This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/1--1vi_YhmwgSh-LUDJs5yrdk4QU.roa
File:                     1--1vi_YhmwgSh-LUDJs5yrdk4QU.roa (raw, json)
Hash identifier:          dnBqijSF+YPKk6kM0CwG5Q01pI1bTPaR1o5KUYqbpck=
Subject key identifier:   FB:ED:6F:8B:F6:21:9B:08:12:87:E2:D4:0C:9B:39:CA:B7:64:E1:05
Certificate issuer:       /CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6
Certificate serial:       019B79ED4BFC58BA3E31FF67836AD5ADB1D6
Authority key identifier: FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/1--1vi_YhmwgSh-LUDJs5yrdk4QU.roa
Signing time:             Thu 01 Jan 2026 14:19:13 +0000
ROA not before:           Thu 01 Jan 2026 14:19:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31032
IP address blocks:        194.246.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:4b:fc:58:ba:3e:31:ff:67:83:6a:d5:ad:b1:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6
        Validity
            Not Before: Jan  1 14:19:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fbed6f8bf6219b081287e2d40c9b39cab764e105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2a:04:89:f1:87:dc:3b:8c:72:57:3c:51:d0:
                    5b:be:94:32:c2:1c:9d:b0:72:b5:b6:85:e7:ec:32:
                    6b:f2:64:bb:e4:04:b4:9a:0b:c6:6b:ca:92:ab:7e:
                    3e:8a:3e:42:83:6d:b8:7b:dd:96:36:81:45:d7:c6:
                    7e:22:3f:26:0a:8e:69:b2:78:bc:31:d1:d5:74:7d:
                    7c:12:80:1b:91:02:01:19:45:34:dc:a5:92:3c:58:
                    77:3f:84:34:ad:4c:ac:9f:c4:fc:e2:5b:cd:9c:ff:
                    e0:c7:49:1a:3c:ab:ef:9f:dc:bf:8e:39:cf:5e:c6:
                    6b:df:ae:a5:4c:31:f0:80:7b:52:59:d6:00:b0:e7:
                    d1:a5:49:33:4e:1c:e1:d7:4e:3d:51:7a:9c:8a:1a:
                    62:d6:90:fa:41:e7:2c:ee:f6:c9:37:1d:75:9a:d4:
                    01:91:0d:f9:bf:19:c9:e9:df:a3:f9:e2:19:e8:41:
                    33:ce:05:cb:2b:02:c1:d8:d9:e2:4d:80:d5:a2:e4:
                    af:d5:6e:e1:6a:ba:23:d7:fd:46:fb:3d:bf:d1:0d:
                    0b:91:70:c1:2c:ee:de:fd:8e:ca:ec:36:83:a6:31:
                    fd:69:97:82:54:74:07:b1:f4:4e:2d:cc:ec:24:c6:
                    73:01:1b:0f:ca:68:8b:60:ab:42:3c:dc:0a:47:ed:
                    f3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:ED:6F:8B:F6:21:9B:08:12:87:E2:D4:0C:9B:39:CA:B7:64:E1:05
            X509v3 Authority Key Identifier:
                keyid:FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/1--1vi_YhmwgSh-LUDJs5yrdk4QU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.246.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:92:40:73:75:11:cc:c9:54:5e:b2:a2:a8:21:36:0c:a9:19:
         23:44:84:4b:24:a9:58:c5:02:d1:5f:c7:75:33:2e:5d:69:84:
         5e:c0:73:6c:06:51:d7:63:97:7a:1a:c6:d0:44:9e:d2:c0:9e:
         77:65:68:5d:08:d3:5e:99:9d:d1:31:35:da:28:0a:0c:ec:26:
         a4:d4:e8:31:68:1a:42:a0:a5:9a:c5:a9:0a:f1:d7:74:19:a0:
         7b:de:69:d6:f2:4f:97:db:37:e1:d2:b0:48:c4:2d:cc:64:e4:
         e5:a8:4e:b8:1b:2a:aa:a0:30:b2:fb:cf:51:f1:57:e9:11:ca:
         59:ba:a6:50:64:c9:cd:d4:c1:33:77:2e:6e:7f:38:fe:f8:e1:
         74:68:2b:8b:9d:a2:df:9e:20:6f:5f:23:69:86:b8:1d:5d:00:
         f7:9e:52:46:d2:5d:c8:8d:90:b3:fc:46:3c:3a:33:5f:be:a7:
         a9:6a:36:43:61:d1:df:64:d7:ec:8a:b1:28:17:42:5d:0b:fb:
         b6:74:1f:80:d4:3b:0c:94:00:87:3f:3d:d7:47:74:0d:e8:f3:
         41:d6:30:7f:51:e5:72:4a:85:c9:d1:4c:54:8d:94:16:64:52:
         0c:ee:24:52:b0:b6:fb:76:89:c5:6a:e0:06:57:41:6c:ec:7f:
         05:43:0b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:44 2026 by rpki-client