This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/fBIbvQJADoTSsS7Jr2fItA3urdI.roa
File:                     fBIbvQJADoTSsS7Jr2fItA3urdI.roa (raw, json)
Hash identifier:          nJwJY4zTXkwANtW2/l5/P1l6Tsdntj7S0CCj9dxcAGE=
Subject key identifier:   7C:12:1B:BD:02:40:0E:84:D2:B1:2E:C9:AF:67:C8:B4:0D:EE:AD:D2
Certificate issuer:       /CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Certificate serial:       019B7CEE34470B0F53A6A676BED6AC993E4B
Authority key identifier: 01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/fBIbvQJADoTSsS7Jr2fItA3urdI.roa
Signing time:             Fri 02 Jan 2026 04:19:04 +0000
ROA not before:           Fri 02 Jan 2026 04:19:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     680
IP address blocks:        139.30.0.0/16 maxlen: 16
                          192.76.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:34:47:0b:0f:53:a6:a6:76:be:d6:ac:99:3e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
        Validity
            Not Before: Jan  2 04:19:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7c121bbd02400e84d2b12ec9af67c8b40deeadd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:91:9d:90:4f:f8:09:cf:cf:33:e1:95:3f:
                    0f:61:09:74:e7:2d:b1:b2:74:70:21:2e:74:ad:6d:
                    d8:b0:67:5e:47:98:17:78:76:2c:23:da:89:f7:9f:
                    63:47:9f:15:66:6f:bb:29:69:87:43:06:48:34:a7:
                    89:a4:73:f0:8c:5c:0e:68:ae:0b:0f:b6:20:59:48:
                    ff:0a:01:38:85:d0:98:29:04:42:33:61:9c:f0:53:
                    7f:88:eb:f9:0b:6c:91:b3:fb:83:d7:9e:67:24:c3:
                    47:75:58:50:50:c6:b1:b8:6d:0b:e6:53:df:ae:34:
                    8b:58:a5:7e:f2:14:ce:cd:c0:08:d4:25:fa:e2:39:
                    8e:24:a2:9c:d3:d5:39:00:7d:1c:7b:2c:d2:36:d0:
                    25:d1:47:13:48:0a:df:99:40:85:5b:79:be:4d:1b:
                    90:e6:e8:83:37:a6:3c:3f:1a:86:9c:a6:40:73:d9:
                    5c:70:c7:31:c4:88:20:1f:67:fc:78:76:db:ff:8e:
                    d9:6d:28:5e:1a:1b:43:06:5e:6b:b0:ad:ec:5b:8e:
                    59:08:c7:e8:14:a7:ad:f0:3e:75:e3:75:d6:4a:41:
                    fa:7a:e8:05:b0:2c:b4:30:49:39:ba:ca:09:20:7f:
                    ed:72:e0:9c:86:a3:d0:ab:37:04:08:02:dd:a0:d2:
                    04:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:12:1B:BD:02:40:0E:84:D2:B1:2E:C9:AF:67:C8:B4:0D:EE:AD:D2
            X509v3 Authority Key Identifier:
                keyid:01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/fBIbvQJADoTSsS7Jr2fItA3urdI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.30.0.0/16
                  192.76.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:09:2b:7f:3f:aa:b4:2b:fc:78:6a:70:20:19:2a:5f:93:21:
         b9:fe:0f:1f:14:39:74:48:b0:a3:8f:22:7d:e8:c6:11:90:93:
         ff:7d:79:51:e2:56:d9:66:e8:ea:a7:b7:b6:a1:19:f6:9c:1e:
         09:43:2b:2c:0c:0f:b0:0e:88:11:d5:c2:07:d7:9b:3b:30:e5:
         9a:f9:1d:28:a3:ba:eb:87:f3:6c:0c:c4:b3:25:fc:52:0d:99:
         83:13:9c:01:06:28:4d:29:41:90:73:64:56:33:38:9a:75:df:
         5b:5a:23:b4:81:b3:8c:f7:e9:67:1c:67:a2:ab:8e:7b:61:81:
         51:e8:42:03:74:12:e6:ce:17:46:bc:e2:f3:31:e1:b2:ba:b7:
         26:c4:5e:7e:f1:df:44:04:0f:75:8c:05:9f:2b:7a:57:4c:e1:
         ec:8e:7f:11:66:d4:92:d3:21:98:0a:03:d0:5e:28:e4:7c:fc:
         71:fa:91:59:d4:19:cd:09:b0:1c:a9:a5:0a:42:b8:ff:86:2f:
         d5:af:a4:75:fe:77:34:65:4c:70:5a:26:96:9f:e8:de:48:c8:
         c7:c4:1b:48:d8:f9:52:bc:84:4d:cd:81:56:87:bb:41:48:0c:
         1f:bd:74:ca:17:58:9c:e5:08:86:36:05:1d:a4:84:41:77:ee:
         ee:dc:56:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 11:25:14 2026 by rpki-client