64:a1:4f:74:7b:82:a9:70:59:
                    0d:74:fa:a2:b2:bc:74:33:54:b0:0e:28:a8:6f:d9:
                    43:7f:b5:d0:1e:99:56:f2:b6:f9:12:9e:2a:13:00:
                    7b:74:52:2c:17:8c:d2:f0:c5:1f:da:d7:96:6d:94:
                    49:01:db:1f:b1:74:11:93:23:94:aa:63:a2:d3:9f:
                    f1:45:4c:85:d8:91:91:50:d1:9a:46:0e:e2:04:a7:
                    b6:78:6c:71:bd:86:1b:24:03:02:97:9a:cc:c9:7b:
                    26:54:88:7e:41:82:0a:a7:e9:8d:f8:95:e7:2d:b7:
                    5f:87:84:e7:4b:7e:84:89:be:1f:bc:e0:4b:e1:d6:
                    65:04:c9:27:c0:6a:bf:3c:43:1c:02:7b:c8:7d:34:
                    ef:2e:28:ef:80:10:ca:37:a1:3a:a5:37:41:f0:aa:
                    a8:cf:7d:9f:37:6d:9a:e4:a1:4a:54:07:f2:83:f0:
                    17:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:10:86:4C:6E:B8:BC:BA:65:DA:00:D5:3E:F6:A7:40:90:13:80:1F
            X509v3 Authority Key Identifier:
                keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/FBCGTG64vLpl2gDVPvanQJATgB8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:fa:37:05:f0:0d:f8:57:9d:ae:db:aa:fe:97:dc:92:0e:61:
         fa:67:8b:00:88:d8:44:7d:e5:0b:01:6e:56:21:d1:6d:cd:a1:
         1d:e4:45:bb:3c:07:4a:4b:ca:33:16:9c:b9:4c:ae:14:cc:9f:
         26:a5:cc:92:56:68:a6:b4:79:e2:cd:ce:5c:7d:d1:65:d2:ab:
         cc:c7:e3:4d:59:09:11:45:5f:e8:5d:17:fb:29:b6:9b:a4:74:
         4e:ea:cd:a6:ea:c0:a2:b3:45:32:25:66:50:d2:3e:39:77:57:
         3e:98:f9:54:6f:de:66:64:a1:df:ba:27:02:89:db:c6:6b:00:
         17:63:b9:26:2c:8e:45:ea:24:90:31:17:4e:63:9b:99:5f:9f:
         94:b9:ee:d5:2d:fa:45:f0:33:07:24:ca:e3:14:8d:0c:15:0b:
         fd:30:c8:46:83:46:f5:0b:0b:ab:33:23:8a:ea:9e:59:8c:b4:
         ac:08:b0:e1:0c:f8:a8:3f:a4:41:05:67:d1:1b:dd:b7:0c:cd:
         8f:19:8e:be:b9:12:21:f6:b1:f8:1f:dd:eb:cf:80:8c:b9:55:
         c3:fd:d6:7b:45:93:ce:a7:c5:9a:b8:00:e9:ad:8f:34:cb:c1:
         1a:1c:28:4d:b0:d0:fa:78:44:61:9a:9f:f4:10:34:32:22:02:
         11:70:64:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:21:48 2026 by rpki-client