This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/fJGTQ-92RYM4ESVZMma9WElMl1Y.roa
File:                     fJGTQ-92RYM4ESVZMma9WElMl1Y.roa (raw, json)
Hash identifier:          u4BRew2rcL4+f1DSutDXYgeNYGW2Xyb7Ti04ciTUI4Y=
Subject key identifier:   7C:91:93:43:EF:76:45:83:38:11:25:59:32:66:BD:58:49:4C:97:56
Certificate issuer:       /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial:       019B7910C53558ECB97407F6E8DDB94D5121
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/fJGTQ-92RYM4ESVZMma9WElMl1Y.roa
Signing time:             Thu 01 Jan 2026 10:18:20 +0000
ROA not before:           Thu 01 Jan 2026 10:18:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216047
IP address blocks:        2a12:bec0:590::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:c5:35:58:ec:b9:74:07:f6:e8:dd:b9:4d:51:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
        Validity
            Not Before: Jan  1 10:18:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7c919343ef764583381125593266bd58494c9756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:56:dc:75:e2:8f:81:8f:a8:6b:95:41:ea:f7:
                    b0:02:ff:5b:d0:3e:46:82:26:b4:b6:9a:7c:e9:76:
                    21:b8:88:2f:61:83:83:07:94:9a:40:ac:6b:96:8c:
                    3b:dc:d6:93:37:85:31:7a:a9:b6:8d:19:85:8a:a3:
                    97:bc:a7:fa:50:85:4a:82:89:9d:1a:ea:89:2a:39:
                    44:87:d0:31:e9:51:ce:6d:76:28:43:55:dd:7f:fc:
                    68:5d:73:79:a8:59:22:27:92:d0:77:72:40:9d:19:
                    b9:08:9e:23:6c:0a:d7:a2:bc:1a:d1:6f:41:27:a4:
                    47:f6:e6:9f:d9:4f:df:0a:9e:80:d3:f0:49:50:b5:
                    a7:79:5a:5a:8f:78:12:94:c6:bd:90:4d:75:10:5a:
                    10:67:50:11:53:0b:34:e5:ba:71:9f:4e:84:65:91:
                    1c:dc:48:d7:48:af:de:a5:f5:3b:08:44:84:94:ac:
                    8d:25:ba:f5:96:56:95:e2:b2:84:52:cc:ac:08:57:
                    42:e3:b6:7f:d3:90:60:4a:df:c9:c9:58:57:72:b8:
                    56:77:77:90:37:46:7e:07:a2:1d:e2:31:e0:01:1d:
                    30:13:6e:8f:5e:68:23:41:0b:d5:e1:77:14:15:ac:
                    fd:3b:eb:e0:98:6d:96:23:d7:b0:26:38:d4:2e:1f:
                    73:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:91:93:43:EF:76:45:83:38:11:25:59:32:66:BD:58:49:4C:97:56
            X509v3 Authority Key Identifier:
                keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/fJGTQ-92RYM4ESVZMma9WElMl1Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:bec0:590::/44

    Signature Algorithm: sha256WithRSAEncryption
         af:78:04:70:54:d3:8d:cd:f2:b2:bd:4d:84:29:fc:ef:0e:af:
         4b:45:c8:d3:ad:d2:26:e1:92:e4:da:9a:f1:3a:8e:a6:2f:ca:
         12:44:3c:0a:bc:39:e4:2b:f9:f8:2a:30:fa:7a:05:da:f2:01:
         6b:53:5d:d2:dc:3c:46:f2:ef:a6:15:b7:e3:fb:d1:b7:b9:6e:
         b8:4d:c2:39:26:89:5a:f2:f5:a9:3f:36:c1:d4:96:59:cf:ab:
         f7:f6:e7:c9:cd:78:59:dd:8c:af:56:2d:84:9b:37:ab:2d:a5:
         a6:15:d8:e4:de:aa:0f:b9:f8:bf:e4:96:f4:2b:28:3e:39:6b:
         83:a4:29:22:02:d7:4b:f0:40:c0:7e:2c:79:ee:62:40:69:10:
         90:03:65:8a:50:9d:00:5f:81:5d:83:91:f1:b5:2f:1c:a4:31:
         7f:24:48:25:ed:eb:77:d3:40:65:e1:77:3f:91:c4:66:53:24:
         7e:d8:f9:8e:0d:a5:95:3b:25:fa:c7:6b:d1:c4:2c:de:36:a6:
         10:ba:ad:d9:d9:9c:4d:9c:7e:b9:a4:5f:96:e2:93:8b:9e:ae:
         38:f2:77:a2:7a:23:e1:e7:c8:e6:c8:df:2a:f2:c1:65:95:42:
         be:f5:d0:9b:65:b4:fc:6b:33:67:56:7c:02:96:60:d9:11:68:
         ef:39:27:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:00 2026 by rpki-client