This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/F_LtpihnOZSFHJv85nIVJ4V102M.roa
File:                     F_LtpihnOZSFHJv85nIVJ4V102M.roa (raw, json)
Hash identifier:          8yvnxuLRYXxGLDUJznrlW7WBOZGiJ5tUpgMx642UXWI=
Subject key identifier:   17:F2:ED:A6:28:67:39:94:85:1C:9B:FC:E6:72:15:27:85:75:D3:63
Certificate issuer:       /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Certificate serial:       019B77C702818B00207AC1723B664736AD64
Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/F_LtpihnOZSFHJv85nIVJ4V102M.roa
Signing time:             Thu 01 Jan 2026 04:18:09 +0000
ROA not before:           Thu 01 Jan 2026 04:18:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8752
IP address blocks:        46.38.96.0/19 maxlen: 19
                          95.182.32.0/19 maxlen: 19
                          185.35.168.0/22 maxlen: 22
                          212.46.0.0/19 maxlen: 23
                          212.46.0.0/23 maxlen: 23
                          212.46.2.0/23 maxlen: 23
                          212.46.4.0/22 maxlen: 22
                          212.46.8.0/21 maxlen: 21
                          212.46.16.0/20 maxlen: 20
                          2a03:3200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:02:81:8b:00:20:7a:c1:72:3b:66:47:36:ad:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
        Validity
            Not Before: Jan  1 04:18:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=17f2eda628673994851c9bfce67215278575d363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b1:e7:c1:c9:d7:be:bb:70:b8:a3:9b:d1:ba:
                    7c:43:1d:fb:d4:9b:c2:6b:6c:41:55:4f:d2:d6:bc:
                    51:24:8d:e4:1f:7d:28:73:38:b6:05:e0:1a:2e:80:
                    15:68:dd:0d:38:cd:81:9c:42:33:30:e0:83:6b:6f:
                    01:e6:57:df:51:5c:ad:b1:dc:2f:83:bd:46:15:28:
                    58:d4:72:39:9b:f6:d1:3d:c8:94:af:c1:f1:65:74:
                    f6:b2:54:d9:8a:20:f7:d2:cf:63:97:2a:4c:52:2d:
                    d5:7e:f2:47:21:4c:66:b6:ab:c8:c2:b2:13:b3:55:
                    44:ae:41:ae:4c:4a:24:34:47:02:e4:94:f9:69:06:
                    05:f0:69:de:fd:a9:23:ed:39:c2:5c:4d:2c:86:41:
                    50:8e:6f:78:34:b6:f3:a6:1c:aa:03:39:c6:33:11:
                    bc:e4:79:47:9b:ca:4f:35:61:b7:07:51:d7:7b:72:
                    90:ac:d3:9b:75:3d:78:9e:7b:0a:ae:7d:4e:8b:f3:
                    63:c6:14:5c:67:4d:1a:52:03:f0:c7:47:f1:12:0d:
                    78:3b:3d:ff:98:03:15:9a:41:a7:c2:69:1b:58:e8:
                    76:8f:85:5d:02:51:89:c5:4c:bd:4f:dd:92:e3:14:
                    e9:a2:ba:fd:2b:15:37:2c:1e:31:93:e4:de:08:d8:
                    53:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F2:ED:A6:28:67:39:94:85:1C:9B:FC:E6:72:15:27:85:75:D3:63
            X509v3 Authority Key Identifier:
                keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/F_LtpihnOZSFHJv85nIVJ4V102M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.38.96.0/19
                  95.182.32.0/19
                  185.35.168.0/22
                  212.46.0.0/19
                IPv6:
                  2a03:3200::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:a5:c3:53:4c:5f:ee:bc:4a:89:09:a2:ee:e5:36:0b:ce:36:
         91:99:a4:9d:b7:ca:5d:54:f2:40:2d:89:4f:3f:0e:e7:92:1f:
         4d:97:a3:78:56:ca:8f:34:ee:13:b5:30:37:47:59:ce:eb:75:
         d3:75:ba:59:db:41:97:8d:ef:1e:99:78:06:d2:b0:ca:88:04:
         a2:c8:ad:ba:74:62:ec:f6:52:67:38:39:35:0a:db:db:16:b4:
         41:9b:63:ca:25:dd:9d:7a:c6:72:e7:30:bd:0c:3d:7f:3e:97:
         77:63:9e:f5:bf:c2:49:07:05:7e:6f:88:f8:4d:30:50:da:1e:
         95:2a:a5:3b:3e:ad:0a:20:b9:db:69:c9:b5:f8:03:a3:d8:a4:
         74:3f:fc:f8:40:5f:74:92:66:0e:ae:ef:64:59:ba:45:b3:1b:
         62:fb:bb:42:cd:67:84:e3:71:d9:33:4f:d7:95:17:0b:e2:ae:
         7d:99:ed:e3:79:3f:eb:c9:10:87:c1:57:64:4c:2b:f0:4a:17:
         16:38:ea:74:de:29:73:63:c9:db:51:07:d4:9c:62:03:2b:f9:
         1b:43:18:c8:8c:a9:1b:b5:35:e6:00:22:2b:49:d1:8f:19:10:
         9a:ca:eb:26:e2:d3:82:e5:26:bf:ec:d1:11:12:37:b8:22:9f:
         d9:85:25:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:43:07 2026 by rpki-client