This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/FHtQNrQOfizQjvpxizt5OLW0SC4.roa
File:                     FHtQNrQOfizQjvpxizt5OLW0SC4.roa (raw, json)
Hash identifier:          oak0eNWy1cfTGmlGpcII2x2ElgyncsNilePzPotJ0B4=
Subject key identifier:   14:7B:50:36:B4:0E:7E:2C:D0:8E:FA:71:8B:3B:79:38:B5:B4:48:2E
Certificate issuer:       /CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939
Certificate serial:       019B7EA6808D2DF40189ABFDEEDC652E6545
Authority key identifier: 48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/FHtQNrQOfizQjvpxizt5OLW0SC4.roa
Signing time:             Fri 02 Jan 2026 12:19:59 +0000
ROA not before:           Fri 02 Jan 2026 12:19:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44478
IP address blocks:        193.84.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:80:8d:2d:f4:01:89:ab:fd:ee:dc:65:2e:65:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939
        Validity
            Not Before: Jan  2 12:19:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=147b5036b40e7e2cd08efa718b3b7938b5b4482e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1e:f8:f1:3b:05:27:07:53:50:fd:74:7d:ac:
                    d5:42:fa:38:bf:b5:c0:7e:8d:dc:d7:3c:64:9f:3a:
                    9d:5e:6d:c6:d1:86:f1:1e:76:80:5e:47:30:be:54:
                    c9:e8:0e:27:f3:c2:9a:25:86:47:fa:01:f7:1b:a7:
                    88:1b:ee:43:f3:67:dd:2f:43:eb:7f:2d:7c:10:b2:
                    b7:31:95:22:2f:29:bb:16:74:b2:c3:e0:4d:1b:94:
                    ae:90:2d:73:70:01:53:94:62:19:5e:1f:a6:c9:4a:
                    b5:4c:b1:2e:21:3f:f4:2c:5b:21:f9:69:b2:d2:6b:
                    3a:4e:fc:cb:29:14:1e:dc:e5:de:06:36:d0:25:dc:
                    05:71:02:b2:6d:bf:d2:43:b6:f2:53:69:08:75:31:
                    39:35:56:07:11:4e:7b:5e:85:84:ab:12:23:c4:54:
                    73:7c:12:de:18:9e:92:f8:8d:60:a8:bd:1a:b8:f0:
                    9e:1f:b7:b7:aa:00:cc:1b:24:32:87:26:02:97:12:
                    cc:a7:41:96:71:03:3a:e5:0d:bd:3c:83:16:45:6d:
                    cc:99:8a:ef:28:b9:f3:29:18:f5:ad:ad:dc:f1:1b:
                    24:96:ce:89:41:6e:6e:71:da:e7:7d:4f:de:99:00:
                    e5:d8:c4:ed:11:68:89:fc:39:85:45:59:34:a6:c8:
                    74:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7B:50:36:B4:0E:7E:2C:D0:8E:FA:71:8B:3B:79:38:B5:B4:48:2E
            X509v3 Authority Key Identifier:
                keyid:48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/FHtQNrQOfizQjvpxizt5OLW0SC4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:88:95:bf:46:70:3c:39:c0:85:70:ae:a3:53:68:bb:bf:5d:
         85:b1:51:36:91:44:a7:98:cd:6e:16:02:05:91:cd:19:3d:b0:
         89:4b:83:ff:70:5e:69:e8:be:75:4f:4c:a7:ba:f5:24:04:68:
         dc:94:45:47:97:65:27:19:91:52:96:b0:70:e5:3b:8a:70:f4:
         76:16:b8:82:15:6b:3c:18:3e:55:a3:b4:3e:41:7b:d4:44:a7:
         50:ae:7e:42:cc:7f:c8:3c:59:93:37:26:9e:c2:c7:25:86:2a:
         4d:a1:80:84:a5:76:13:4c:7f:6a:ee:98:c6:ec:0c:1d:da:2a:
         d8:ba:b7:ba:9b:88:05:8f:e3:20:a1:74:66:9f:c5:83:e7:c5:
         79:dd:c2:49:81:b0:c3:f4:05:28:78:24:93:10:4d:b8:03:d9:
         81:dc:dd:95:5e:dc:f8:bf:13:85:c1:a2:91:50:b2:73:5c:60:
         01:e1:71:af:15:cf:57:8a:77:03:66:34:06:3e:12:64:82:b7:
         ba:6d:54:c1:42:7b:f9:0e:96:f8:97:65:13:53:f1:cd:fb:b3:
         63:c7:53:ff:c0:c1:61:1f:08:bc:ff:ec:e1:a4:b8:b5:8d:ec:
         9d:e7:77:93:62:c6:d2:2a:ed:bf:e6:9c:26:00:77:3a:87:6e:
         3a:48:c9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:22 2026 by rpki-client