This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/fe1imW15nJcWqPFUEtzxex8TfJY.roa
File:                     fe1imW15nJcWqPFUEtzxex8TfJY.roa (raw, json)
Hash identifier:          7SyOd5vhLLHK1X5KDoXQcbr6Cl3ba3LVf0tf6U/sBZ4=
Subject key identifier:   7D:ED:62:99:6D:79:9C:97:16:A8:F1:54:12:DC:F1:7B:1F:13:7C:96
Certificate issuer:       /CN=e334ec393448d83bf1515f4967a448098e55fb43
Certificate serial:       019B7758B624E815D0BC7AF30911AB5D4544
Authority key identifier: E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/fe1imW15nJcWqPFUEtzxex8TfJY.roa
Signing time:             Thu 01 Jan 2026 02:17:41 +0000
ROA not before:           Thu 01 Jan 2026 02:17:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62092
IP address blocks:        185.226.164.0/24 maxlen: 24
                          2a0f:d340::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:b6:24:e8:15:d0:bc:7a:f3:09:11:ab:5d:45:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e334ec393448d83bf1515f4967a448098e55fb43
        Validity
            Not Before: Jan  1 02:17:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7ded62996d799c9716a8f15412dcf17b1f137c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2b:b0:8e:59:bb:53:1b:dc:44:29:bd:ef:bc:
                    52:bd:8a:8a:8d:5b:55:44:c3:e1:be:b7:24:be:b8:
                    03:0d:a6:3d:b7:7d:9d:aa:d8:a0:f4:88:1d:a0:d5:
                    81:27:36:27:d0:22:4d:40:e5:86:98:a2:cd:7b:41:
                    80:33:18:99:a6:6f:f5:9a:ab:ad:8f:a0:da:b6:ca:
                    4a:ab:c9:eb:f4:ea:40:74:a1:56:26:fb:55:96:2f:
                    c1:43:13:68:76:6e:b7:af:36:1d:6b:1d:ba:41:49:
                    05:90:04:70:23:4f:e7:a9:4d:19:bc:06:84:5c:32:
                    b5:4e:3f:b8:3a:46:0a:a8:c7:52:d3:64:00:33:3e:
                    3c:fd:02:a8:5c:2f:b9:f7:d5:cc:4d:0e:2a:38:b7:
                    c2:50:ff:a3:34:9a:50:bd:12:58:e3:60:31:13:ce:
                    b7:c7:79:8c:38:ab:b3:f7:31:2a:db:01:66:15:e5:
                    85:48:f8:9f:95:be:94:df:96:b1:d1:05:f3:e9:e5:
                    05:e0:8c:0d:4e:51:2f:7a:24:4b:8f:50:cc:45:72:
                    8e:26:88:36:aa:01:9d:da:60:18:35:e8:53:9c:8a:
                    2d:3a:cf:ae:65:21:89:d3:05:95:1e:be:1e:60:8b:
                    cb:84:bf:2c:5f:31:2e:3c:03:a3:58:7e:80:e7:ae:
                    bf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:ED:62:99:6D:79:9C:97:16:A8:F1:54:12:DC:F1:7B:1F:13:7C:96
            X509v3 Authority Key Identifier:
                keyid:E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/fe1imW15nJcWqPFUEtzxex8TfJY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.164.0/24
                IPv6:
                  2a0f:d340::/29

    Signature Algorithm: sha256WithRSAEncryption
         63:b8:7d:01:7b:06:dd:07:e6:37:46:2a:5c:a8:ea:22:1f:25:
         7f:b6:f5:38:a6:36:6c:6e:df:bb:6e:05:ac:fe:6f:36:35:e5:
         5b:2b:b1:69:d0:35:57:9e:00:45:71:94:4f:73:51:e6:18:fc:
         28:27:ed:01:d1:35:15:5b:c4:fe:fd:48:ec:6f:26:bf:9f:17:
         10:b7:8c:96:a4:d2:4e:27:ad:10:90:54:75:77:52:74:15:e2:
         ff:b0:2e:2f:7b:dc:43:16:e2:89:bd:12:57:d9:f2:2a:35:b6:
         d5:c3:e3:24:dd:57:3a:27:d4:24:98:e8:f8:ce:2a:0b:fa:5e:
         bf:c3:be:e2:66:53:d1:67:59:7d:6c:79:50:33:55:93:fb:66:
         f0:68:48:f8:7a:58:41:ba:ac:5c:3d:e8:fe:ad:21:f6:6d:df:
         9b:9a:19:69:bf:a7:fd:f7:c7:b9:9c:eb:e9:3a:96:a7:12:cf:
         f9:d5:36:7b:32:e5:41:97:f6:0c:38:43:03:65:bf:82:bb:73:
         a2:3a:bf:10:e1:15:f6:17:d2:50:04:69:50:7d:86:05:c6:b4:
         b0:ba:4f:ff:70:35:c2:57:3e:df:6c:21:ff:29:b2:d2:d1:d5:
         ee:96:2f:5a:1d:89:3a:dc:e6:2d:a6:b4:0b:87:ae:18:9a:45:
         f0:dc:5a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:06:23 2026 by rpki-client