This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/FtpP7jqiRqsaewteqUCm2wyEXLM.roa
File:                     FtpP7jqiRqsaewteqUCm2wyEXLM.roa (raw, json)
Hash identifier:          MK0f39W8byL9gsiBPX02BzYZlhRpLBc93Ceao7rPOjg=
Subject key identifier:   16:DA:4F:EE:3A:A2:46:AB:1A:7B:0B:5E:A9:40:A6:DB:0C:84:5C:B3
Certificate issuer:       /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial:       019B7D5C48806F88C20B4A09628833483D17
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/FtpP7jqiRqsaewteqUCm2wyEXLM.roa
Signing time:             Fri 02 Jan 2026 06:19:18 +0000
ROA not before:           Fri 02 Jan 2026 06:19:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43905
IP address blocks:        185.84.12.0/22 maxlen: 22
                          217.173.61.0/24 maxlen: 24
                          217.173.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:48:80:6f:88:c2:0b:4a:09:62:88:33:48:3d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
        Validity
            Not Before: Jan  2 06:19:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=16da4fee3aa246ab1a7b0b5ea940a6db0c845cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:6c:52:69:26:dd:25:7d:31:4d:33:de:de:
                    c3:f5:38:99:b2:0f:20:a0:f5:72:cc:f6:8c:89:fb:
                    56:7b:2a:73:7b:e2:5e:9d:99:99:d3:41:1f:d7:b6:
                    aa:76:9c:a0:50:a2:92:16:b7:2f:9b:f5:f2:24:a4:
                    37:a2:98:bb:fa:01:96:10:d6:34:b4:e5:66:d7:70:
                    22:b4:d8:83:dc:73:ef:2c:df:5d:34:33:45:33:1a:
                    16:89:f2:1e:ca:51:ab:24:c5:e2:08:42:1b:da:7d:
                    90:73:b8:04:3c:21:f4:0a:ff:5b:6a:ba:cf:57:94:
                    bd:ad:5d:ba:2b:25:98:f8:c5:20:b2:0d:d9:89:12:
                    49:00:15:2a:05:5b:e1:64:20:14:58:03:4d:12:f3:
                    20:4a:88:89:bb:26:12:53:8b:46:2a:77:cb:fc:c6:
                    c8:4f:a9:bf:87:b0:2a:34:6e:36:da:95:1d:8f:ce:
                    2a:c9:69:af:cb:07:8a:d8:2e:76:d2:34:d5:f6:b9:
                    d0:7e:76:26:7e:69:2c:6d:56:96:6b:20:4d:0c:63:
                    dd:89:af:31:84:2f:4e:47:8f:10:50:cc:1c:9b:7b:
                    99:b7:1a:75:35:dd:95:04:15:ce:db:06:e0:3f:c0:
                    a4:2d:68:ab:58:65:75:48:81:ff:73:df:ad:29:b5:
                    ce:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DA:4F:EE:3A:A2:46:AB:1A:7B:0B:5E:A9:40:A6:DB:0C:84:5C:B3
            X509v3 Authority Key Identifier:
                keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/FtpP7jqiRqsaewteqUCm2wyEXLM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.84.12.0/22
                  217.173.61.0-217.173.62.255

