This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/FLcD5GM3w38Bkf6-ofdUUggipDY.roa
File:                     FLcD5GM3w38Bkf6-ofdUUggipDY.roa (raw, json)
Hash identifier:          j629CGaUVrsk4spu3DmpUrCgmxrvYlncEchc9Bf2lnA=
Subject key identifier:   14:B7:03:E4:63:37:C3:7F:01:91:FE:BE:A1:F7:54:52:08:22:A4:36
Certificate issuer:       /CN=a73879de2594cfdd4c9e4225556281b208d94614
Certificate serial:       019B77587B49175C012A43B1B54A4ACAD265
Authority key identifier: A7:38:79:DE:25:94:CF:DD:4C:9E:42:25:55:62:81:B2:08:D9:46:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pzh53iWUz91MnkIlVWKBsgjZRhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/FLcD5GM3w38Bkf6-ofdUUggipDY.roa
Signing time:             Thu 01 Jan 2026 02:17:26 +0000
ROA not before:           Thu 01 Jan 2026 02:17:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212979
IP address blocks:        195.69.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pzh53iWUz91MnkIlVWKBsgjZRhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:7b:49:17:5c:01:2a:43:b1:b5:4a:4a:ca:d2:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73879de2594cfdd4c9e4225556281b208d94614
        Validity
            Not Before: Jan  1 02:17:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=14b703e46337c37f0191febea1f754520822a436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:b3:51:33:cf:18:64:fb:b2:3d:90:59:3e:
                    c5:65:48:cc:c4:e8:06:c9:04:1f:1c:ec:48:26:eb:
                    ae:47:0c:c2:cf:46:6d:2f:47:d8:82:83:b7:45:1a:
                    3c:06:4e:2f:ea:69:83:36:88:3b:de:c9:d6:d8:67:
                    b0:5d:da:af:d1:2b:48:68:6e:f0:12:11:60:25:20:
                    d8:68:d3:81:12:b5:11:54:91:f7:96:51:3b:1e:bd:
                    1d:6a:8c:d3:94:e6:dd:1b:f7:83:2b:4d:9a:f6:6a:
                    e4:12:70:77:36:85:a1:8f:e5:53:d7:69:73:7d:84:
                    25:7a:3d:6c:c9:77:3a:78:d7:40:3f:3b:7d:3d:07:
                    64:58:ae:ef:3e:05:ab:24:e7:b4:28:4e:9d:fd:55:
                    02:5e:3e:13:7e:2a:16:ff:6b:81:2b:f8:98:a0:93:
                    90:40:c3:93:e1:7a:12:4a:f8:a1:88:3d:e4:58:b0:
                    c2:89:5a:e5:57:dc:46:cf:96:56:b9:c0:4f:84:06:
                    8e:d4:a1:5b:42:91:27:01:8d:d3:1d:1c:0e:e2:fa:
                    d7:65:bd:8d:ea:d3:b3:e2:c0:78:cf:8b:97:98:bd:
                    77:b2:f9:41:2d:d3:7d:9c:a8:a5:6a:a6:60:a4:56:
                    48:d6:72:cd:f5:39:dd:2b:a5:aa:75:cb:94:2f:ff:
                    e9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B7:03:E4:63:37:C3:7F:01:91:FE:BE:A1:F7:54:52:08:22:A4:36
            X509v3 Authority Key Identifier:
