This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/flunmChPA1_4f0ZHyDwfRD023jo.roa
File:                     flunmChPA1_4f0ZHyDwfRD023jo.roa (raw, json)
Hash identifier:          vjJW3t3rKpLEkPiiyHm3o19yadjbiQ3Iyds/k9utbMk=
Subject key identifier:   7E:5B:A7:98:28:4F:03:5F:F8:7F:46:47:C8:3C:1F:44:3D:36:DE:3A
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       019B76EAD522B74E96703591DB040BB02EA6
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/flunmChPA1_4f0ZHyDwfRD023jo.roa
Signing time:             Thu 01 Jan 2026 00:17:40 +0000
ROA not before:           Thu 01 Jan 2026 00:17:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211484
IP address blocks:        5.180.48.0/24 maxlen: 24
                          45.8.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 00:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:d5:22:b7:4e:96:70:35:91:db:04:0b:b0:2e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Jan  1 00:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7e5ba798284f035ff87f4647c83c1f443d36de3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:3b:c4:ad:1d:5f:36:47:5a:c7:0b:5e:41:
                    5f:b7:bd:6e:24:4e:28:3b:0d:ae:07:78:18:26:e1:
                    d7:10:1c:43:fd:f3:b1:d6:b1:fe:30:3a:3a:1a:b8:
                    47:83:0d:d0:aa:bf:73:a1:ef:78:9c:e7:b1:68:b9:
                    a7:ce:ca:f0:4e:b3:83:ee:d0:0f:6c:c1:96:6a:a8:
                    05:99:fa:fb:33:2c:e6:fe:60:68:db:7b:fc:73:21:
                    cf:62:05:dc:ed:3a:87:ad:d4:61:df:62:0e:48:7c:
                    9a:cc:2a:d1:1a:c3:3a:2b:74:73:ca:ac:2a:6d:e1:
                    ad:4f:d0:33:0d:1d:eb:91:8b:c0:71:9b:13:e9:5c:
                    92:ab:56:6c:ac:2d:28:6b:77:c9:f9:a1:6b:6e:6a:
                    d3:58:d9:ac:6c:44:e4:ab:e3:d2:79:8b:ab:e2:73:
                    e5:db:fe:a3:f3:cf:b0:b9:cb:bf:c4:41:b8:9d:f8:
                    7a:72:a8:67:0f:91:c6:af:47:dc:69:ab:e3:19:78:
                    47:b5:43:c0:c9:3b:7f:34:c8:26:5f:92:26:13:6e:
                    dc:2a:c0:98:16:ce:fe:a6:d5:fa:ad:e4:b2:7b:4f:
                    11:a3:89:49:db:9a:80:af:d3:f1:31:fe:ed:72:13:
                    aa:96:30:5f:e8:9e:4a:f3:1d:85:a2:f9:d5:21:16:
                    48:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5B:A7:98:28:4F:03:5F:F8:7F:46:47:C8:3C:1F:44:3D:36:DE:3A
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/flunmChPA1_4f0ZHyDwfRD023jo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.48.0/24
                  45.8.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:c5:8e:04:bc:5a:79:e8:32:03:bc:fa:74:15:9f:25:1b:dd:
         ac:47:c9:1c:2c:7a:6c:ab:48:da:3f:00:19:ff:69:f1:44:6e:
         a8:0b:1c:a8:01:86:6b:3d:c1:c4:44:4d:4a:dd:8c:0d:44:58:
         ea:5a:60:ff:8a:e4:26:01:df:0c:88:ed:42:52:4b:f6:7f:d8:
         4f:d5:5a:12:f8:f9:96:3e:5f:6d:8f:44:b7:7d:1c:ce:96:c7:
         15:d8:15:25:48:05:9d:8c:dd:33:a9:20:a1:b0:79:cd:fa:ce:
         e8:76:5b:7f:2f:bc:05:45:d3:bb:6c:0a:ca:e6:0c:50:ad:e1:
         3a:f5:08:c7:86:e6:ef:40:ad:2e:c8:cb:97:d1:b7:58:98:14:
         8d:5a:5c:6e:75:07:18:9c:4e:d9:7b:a5:57:27:8f:b5:43:9b:
         c7:7a:2e:fd:f4:94:9a:68:28:2f:04:60:01:89:67:bc:d6:fc:
         1f:69:66:5b:b3:39:ad:77:21:1f:f0:2f:95:b8:cd:67:13:fa:
         3d:ad:5d:05:53:3c:15:b2:bc:4c:78:1e:8a:e6:20:20:e1:96:
         5c:f6:78:86:e3:d1:f8:9a:38:db:57:70:ef:da:4c:18:9c:9c:
         92:5d:f3:9a:f2:e7:f2:4f:d0:f9:05:65:d1:60:72:2c:bc:45:
         09:48:bd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 07:29:51 2026 by rpki-client