This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/FyRUGre7oijk4X5ntW2vJPLDaJo.roa
File:                     FyRUGre7oijk4X5ntW2vJPLDaJo.roa (raw, json)
Hash identifier:          nAwQuGchCFa8ArqRc8kldlDa74iiMYaMzhlCrlcSiJg=
Subject key identifier:   17:24:54:1A:B7:BB:A2:28:E4:E1:7E:67:B5:6D:AF:24:F2:C3:68:9A
Certificate issuer:       /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial:       019B7F8336EBDBAE8DE255C5F17218465C48
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/FyRUGre7oijk4X5ntW2vJPLDaJo.roa
Signing time:             Fri 02 Jan 2026 16:21:04 +0000
ROA not before:           Fri 02 Jan 2026 16:21:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197926
IP address blocks:        88.199.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:36:eb:db:ae:8d:e2:55:c5:f1:72:18:46:5c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
        Validity
            Not Before: Jan  2 16:21:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1724541ab7bba228e4e17e67b56daf24f2c3689a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:f4:01:a4:90:70:c5:e9:19:fa:7b:3d:ed:
                    b4:a1:cf:97:d4:26:52:82:9c:b6:93:c7:37:50:01:
                    c7:96:e1:d0:d3:63:ac:8c:3f:7f:36:2e:36:66:18:
                    dc:11:4f:95:c0:90:ff:77:8e:a9:50:64:53:68:c5:
                    d2:ad:3d:42:67:86:97:6e:46:3a:0c:82:e1:aa:54:
                    70:97:54:b3:a0:90:b7:76:7e:a5:d4:68:e7:c8:86:
                    92:7a:11:cc:9b:94:d7:44:3e:f7:b8:a7:12:b5:ec:
                    3b:38:cf:ed:ab:30:45:92:39:67:80:e6:1c:c9:55:
                    7b:57:d0:48:c9:9c:04:7a:77:06:c9:f2:2b:e2:49:
                    77:cb:8a:a6:16:83:1c:9e:07:2b:4e:37:71:f5:7f:
                    2d:df:f6:32:4f:d5:cf:98:bb:6e:9d:27:65:65:06:
                    3d:4f:67:98:00:2b:22:75:0a:bf:6a:4c:a1:50:b6:
                    3b:5b:a5:e8:dd:99:92:65:13:4e:db:71:de:68:18:
                    05:72:b2:43:63:30:69:c6:71:0f:a6:7b:ee:ae:37:
                    9b:31:33:17:d8:fe:af:ba:45:56:3a:9c:c3:0c:90:
                    e1:46:53:67:f1:aa:d7:28:1c:01:3d:2f:73:14:45:
                    42:99:c5:58:f0:ef:d8:e9:d8:6f:45:31:bc:d7:fd:
                    35:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:24:54:1A:B7:BB:A2:28:E4:E1:7E:67:B5:6D:AF:24:F2:C3:68:9A
            X509v3 Authority Key Identifier:
                keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/FyRUGre7oijk4X5ntW2vJPLDaJo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.199.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:20:aa:5d:fd:9b:42:56:f4:7d:bf:05:3a:a3:f0:44:76:0b:
         d1:9f:86:64:14:e7:18:e1:05:9f:b3:c0:95:7f:86:c8:d0:87:
         e2:44:0b:1c:c8:58:1f:bf:f5:95:d4:e8:4e:eb:e0:43:9b:fa:
         3b:c5:78:a2:03:7d:03:25:81:1c:fd:fb:39:1c:1e:92:8c:04:
         f0:fb:8d:b6:6a:42:d0:14:37:4b:c7:ff:90:c8:1a:93:98:cf:
         af:d2:aa:c1:51:3e:64:22:84:0a:94:27:e8:f0:14:81:35:04:
         d6:12:74:42:d8:0d:2c:3e:42:86:32:89:bb:0a:af:a5:8e:3b:
         b1:0d:30:28:d5:92:bf:00:7d:f8:26:36:83:80:7b:e1:58:29:
         88:78:74:58:fb:cf:bc:3b:fd:91:c2:b2:c2:95:25:84:37:bc:
         91:f6:cd:11:a6:e1:42:ab:79:71:22:7d:e9:f2:00:16:41:e7:
         c7:cd:a3:94:f8:f6:68:8a:38:45:58:17:b1:bc:f4:8a:1b:1e:
         eb:fb:37:cb:09:79:79:20:a0:b9:48:69:cc:be:da:47:4a:e2:
         a0:0c:e3:cf:35:db:eb:db:d8:38:ff:1e:d3:41:4e:96:ca:15:
         cd:43:97:88:e7:a5:ca:fa:59:08:4f:08:64:4e:a2:6c:26:17:
         52:a8:ef:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:22:45 2026 by rpki-client