This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/_tF7Ik4u1X3UVcqtDkQOy_QY71o.roa
File:                     _tF7Ik4u1X3UVcqtDkQOy_QY71o.roa (raw, json)
Hash identifier:          WpHeZYBv/Ys5nnITe1/4Dk1ML1Qrb7KjEIrfdP34mVc=
Subject key identifier:   FE:D1:7B:22:4E:2E:D5:7D:D4:55:CA:AD:0E:44:0E:CB:F4:18:EF:5A
Certificate issuer:       /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial:       019B7AC7F225C5021CD6DE982E0E3DBCBC2C
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/_tF7Ik4u1X3UVcqtDkQOy_QY71o.roa
Signing time:             Thu 01 Jan 2026 18:18:02 +0000
ROA not before:           Thu 01 Jan 2026 18:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        145.78.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:f2:25:c5:02:1c:d6:de:98:2e:0e:3d:bc:bc:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
        Validity
            Not Before: Jan  1 18:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fed17b224e2ed57dd455caad0e440ecbf418ef5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:b0:81:ef:25:af:b2:8c:bd:b1:6a:55:72:
                    aa:59:3e:2c:23:45:56:1e:da:7a:5a:13:bf:f6:de:
                    6e:b0:b5:86:dc:07:01:32:fe:ea:13:2c:8e:f1:a7:
                    4b:ce:1d:73:fa:7d:d2:e9:90:df:74:6a:1b:84:6f:
                    c1:57:4d:86:a7:b1:4e:fa:b9:25:cf:8c:30:e9:7a:
                    ca:e2:f2:b7:e7:6b:0f:25:1e:b8:8c:18:9a:dd:ee:
                    27:f7:32:2e:c8:dd:60:8a:3c:c8:1b:09:42:16:7c:
                    10:8a:46:75:4c:1f:99:d7:fc:cc:83:ca:18:b2:2f:
                    1a:5f:e6:0c:ba:30:fd:19:03:3b:5a:b8:ad:7e:5e:
                    76:b6:4f:ec:c2:21:ec:bb:f4:f6:16:4f:06:5f:06:
                    59:7b:c0:82:62:2a:88:53:6d:c4:b7:28:32:b9:3d:
                    e1:21:6e:81:42:53:b1:35:f3:26:28:26:f4:c7:4f:
                    02:ec:ce:26:4f:b3:69:e7:56:a7:58:d9:c6:a2:9d:
                    f5:b4:a8:b5:de:03:40:3d:d5:ee:90:21:68:17:02:
                    74:27:18:87:b9:19:fe:33:5e:b8:9a:16:64:73:02:
                    f0:c2:ff:8b:50:ab:d6:27:c3:ed:a8:04:5a:59:80:
                    7d:31:90:12:35:c1:3f:be:8e:18:bf:ba:6b:2a:f7:
                    06:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D1:7B:22:4E:2E:D5:7D:D4:55:CA:AD:0E:44:0E:CB:F4:18:EF:5A
            X509v3 Authority Key Identifier:
                keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/_tF7Ik4u1X3UVcqtDkQOy_QY71o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.78.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:79:6f:34:a9:66:bf:49:52:29:65:21:d3:8e:a6:17:9c:f2:
         f0:61:1c:e8:07:52:f2:69:28:57:cb:dd:03:c3:21:e6:78:d6:
         73:e3:d9:07:e1:90:61:b7:4d:1f:ef:41:01:75:b6:7a:69:39:
         7b:af:6c:8d:77:94:ea:e2:3d:59:8e:b8:53:79:82:15:53:f2:
         38:02:1c:2f:52:f4:8d:5d:b6:be:03:47:09:dd:5a:70:78:e4:
         f6:b7:5c:24:d1:ed:27:91:47:d0:8c:f6:2b:72:e8:98:a2:9f:
         2d:bf:38:23:e1:f8:2e:13:5f:52:dc:23:3b:a1:7b:63:37:e3:
         1a:79:48:42:68:e0:4b:cb:e5:cc:40:a2:5b:7b:ca:6b:6c:99:
         ba:1a:49:a2:4f:67:08:8e:0c:b2:e3:c0:3d:7c:41:7b:fa:7d:
         bb:79:6b:a7:91:64:f1:ce:07:6d:76:70:04:66:dc:ff:6d:c0:
         68:bb:7e:c5:fc:f0:06:e6:be:81:21:49:59:9c:16:76:e0:c4:
         0d:0b:42:4c:15:82:11:3d:39:63:62:d8:c9:fc:a4:b7:81:4f:
         70:4d:bb:fa:aa:87:49:f6:86:d4:4f:54:2b:fd:82:39:ef:fa:
         92:9b:4e:ef:c9:24:50:23:79:13:16:3d:6c:53:dd:f9:7e:a3:
         77:f2:27:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:48:06 2026 by rpki-client