This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/1-vE35X7cA95yo4co5xI4LRsygqE.roa
File:                     1-vE35X7cA95yo4co5xI4LRsygqE.roa (raw, json)
Hash identifier:          GArZfb9HlabGHSj6lQqBP09tmUxt9yZTyafscM2AVng=
Subject key identifier:   FA:F1:37:E5:7E:DC:03:DE:72:A3:87:28:E7:12:38:2D:1B:32:82:A1
Certificate issuer:       /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial:       019B7F16038292FC8395AA42AC5BFF067543
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/1-vE35X7cA95yo4co5xI4LRsygqE.roa
Signing time:             Fri 02 Jan 2026 14:21:47 +0000
ROA not before:           Fri 02 Jan 2026 14:21:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     45043
IP address blocks:        195.64.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:16:03:82:92:fc:83:95:aa:42:ac:5b:ff:06:75:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
        Validity
            Not Before: Jan  2 14:21:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=faf137e57edc03de72a38728e712382d1b3282a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:59:82:eb:24:f1:96:1f:36:f1:a7:73:47:
                    be:75:a6:f7:11:16:07:ba:eb:c8:24:83:55:4e:e1:
                    29:61:9d:1a:45:02:4f:28:b8:6f:d1:ab:47:d4:0b:
                    97:d8:0a:80:97:63:b5:d7:33:11:be:47:67:59:4c:
                    ca:a6:54:71:cb:77:bb:46:f9:a7:b0:70:57:38:05:
                    29:0c:f8:46:f8:63:18:87:fe:34:59:53:ef:94:e8:
                    18:2f:e3:46:87:62:74:01:5c:92:7e:72:11:be:b5:
                    9f:6d:b3:83:5d:9a:34:f4:a4:e8:28:ff:6e:fc:42:
                    d7:39:b7:a9:be:21:10:04:82:f7:13:49:41:60:a2:
                    1c:a3:0d:6d:47:f6:03:b8:5c:39:13:71:a0:1f:74:
                    a1:c4:3c:9a:79:f9:be:b2:f7:5c:8d:f7:5b:8d:0e:
                    27:b1:6e:df:63:71:87:0f:2e:19:a7:b0:4e:68:fa:
                    4e:f3:4b:d5:40:09:4b:62:31:c1:90:fd:02:80:cc:
                    71:2c:01:46:5f:46:2c:cc:25:5f:43:e0:47:fc:dd:
                    11:d2:c6:85:83:09:aa:ad:d0:e8:89:e3:bb:3d:ba:
                    4c:53:b2:4e:3a:92:b7:58:0a:fc:c8:8d:25:20:5b:
                    66:4c:be:e5:e8:8d:3b:23:d3:15:ef:57:d8:6f:15:
                    0f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F1:37:E5:7E:DC:03:DE:72:A3:87:28:E7:12:38:2D:1B:32:82:A1
            X509v3 Authority Key Identifier:
                keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/1-vE35X7cA95yo4co5xI4LRsygqE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.64.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:e4:3c:bf:87:ec:b8:63:c7:d2:38:b2:aa:07:e3:a9:27:28:
         41:d7:fb:06:b5:bf:e8:1c:4e:d2:4d:fb:01:58:00:f4:16:23:
         18:92:3e:fa:ec:59:67:25:ed:3e:d8:1d:88:6a:c8:35:e3:c5:
         be:a1:7d:1a:b2:83:67:28:35:97:d4:e6:58:dd:9d:1e:87:c1:
         35:4b:d6:b5:cf:90:cf:20:4b:ae:0a:84:27:af:8e:08:30:7d:
         e6:70:93:a4:0a:03:fb:24:66:4c:bd:83:78:31:b3:da:dc:39:
         87:4e:8d:85:58:13:04:e1:3a:d0:93:f3:9f:d2:60:1a:a3:ce:
         6d:dd:f8:b6:9d:d1:5c:de:7b:44:75:42:f5:24:73:e3:60:65:
         46:fd:2c:49:d8:fd:39:e7:d9:5a:1d:7b:b7:29:f9:2d:5e:fd:
         6b:39:30:99:e7:b2:15:91:40:f1:a1:14:f8:94:b2:d6:80:dc:
         f4:95:c8:76:49:d2:08:41:fa:9a:ef:de:75:97:e5:7b:8a:01:
         6b:f9:8f:52:7b:3e:26:af:a8:b3:4e:9a:08:f7:8b:5b:80:64:
         ca:96:dd:36:bb:67:92:09:e8:89:14:42:f1:e1:73:9f:7f:9e:
         a8:36:37:d0:57:2f:70:c5:33:21:12:a6:76:e1:fb:84:96:39:
         2e:29:7c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:28:11 2026 by rpki-client