    Signature Algorithm: sha256WithRSAEncryption
         14:0b:f4:eb:d9:7a:d3:ac:4d:e3:13:52:86:e9:b2:5e:4d:e4:
         65:6a:a4:b1:62:0a:2b:e4:12:4e:d4:56:9f:4c:f8:1c:49:43:
         ae:ff:81:cd:8b:bb:24:72:b4:0d:54:e9:68:2e:e0:d7:a8:4a:
         2b:7a:63:da:69:0f:ae:83:63:41:ad:02:70:80:ee:a1:74:f3:
         cd:95:77:e3:55:35:e6:9b:9c:21:5c:91:a4:c5:53:01:2e:bc:
         63:6d:88:18:d7:8a:c0:f1:3b:10:47:78:dd:20:80:56:1e:f4:
         8a:ec:64:80:a8:14:33:26:c6:de:e9:a2:d0:2a:87:18:4f:0d:
         f2:a3:90:d9:2f:93:06:de:a1:6d:10:07:6a:e8:0f:15:58:7a:
         5a:11:76:ff:4f:78:89:ac:01:ec:ec:2c:48:e0:ad:14:bf:f0:
         07:1a:7b:b6:d3:31:1b:e1:d9:52:d4:29:1d:23:3a:70:67:b7:
         f8:1e:1e:29:ce:99:fb:35:74:1a:c8:6e:18:28:3b:e7:9e:f1:
         65:d9:3f:b3:f9:eb:e0:75:63:b3:c0:a1:ab:1a:45:7c:d5:eb:
         6a:8f:83:84:75:4a:18:25:1a:14:90:bd:d1:a4:d9:c6:be:cb:
         fe:6c:83:96:38:3f:a8:8f:41:f6:97:7c:55:48:b3:23:4f:e1:
         8b:de:1f:7c
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZt9XEiAb4jCC0oJYogzSD0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYjFlMmU0YzUwOGM2YzdhOThiNjU5ODUyODc0NWM4MTNm
YWQzMWQwHhcNMjYwMTAyMDYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmRhNGZlZTNhYTI0NmFiMWE3YjBiNWVhOTQwYTZkYjBjODQ1Y2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR1sUmkm3SV9MU0z3t7D9TiZsg8g
oPVyzPaMiftWeypze+JenZmZ00Ef17aqdpygUKKSFrcvm/XyJKQ3opi7+gGWENY0
tOVm13AitNiD3HPvLN9dNDNFMxoWifIeylGrJMXiCEIb2n2Qc7gEPCH0Cv9barrP
V5S9rV26KyWY+MUgsg3ZiRJJABUqBVvhZCAUWANNEvMgSoiJuyYSU4tGKnfL/MbI
T6m/h7AqNG422pUdj84qyWmvyweK2C520jTV9rnQfnYmfmksbVaWayBNDGPdia8x
hC9OR48QUMwcm3uZtxp1Nd2VBBXO2wbgP8CkLWirWGV1SIH/c9+tKbXOaQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBbaT+46okarGnsLXqlAptsMhFyzMB8GA1UdIwQY
MBaAFOKx4uTFCMbHqYtlmFKHRcgT+tMdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHJIaTVNVUl4c2VwaTJXWVVvZEZ5QlA2MHgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kMzFlNWYtMGY1Mi00NjIzLTg2N2Et
NTQzZDYxODJlMjk0LzEvRnRwUDdqcWlScXNhZXd0ZXFVQ20yd3lFWExNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9kMzFlNWYtMGY1Mi00NjIzLTg2N2EtNTQzZDYxODJlMjk0
LzEvNHJIaTVNVUl4c2VwaTJXWVVvZEZ5QlA2MHgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCuVQMMAwD
BADZrT0DBADZrT4wDQYJKoZIhvcNAQELBQADggEBABQL9OvZetOsTeMTUobpsl5N
5GVqpLFiCivkEk7UVp9M+BxJQ67/gc2LuyRytA1U6Wgu4NeoSit6Y9ppD66DY0Gt
AnCA7qF0882Vd+NVNeabnCFckaTFUwEuvGNtiBjXisDxOxBHeN0ggFYe9IrsZICo
FDMmxt7potAqhxhPDfKjkNkvkwbeoW0QB2roDxVYeloRdv9PeImsAezsLEjgrRS/
8Acae7bTMRvh2VLUKR0jOnBnt/geHinOmfs1dBrIbhgoO+ee8WXZP7P56+B1Y7PA
oasaRXzV62qPg4R1ShglGhSQvdGk2ca+y/5sg5Y4P6iPQfaXfFVIsyNP4YveH3w=
-----END CERTIFICATE-----
Generated at Tue Jan 27 00:26:31 2026 by rpki-client