                keyid:A7:38:79:DE:25:94:CF:DD:4C:9E:42:25:55:62:81:B2:08:D9:46:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzh53iWUz91MnkIlVWKBsgjZRhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/FLcD5GM3w38Bkf6-ofdUUggipDY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.69.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ab:7c:52:82:60:11:06:2e:44:74:97:64:f2:7f:5a:d5:09:
         dc:9b:44:94:e0:ac:f9:8d:68:0a:da:3d:36:cc:6c:f3:26:a7:
         05:06:93:10:33:57:25:84:9e:f7:01:f6:f6:ab:4c:6b:09:05:
         9c:99:03:06:ef:3f:18:10:ce:05:c2:47:06:e7:91:e7:66:6c:
         1b:2d:ad:86:74:c1:af:de:a8:09:80:0e:14:36:07:7b:ec:72:
         85:09:0d:7a:60:e1:e9:63:19:4a:f0:e9:f9:f5:33:de:08:ae:
         32:55:3e:f8:49:73:eb:74:02:8a:0c:05:fd:e8:a4:fb:9d:20:
         6b:f5:13:de:3e:da:3a:a0:66:56:16:ee:62:56:ad:16:03:91:
         0b:c5:c5:b0:86:13:3a:5f:fb:c2:64:f9:0d:e4:32:69:4d:67:
         c5:76:a0:d6:09:74:d5:f4:f5:93:0f:a3:ec:3c:4a:b9:b1:d1:
         74:5d:ab:08:c5:44:85:58:e5:57:d0:85:b1:6c:a4:60:8b:b3:
         c3:e9:bf:19:2d:3c:41:7b:e2:1a:a8:b3:f7:53:00:ae:f7:c3:
         8d:a0:52:3a:b9:68:61:f2:27:55:82:f4:8a:95:99:99:15:4c:
         76:76:8d:f4:88:d6:2a:55:db:34:dc:e0:12:6a:6e:d7:53:04:
         bf:27:af:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WHtJF1wBKkOxtUpKytJlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3Mzg3OWRlMjU5NGNmZGQ0YzllNDIyNTU1NjI4MWIyMDhk
OTQ2MTQwHhcNMjYwMTAxMDIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGI3MDNlNDYzMzdjMzdmMDE5MWZlYmVhMWY3NTQ1MjA4MjJhNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGKzUTPPGGT7sj2QWT7FZUjMxOgG
yQQfHOxIJuuuRwzCz0ZtL0fYgoO3RRo8Bk4v6mmDNog73snW2GewXdqv0StIaG7w
EhFgJSDYaNOBErURVJH3llE7Hr0daozTlObdG/eDK02a9mrkEnB3NoWhj+VT12lz
fYQlej1syXc6eNdAPzt9PQdkWK7vPgWrJOe0KE6d/VUCXj4TfioW/2uBK/iYoJOQ
QMOT4XoSSvihiD3kWLDCiVrlV9xGz5ZWucBPhAaO1KFbQpEnAY3THRwO4vrXZb2N
6tOz4sB4z4uXmL13svlBLdN9nKilaqZgpFZI1nLN9TndK6WqdcuUL//p9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBS3A+RjN8N/AZH+vqH3VFIIIqQ2MB8GA1UdIwQY
MBaAFKc4ed4llM/dTJ5CJVVigbII2UYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHpoNTNpV1V6OTFNbmtJbFZXS0JzZ2paUmhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kYmYxODUtYjA4Ny00YjQ0LThmODEt
OWY3ZDk3YzYzMTUyLzEvRkxjRDVHTTN3MzhCa2Y2LW9mZFVVZ2dpcERZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kYmYxODUtYjA4Ny00YjQ0LThmODEtOWY3ZDk3YzYzMTUy
LzEvcHpoNTNpV1V6OTFNbmtJbFZXS0JzZ2paUmhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0XiMA0G
CSqGSIb3DQEBCwUAA4IBAQBTq3xSgmARBi5EdJdk8n9a1Qncm0SU4Kz5jWgK2j02
zGzzJqcFBpMQM1clhJ73Afb2q0xrCQWcmQMG7z8YEM4FwkcG55HnZmwbLa2GdMGv
3qgJgA4UNgd77HKFCQ16YOHpYxlK8On59TPeCK4yVT74SXPrdAKKDAX96KT7nSBr
9RPePto6oGZWFu5iVq0WA5ELxcWwhhM6X/vCZPkN5DJpTWfFdqDWCXTV9PWTD6Ps
PEq5sdF0XasIxUSFWOVX0IWxbKRgi7PD6b8ZLTxBe+IaqLP3UwCu98ONoFI6uWhh
8idVgvSKlZmZFUx2do30iNYqVds03OASam7XUwS/J68B
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:14:38 2026 by rpki-client