This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/FZgm-m-tM7etG2QpRA9NtYKJMp0.roa
File:                     FZgm-m-tM7etG2QpRA9NtYKJMp0.roa (raw, json)
Hash identifier:          UQwsai2QfSWLMJ1/MEG9VD0VHu/w7xSrHdqEgRycwjY=
Subject key identifier:   15:98:26:FA:6F:AD:33:B7:AD:1B:64:29:44:0F:4D:B5:82:89:32:9D
Certificate issuer:       /CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Certificate serial:       019B77C74D3F688D8C94C1FF61C25FCCC2AC
Authority key identifier: 44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/FZgm-m-tM7etG2QpRA9NtYKJMp0.roa
Signing time:             Thu 01 Jan 2026 04:18:28 +0000
ROA not before:           Thu 01 Jan 2026 04:18:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25367
IP address blocks:        212.63.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:4d:3f:68:8d:8c:94:c1:ff:61:c2:5f:cc:c2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44348141fc46dc0187087cbc86556e9a449ee1e7
        Validity
            Not Before: Jan  1 04:18:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=159826fa6fad33b7ad1b6429440f4db58289329d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:34:6b:98:7d:1d:4f:7a:35:83:74:58:b2:d3:
                    1f:d7:54:5e:2b:aa:f9:7f:9e:f6:4f:b0:b5:2d:91:
                    a3:f3:5d:e4:c9:b8:80:cb:9b:59:79:3d:c0:a8:f4:
                    e0:0b:9f:6a:76:81:2a:b6:09:1c:3f:cb:50:a4:d6:
                    0e:6b:7a:2a:46:c1:06:37:5b:30:16:6f:5c:1a:77:
                    75:1c:1a:96:0b:2d:55:4c:24:1c:c4:29:99:58:ea:
                    c3:2a:2f:d8:23:16:43:b4:4e:d1:a2:fe:a8:56:d9:
                    f6:b5:4c:a7:c6:41:ed:dc:32:76:2d:6b:56:9a:8b:
                    cb:fe:e6:33:17:3d:89:c0:92:f9:aa:47:01:74:eb:
                    53:86:64:0e:fc:4d:bb:a9:33:83:e0:da:a2:61:0b:
                    f4:db:a2:93:81:42:a7:5c:48:4d:67:6c:6d:47:23:
                    c7:bd:51:1a:b1:eb:4c:b9:cd:31:87:26:97:d3:25:
                    c4:df:35:d8:f3:2f:bb:7c:65:d8:22:11:9b:7a:52:
                    ce:9d:e1:7c:1f:39:18:64:6b:fd:14:1b:56:3c:6c:
                    f6:a8:a3:4f:f5:f3:0f:cb:9d:29:58:5e:c7:39:40:
                    57:a4:42:ca:e3:9c:3e:75:1b:ef:a0:a8:57:51:e5:
                    da:a0:a9:f8:58:cc:90:e1:44:4c:09:9b:7c:0b:5b:
                    3b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:98:26:FA:6F:AD:33:B7:AD:1B:64:29:44:0F:4D:B5:82:89:32:9D
            X509v3 Authority Key Identifier:
                keyid:44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/FZgm-m-tM7etG2QpRA9NtYKJMp0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.63.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5e:bf:7b:51:64:e4:17:e3:38:57:ad:4b:e8:70:71:6b:59:b5:
         7a:66:e4:29:a9:ed:9d:38:ad:fd:ec:7a:f9:cc:3e:72:32:b2:
         59:e9:a8:90:a9:cf:e7:6d:07:f0:ad:c0:3c:1a:c2:28:7f:2b:
         e0:3d:df:e7:1c:de:37:2b:e5:b3:9a:22:06:8e:3e:97:e0:d4:
         d5:55:72:d3:72:bf:9f:94:8e:64:53:2c:1f:d3:a7:68:df:67:
         9c:2b:88:8c:00:ec:88:b7:69:03:e8:d1:0d:1a:ae:6c:ed:16:
         e2:60:24:e8:87:c1:06:37:ed:5c:0b:89:d2:49:41:d9:57:04:
         7e:58:bd:49:6b:78:e2:dd:90:e2:ad:11:bc:da:f0:bc:48:7a:
         ca:fd:bc:7e:4e:74:4a:60:64:78:a6:b0:2a:ae:ea:aa:70:64:
         9c:96:0c:b3:f5:84:c1:0c:cd:be:ef:1f:bf:63:cd:5e:f3:0e:
         86:0c:4e:37:52:c3:bc:a7:9d:b7:f1:e0:c2:7e:90:9d:32:fe:
         e4:ac:c5:22:6d:a4:90:13:1c:50:e6:f0:8d:f9:5d:df:42:35:
         f5:2d:2d:9c:f0:3b:55:8c:b0:00:c4:8a:77:a3:47:88:37:d8:
         1c:bd:10:9b:73:54:5a:2a:ba:b2:8d:6f:a3:1b:e9:80:9f:e3:
         1b:33:2a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:54 2026 by rpki-client