This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/fb_wL9N1OW0PyiKLL5fbxlqRd_A.roa
File:                     fb_wL9N1OW0PyiKLL5fbxlqRd_A.roa (raw, json)
Hash identifier:          PwX6Qj+/Hw67w92aS4xQ86nPtQ/6Nm2w8w8MnwiNUKI=
Subject key identifier:   7D:BF:F0:2F:D3:75:39:6D:0F:CA:22:8B:2F:97:DB:C6:5A:91:77:F0
Certificate issuer:       /CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Certificate serial:       019B7C1195DDCEFC530BB89ECE393984CF30
Authority key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/fb_wL9N1OW0PyiKLL5fbxlqRd_A.roa
Signing time:             Fri 02 Jan 2026 00:18:05 +0000
ROA not before:           Fri 02 Jan 2026 00:18:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56432
IP address blocks:        91.223.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:11:95:dd:ce:fc:53:0b:b8:9e:ce:39:39:84:cf:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
        Validity
            Not Before: Jan  2 00:18:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7dbff02fd375396d0fca228b2f97dbc65a9177f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9e:fc:4e:4a:ba:0a:f3:1c:b8:f9:b4:19:70:
                    1e:c5:bb:35:18:67:e2:c4:61:fe:69:2e:e0:2f:a9:
                    6c:14:b0:f3:d5:86:40:9c:84:39:ea:1d:92:54:64:
                    41:1a:15:80:19:7f:05:e4:27:b2:a4:e5:6a:c1:5a:
                    d2:28:cb:d9:68:52:c9:ec:b1:dc:16:01:da:b4:5e:
                    fe:47:2b:63:92:22:3c:6c:7c:30:a1:f2:ec:73:92:
                    b6:70:c5:f7:39:b2:ae:31:bb:8d:82:0e:c4:c5:8f:
                    f4:96:2f:18:b5:e8:b9:5c:64:05:af:39:9a:a6:7f:
                    89:68:ee:41:03:6a:ce:24:fc:fe:a9:09:ac:df:98:
                    ee:cf:12:9f:09:81:e6:7a:eb:b3:8a:ed:8d:c6:40:
                    1f:39:22:02:ff:ff:fe:ad:d0:aa:39:fe:93:fa:c2:
                    97:64:2f:9b:d9:e3:f7:15:93:bf:cf:1c:74:1d:d9:
                    bd:5c:0c:b2:6b:16:ef:fd:ae:2e:aa:0b:9f:3b:0c:
                    39:a1:55:51:a9:dd:8e:b6:d1:fc:7c:60:a6:fc:76:
                    4b:d6:a5:98:90:a3:4a:c4:1c:04:2c:78:25:f0:eb:
                    ce:c1:aa:db:b4:7d:a3:57:57:0b:81:c5:a2:b0:11:
                    d0:c9:ce:2e:c9:f3:aa:ef:0a:90:35:07:f0:b1:a3:
                    b3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BF:F0:2F:D3:75:39:6D:0F:CA:22:8B:2F:97:DB:C6:5A:91:77:F0
            X509v3 Authority Key Identifier:
                keyid:9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/fb_wL9N1OW0PyiKLL5fbxlqRd_A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.223.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:8a:d7:94:02:9d:80:ad:ed:e2:7a:9c:be:3a:ff:52:ba:63:
         34:80:8f:e8:3a:e7:75:62:52:a4:cc:55:4b:c0:bc:4e:31:e4:
         cf:8b:2f:05:a2:ba:0c:3c:ce:b5:07:34:4e:3a:c5:9d:67:c0:
         a5:91:9b:4e:7f:1c:87:d1:e8:70:90:ce:1f:60:bb:4c:e9:ff:
         15:3c:f7:6a:ac:c0:81:97:07:d3:90:b0:81:0b:f6:b3:d7:e5:
         90:91:35:5d:32:c1:d4:80:af:dd:d7:8e:30:c0:02:6d:bf:d3:
         33:10:a3:e2:da:f8:7b:99:11:40:0d:23:b7:12:2b:b0:5f:bc:
         15:3b:b0:18:8c:27:db:97:e4:f3:76:f6:ae:b3:aa:07:48:25:
         32:f1:d9:d4:e4:78:2d:59:26:b8:d0:99:5a:a7:86:19:54:29:
         75:64:7d:25:ce:12:2f:40:ac:ff:1c:fc:ea:56:60:ca:ad:5e:
         28:0f:fc:2b:53:40:f8:a1:a8:c3:2d:01:eb:63:1c:b5:ae:e4:
         c8:8b:2b:54:00:9a:c0:97:7f:ed:44:3c:fa:f2:53:9f:f5:22:
         d6:ee:3e:8c:95:44:87:e7:0a:31:75:fc:8d:07:04:d8:38:ea:
         45:43:87:4f:85:f4:1d:b4:ea:51:2b:e8:b7:10:d3:6c:88:41:
         d4:64:4c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:14:05 2026 by rpki-client