This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/F9K0hFQXxtbhSJLkCfsnizzHs0s.roa
File:                     F9K0hFQXxtbhSJLkCfsnizzHs0s.roa (raw, json)
Hash identifier:          KFw62b/4AeJuATgKU0557hosLMq4NoClO0EkpuHlym8=
Subject key identifier:   17:D2:B4:84:54:17:C6:D6:E1:48:92:E4:09:FB:27:8B:3C:C7:B3:4B
Certificate issuer:       /CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Certificate serial:       019B78351F0C172B4A91E7CB7BFDB64E5A55
Authority key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/F9K0hFQXxtbhSJLkCfsnizzHs0s.roa
Signing time:             Thu 01 Jan 2026 06:18:25 +0000
ROA not before:           Thu 01 Jan 2026 06:18:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24610
IP address blocks:        193.110.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:1f:0c:17:2b:4a:91:e7:cb:7b:fd:b6:4e:5a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
        Validity
            Not Before: Jan  1 06:18:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=17d2b4845417c6d6e14892e409fb278b3cc7b34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f8:57:a7:f5:be:84:dc:af:dc:78:57:8f:2f:
                    34:fe:ed:8c:7e:af:a0:48:88:dc:4b:11:90:94:2f:
                    a0:07:fa:40:47:99:0f:4b:ef:24:a4:1b:30:1e:7e:
                    2f:a4:6b:24:7e:72:af:79:3e:22:7d:dc:e4:1f:34:
                    67:0b:c8:72:7a:95:69:01:aa:e6:27:b3:c8:dc:2e:
                    bb:8a:b0:d7:5b:f3:01:30:07:b3:87:93:2d:cd:bb:
                    b3:b1:5a:60:13:a4:0f:5b:9a:54:26:bd:e3:44:7b:
                    82:f5:17:dc:82:65:f8:e8:f4:e0:1c:eb:da:5b:29:
                    ea:72:84:5a:45:ca:ab:a9:13:d2:4d:fd:af:45:58:
                    4f:4e:01:30:90:61:23:5d:13:bd:fd:32:26:81:90:
                    fe:dc:40:ce:6f:5a:49:cb:a4:df:cb:11:ca:24:5c:
                    25:7d:03:32:d9:be:26:f6:04:af:bf:9b:d3:58:91:
                    1f:5a:02:57:c4:47:ce:c5:c5:8c:8a:dd:61:00:12:
                    23:b3:85:ba:98:bb:c0:8b:63:f7:38:6c:88:68:99:
                    53:12:66:ac:a9:08:96:77:41:7e:1b:a1:7e:8c:1c:
                    fe:15:95:ff:58:76:f1:89:cc:82:97:a6:5c:31:42:
                    53:95:e4:af:4e:e7:71:5c:f2:ed:06:8d:f7:24:db:
                    33:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D2:B4:84:54:17:C6:D6:E1:48:92:E4:09:FB:27:8B:3C:C7:B3:4B
            X509v3 Authority Key Identifier:
                keyid:7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/F9K0hFQXxtbhSJLkCfsnizzHs0s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:89:7d:31:f4:73:48:ea:6e:fe:3f:9e:0b:32:50:58:6b:2e:
         8d:97:d3:3c:11:28:2b:81:f8:db:8e:72:f7:a6:31:1c:f1:7b:
         b8:6a:a4:ca:5d:3f:33:3b:29:e8:96:f6:d8:f2:22:5f:a2:4b:
         72:96:41:03:53:fd:e3:45:19:a4:87:9d:bc:c2:48:c0:15:43:
         f2:d2:59:a3:57:75:29:c9:03:3c:72:d5:24:76:2b:9b:45:6e:
         8b:4a:b5:bb:56:2d:dc:de:cc:e8:06:ce:0e:8c:ae:97:0e:33:
         43:41:dd:c0:12:2e:29:22:90:a9:8a:bf:98:27:81:82:e4:63:
         0d:f7:60:7a:0e:d0:dd:17:36:ae:96:f1:f8:b7:10:0b:87:18:
         0a:02:02:7f:31:c8:e5:5e:e9:37:83:0a:f2:bb:7b:8e:ab:97:
         ad:39:64:2e:e6:44:d2:64:a9:4e:b8:6b:34:f3:5a:66:30:a6:
         dd:eb:0b:fc:a2:3d:4a:96:98:3e:9f:90:fb:b7:96:92:88:df:
         b1:7c:21:c3:6e:26:a6:d9:dd:10:b8:1b:8e:e1:f9:0b:eb:47:
         a9:bd:f1:13:31:3a:83:22:2b:e7:1a:3b:fa:04:ba:74:db:e1:
         e5:7b:bb:57:45:8c:d4:cd:39:cc:25:66:51:38:c0:24:66:f7:
         58:82:61:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:08:56 2026 by rpki-client