This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/fpHEmukzCf8sEZN1-1ROK3M58Hg.roa
File:                     fpHEmukzCf8sEZN1-1ROK3M58Hg.roa (raw, json)
Hash identifier:          VqNpGMHhla64QbrRVajda2AOnqhRXGh5QpCi8IhSSCc=
Subject key identifier:   7E:91:C4:9A:E9:33:09:FF:2C:11:93:75:FB:54:4E:2B:73:39:F0:78
Certificate issuer:       /CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Certificate serial:       019BF9FD16F9739F6C7DBD9B2BA6D91A2C34
Authority key identifier: B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/fpHEmukzCf8sEZN1-1ROK3M58Hg.roa
Signing time:             Mon 26 Jan 2026 11:07:51 +0000
ROA not before:           Mon 26 Jan 2026 11:07:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3209
IP address blocks:        194.115.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 11:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:fd:16:f9:73:9f:6c:7d:bd:9b:2b:a6:d9:1a:2c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
        Validity
            Not Before: Jan 26 11:07:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7e91c49ae93309ff2c119375fb544e2b7339f078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:72:f2:ce:df:17:da:04:23:a0:6b:a6:13:ef:
                    df:51:1f:80:36:47:3b:0f:80:70:34:2c:fe:7e:dc:
                    eb:7d:60:d0:4a:54:58:c6:22:ec:0b:49:a2:24:30:
                    f7:f9:f9:49:c9:66:db:96:04:04:4b:ae:e4:3e:b3:
                    9a:ee:c9:ce:d9:19:1c:c3:00:35:a9:bd:1b:af:11:
                    9a:ef:be:6c:64:fb:a4:61:ad:22:de:db:99:97:30:
                    0b:24:94:34:2c:23:42:bf:0f:37:29:a0:2d:7e:20:
                    f4:cd:8e:8a:aa:55:b2:35:72:5c:65:12:de:62:88:
                    03:28:2f:f5:8e:d7:97:06:79:07:d3:33:a9:ef:a8:
                    36:8c:a3:5c:d8:d6:69:2f:4a:a8:61:c3:5e:1c:75:
                    4e:71:a5:e1:c6:f0:77:a5:a2:38:ec:1c:3c:15:f9:
                    0b:c7:cf:4e:4d:45:f0:8b:ba:91:3e:8d:4e:83:6c:
                    aa:e8:26:ce:a5:ac:14:fa:9c:69:df:33:bc:2b:20:
                    b1:f0:1b:27:97:f0:69:fe:a5:4a:63:e0:8b:c2:29:
                    db:fd:dd:04:89:25:b0:74:a1:06:51:19:22:56:5a:
                    b0:56:e7:51:6b:6e:04:09:8c:e2:41:f6:cf:bb:c5:
                    18:1a:43:96:b1:47:a3:64:d7:47:71:17:d9:19:95:
                    3c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:91:C4:9A:E9:33:09:FF:2C:11:93:75:FB:54:4E:2B:73:39:F0:78
            X509v3 Authority Key Identifier:
                keyid:B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/fpHEmukzCf8sEZN1-1ROK3M58Hg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.115.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:53:05:f7:de:7a:90:a3:3d:f3:55:f0:6a:e2:6d:78:67:2c:
         7d:3a:66:1d:20:42:e0:e9:07:35:84:a1:bb:b6:81:3b:51:a1:
         1c:64:0a:36:ab:39:67:47:43:87:85:a8:88:a7:3c:25:12:7b:
         06:c4:22:d3:9b:e0:62:d4:e5:61:8f:62:6f:a7:a1:41:c9:88:
         ea:53:63:53:8a:fe:a2:a4:16:49:41:a5:da:a6:bb:5c:23:cf:
         1e:a4:ee:68:0d:7e:51:1d:11:2c:02:e1:34:bb:bc:c4:50:43:
         27:bb:30:f6:96:57:b5:d4:95:9c:b2:25:37:07:23:e0:3e:3b:
         db:1f:a0:e2:f0:2f:85:b2:63:6d:6c:dd:30:25:93:a8:90:9e:
         89:8e:94:fd:b6:71:dd:82:fc:36:84:75:07:09:cd:07:2c:cb:
         87:97:54:c7:78:92:22:6f:36:29:9e:f3:4b:82:a0:2d:ee:57:
         db:d9:a6:a1:59:9d:5c:36:82:af:44:99:f9:a6:a2:f0:a5:17:
         08:47:0c:58:5b:b3:c5:05:8f:eb:84:f3:67:65:28:b7:25:b1:
         af:6b:19:56:80:b0:f5:bb:ce:ba:ab:82:9a:43:1c:00:37:30:
         41:e1:e7:4e:9d:14:17:2c:22:7b:20:31:47:84:1f:8f:9a:24:
         b4:b6:38:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZv5/Rb5c59sfb2bK6bZGiw0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NzQ2NzMxYjQzMTAyYjk2ZWJhMmRlNWQzOGMzZGNkMjg0
YjhmZTYwHhcNMjYwMTI2MTEwNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTkxYzQ5YWU5MzMwOWZmMmMxMTkzNzVmYjU0NGUyYjczMzlmMDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03Lyzt8X2gQjoGumE+/fUR+ANkc7
D4BwNCz+ftzrfWDQSlRYxiLsC0miJDD3+flJyWbblgQES67kPrOa7snO2RkcwwA1
qb0brxGa775sZPukYa0i3tuZlzALJJQ0LCNCvw83KaAtfiD0zY6KqlWyNXJcZRLe
YogDKC/1jteXBnkH0zOp76g2jKNc2NZpL0qoYcNeHHVOcaXhxvB3paI47Bw8FfkL
x89OTUXwi7qRPo1Og2yq6CbOpawU+pxp3zO8KyCx8Bsnl/Bp/qVKY+CLwinb/d0E
iSWwdKEGURkiVlqwVudRa24ECYziQfbPu8UYGkOWsUejZNdHcRfZGZU8AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH6RxJrpMwn/LBGTdftUTitzOfB4MB8GA1UdIwQY
MBaAFLR0ZzG0MQK5brot5dOMPc0oS4/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEhSbk1iUXhBcmx1dWkzbDA0dzl6U2hMai1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jNGY0MzctZGVmNy00OWM3LWJmMGIt
YmEwNjQyOWY0MmY1LzEvZnBIRW11a3pDZjhzRVpOMS0xUk9LM001OEhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jNGY0MzctZGVmNy00OWM3LWJmMGItYmEwNjQyOWY0MmY1
LzEvdEhSbk1iUXhBcmx1dWkzbDA0dzl6U2hMai1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnMaMA0G
CSqGSIb3DQEBCwUAA4IBAQAoUwX33nqQoz3zVfBq4m14Zyx9OmYdIELg6Qc1hKG7
toE7UaEcZAo2qzlnR0OHhaiIpzwlEnsGxCLTm+Bi1OVhj2Jvp6FByYjqU2NTiv6i
pBZJQaXaprtcI88epO5oDX5RHREsAuE0u7zEUEMnuzD2lle11JWcsiU3ByPgPjvb
H6Di8C+FsmNtbN0wJZOokJ6JjpT9tnHdgvw2hHUHCc0HLMuHl1THeJIibzYpnvNL
gqAt7lfb2aahWZ1cNoKvRJn5pqLwpRcIRwxYW7PFBY/rhPNnZSi3JbGvaxlWgLD1
u866q4KaQxwANzBB4edOnRQXLCJ7IDFHhB+PmiS0tjig
-----END CERTIFICATE-----
Generated at Mon Jan 26 21:32:40 2026 by rpki-client