This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/FWnshijOb2oWucJC3yydoFuicl8.roa
File:                     FWnshijOb2oWucJC3yydoFuicl8.roa (raw, json)
Hash identifier:          2lTRHLJOIG5W8kGboAw1P9Vclv6xoLbOBwTEH/U1Buo=
Subject key identifier:   15:69:EC:86:28:CE:6F:6A:16:B9:C2:42:DF:2C:9D:A0:5B:A2:72:5F
Certificate issuer:       /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial:       019B7D5C0A1FF658B407A1D6F26B561E2EF3
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/FWnshijOb2oWucJC3yydoFuicl8.roa
Signing time:             Fri 02 Jan 2026 06:19:02 +0000
ROA not before:           Fri 02 Jan 2026 06:19:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8405
IP address blocks:        193.188.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 06:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:0a:1f:f6:58:b4:07:a1:d6:f2:6b:56:1e:2e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
        Validity
            Not Before: Jan  2 06:19:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1569ec8628ce6f6a16b9c242df2c9da05ba2725f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3f:22:8b:11:5b:32:f4:55:92:57:2c:9e:6b:
                    fd:8a:ed:91:bb:37:07:5f:8b:7c:8e:52:5d:13:91:
                    82:54:d4:3a:eb:87:8e:b8:e7:1f:69:30:f9:36:50:
                    5b:9f:da:6d:18:cf:35:46:08:ed:f8:7f:26:84:fc:
                    39:f6:03:3e:01:80:c3:4b:a7:16:c6:91:d0:be:76:
                    2e:92:16:45:a4:a5:c3:db:80:c5:4c:2f:05:5e:25:
                    52:91:f0:16:79:49:af:a9:4b:07:82:b8:09:a9:5f:
                    f1:05:7e:09:d2:1f:54:0e:f2:c4:b0:01:0b:a8:4b:
                    e1:94:a6:e7:27:8e:bd:79:ed:4d:b4:9d:e8:fc:c5:
                    7e:00:ef:20:6e:79:39:d7:02:48:e1:84:e5:a3:ff:
                    56:93:7d:ad:5e:ad:21:3e:1d:a5:02:7c:45:16:c6:
                    b3:51:59:64:b2:d6:3f:e9:67:93:5d:53:aa:7f:a1:
                    4f:45:a8:4e:b4:36:5c:45:36:d1:b4:d6:89:cc:65:
                    97:00:b6:20:3d:cb:65:8c:dd:0d:90:b3:9a:49:b7:
                    81:14:ad:14:28:2b:1a:49:da:ed:57:81:be:c6:d0:
                    2e:fc:c0:02:0a:b5:18:0b:1a:08:cc:c5:80:59:cb:
                    26:94:45:f4:f0:b7:fe:20:de:a6:70:67:5c:9f:db:
                    ad:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:69:EC:86:28:CE:6F:6A:16:B9:C2:42:DF:2C:9D:A0:5B:A2:72:5F
            X509v3 Authority Key Identifier:
                keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/FWnshijOb2oWucJC3yydoFuicl8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.188.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:a4:d8:52:6d:05:af:56:86:d7:75:da:77:14:f8:df:22:af:
         d6:67:c5:ff:cf:3c:d0:36:68:e1:01:09:3d:9a:f2:b0:ac:11:
         2e:28:b6:15:03:0b:b6:78:5c:b5:79:05:7f:b2:18:7e:c2:62:
         f5:19:45:e6:c2:da:24:b1:11:cd:5e:a7:42:61:b2:a4:2b:d9:
         74:21:81:7c:28:d4:9b:e2:d7:f6:92:ac:72:18:7e:62:03:4a:
         e0:02:ee:6a:b2:c6:bd:48:a7:79:5d:b6:65:f0:d0:5e:27:e3:
         56:7a:cb:1d:4a:d1:86:ca:e0:37:5a:4d:fd:95:2c:74:1a:36:
         a2:ad:01:81:39:12:18:4d:51:ab:07:7d:73:46:0b:3f:05:5e:
         e1:9c:84:be:16:74:c1:d3:c4:6c:9f:82:1f:2f:c0:32:f4:0c:
         e9:af:7d:9c:1e:38:64:f2:60:df:e5:c1:b7:62:2a:50:c6:a2:
         15:7a:08:c5:86:7d:14:de:c8:20:b4:55:79:bb:61:0b:67:8b:
         13:3b:fd:7d:cc:f0:61:15:c6:6e:4d:85:21:91:25:22:79:04:
         88:92:40:92:bf:37:4a:a2:bd:03:68:66:69:3b:5e:e1:dd:d6:
         7d:9b:63:df:b6:14:2b:77:22:6f:fb:71:f5:ea:1d:56:4c:4c:
         df:1c:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 16:13:42 2026 by rpki-client