This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/faLPN_S_WjaTJHL5obkgUoA9YU0.roa
File:                     faLPN_S_WjaTJHL5obkgUoA9YU0.roa (raw, json)
Hash identifier:          9SARb7qgti8Rdi1ymT3uP+n1nUwS+BiJv6V79V4Y0rI=
Subject key identifier:   7D:A2:CF:37:F4:BF:5A:36:93:24:72:F9:A1:B9:20:52:80:3D:61:4D
Certificate issuer:       /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial:       019B79114258BFA18FDBCB8BF01264F7221C
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/faLPN_S_WjaTJHL5obkgUoA9YU0.roa
Signing time:             Thu 01 Jan 2026 10:18:52 +0000
ROA not before:           Thu 01 Jan 2026 10:18:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        2a12:5343:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:42:58:bf:a1:8f:db:cb:8b:f0:12:64:f7:22:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
        Validity
            Not Before: Jan  1 10:18:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7da2cf37f4bf5a36932472f9a1b92052803d614d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c5:ef:9e:7b:ce:3a:13:56:a0:cd:e4:49:8c:
                    9b:cd:8c:86:d6:76:c8:f9:ef:28:b4:2e:8f:3d:f0:
                    05:11:db:e2:43:ce:74:d5:37:5a:c1:31:30:4b:ee:
                    35:69:e5:99:c9:c2:a3:a6:84:7c:69:89:cd:1e:4a:
                    50:d2:5d:99:63:4f:f6:c1:0b:7a:35:37:98:34:a3:
                    06:c5:8e:91:38:76:48:9d:46:b9:ac:8e:41:ec:13:
                    82:b6:af:05:de:76:1a:25:b5:c5:95:2e:05:15:04:
                    08:27:da:17:f2:95:e4:0d:e4:2c:3f:15:cb:2a:f6:
                    18:9c:f7:be:16:91:d2:25:d3:70:9a:fc:8a:76:04:
                    69:cf:93:59:de:be:b8:49:74:df:57:b2:61:24:88:
                    cf:e2:60:ae:f0:86:f5:bb:2b:2a:ab:79:0a:9a:d4:
                    df:5a:d2:94:b5:38:a4:60:04:7b:a7:27:4c:af:a3:
                    ae:4e:58:7c:14:ec:40:b9:c5:ee:11:ce:10:16:72:
                    bf:79:10:d6:aa:c7:55:9a:90:aa:0d:af:67:c7:ea:
                    08:b6:7a:45:46:3f:d0:8c:d6:88:ca:b6:42:3b:48:
                    5e:d0:df:2c:dd:bd:34:d9:de:43:97:86:a6:cd:70:
                    2a:18:f5:2f:55:90:f2:f3:61:e4:dc:2a:eb:4e:1a:
                    3d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A2:CF:37:F4:BF:5A:36:93:24:72:F9:A1:B9:20:52:80:3D:61:4D
            X509v3 Authority Key Identifier:
                keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/faLPN_S_WjaTJHL5obkgUoA9YU0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:5343:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:5a:f5:a3:43:fd:1c:a9:4c:fc:f5:1b:83:1b:00:ce:f0:8d:
         12:1b:1e:33:54:62:9e:5a:f5:bd:f9:fe:7f:99:b6:51:7c:1d:
         20:f4:6c:c6:9e:04:9f:d0:ed:e8:6c:dc:1b:c8:65:6a:f3:e3:
         00:13:44:5b:df:4e:77:9c:66:50:ff:e6:0b:81:e1:17:86:59:
         0f:16:64:31:37:52:2b:14:1c:97:d4:1f:3f:d2:ba:bd:f9:ce:
         d7:14:2d:55:6c:00:ec:9b:cb:09:11:6a:79:68:73:08:b0:f4:
         16:24:c6:0d:4e:ab:5f:f7:7c:4b:2f:0b:f7:33:1e:76:3f:f9:
         dc:3a:e6:22:64:7c:fe:c4:3d:d4:b7:ca:14:48:98:0c:67:56:
         2a:fc:d3:29:61:ce:b3:27:7e:e3:30:97:9b:ac:f0:4e:30:0d:
         3c:f3:69:39:db:5f:03:d2:11:27:18:2e:36:0d:19:a6:96:f2:
         13:f4:e3:39:89:74:ab:43:3b:41:b7:b1:67:e4:9b:6e:a8:77:
         bb:de:b0:05:0d:e8:05:bb:cf:db:1c:ee:b1:24:66:d2:77:fc:
         4f:47:7f:00:5c:13:af:97:86:08:e6:95:89:27:39:1a:9c:1b:
         06:12:6e:ab:67:42:fc:19:c3:ea:a3:ed:cc:22:34:1e:8f:df:
         c4:8f:6b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:27:15 2026 by rpki-client