This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SvfFLYFbdkVAe54Ev-X2R7qt9lE.roa
File:                     SvfFLYFbdkVAe54Ev-X2R7qt9lE.roa (raw, json)
Hash identifier:          xpSVlT3wR32cQLvIsOrCb9cQiCB1CYLLjAYhuDSOyVk=
Subject key identifier:   4A:F7:C5:2D:81:5B:76:45:40:7B:9E:04:BF:E5:F6:47:BA:AD:F6:51
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019C1E9124D47116D98FBC8398796F6051E0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SvfFLYFbdkVAe54Ev-X2R7qt9lE.roa
Signing time:             Mon 02 Feb 2026 13:35:54 +0000
ROA not before:           Mon 02 Feb 2026 13:35:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14061
IP address blocks:        2a13:18c6:c9a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 15:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1e:91:24:d4:71:16:d9:8f:bc:83:98:79:6f:60:51:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Feb  2 13:35:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4af7c52d815b7645407b9e04bfe5f647baadf651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fe:8f:3f:cc:c8:a6:53:88:c9:8c:57:e3:6f:
                    eb:fe:d3:fe:00:65:26:7f:55:7b:4d:0d:bd:4a:c6:
                    1e:f2:bc:7c:2c:4d:f9:73:07:fe:c2:0d:ec:ae:31:
                    66:73:80:92:32:3f:f5:73:f1:87:aa:1d:39:9c:51:
                    c7:34:59:60:7e:36:b2:a3:3b:b0:27:fd:47:fa:b5:
                    2b:74:18:d7:54:c8:52:4e:f3:da:1a:4b:8b:d8:49:
                    7a:f5:33:cb:ff:ea:c3:0f:96:aa:2c:00:b3:74:b7:
                    25:91:37:0d:4e:a3:b3:43:3e:af:35:98:27:88:fa:
                    73:91:56:dd:08:a6:71:dc:0a:e6:fd:f0:3d:25:b0:
                    00:53:f1:33:74:d5:c2:32:8d:2a:34:df:1a:de:8c:
                    2a:95:89:dc:be:01:bb:62:2e:a8:b6:48:e0:8d:3c:
                    23:7f:c8:a7:48:19:e7:e4:01:47:0c:9e:2d:02:24:
                    60:f3:19:f9:ae:f5:16:98:1b:94:1b:2e:4c:11:31:
                    bf:29:1a:19:3c:20:6b:36:e3:fc:24:d3:33:42:d6:
                    c1:52:7c:90:3f:10:86:bc:0a:ca:eb:69:ad:2a:f8:
                    c0:dd:df:4a:47:06:cc:95:cf:2e:6e:0a:4b:f4:1a:
                    97:61:db:80:0e:83:76:23:2b:d6:05:8a:26:d9:9c:
                    7a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F7:C5:2D:81:5B:76:45:40:7B:9E:04:BF:E5:F6:47:BA:AD:F6:51
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SvfFLYFbdkVAe54Ev-X2R7qt9lE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:18c6:c9a1::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:97:0c:63:ae:9b:74:9a:c2:57:a1:0c:c7:b4:b7:d2:db:84:
         e1:b4:69:0f:4d:19:6d:5b:4e:b4:6d:ed:7b:75:34:73:b2:8e:
         48:0a:03:0a:4d:5c:31:dc:bc:a3:d3:e8:f1:84:ee:65:83:55:
         a4:1a:ff:c3:ce:98:73:20:24:ac:da:5d:67:6f:2b:a7:62:6e:
         93:3a:a0:7d:a9:b8:5c:18:0c:20:31:51:9c:fb:d1:7e:2e:78:
         ee:19:c4:9e:d9:3b:f0:0d:c2:aa:a6:48:c3:26:e6:70:b9:3f:
         ec:0e:27:65:58:d7:25:55:86:45:86:36:10:50:fc:ae:4b:35:
         52:00:96:d2:2b:ab:12:e3:a8:18:be:de:3a:ce:f8:d6:01:8e:
         15:01:e5:25:55:db:1a:5c:41:d0:98:5e:10:13:bd:17:ed:51:
         1a:7b:91:64:83:7d:aa:bb:c9:dd:52:f7:22:96:f8:f3:a8:3f:
         bb:99:06:0d:be:9b:89:ff:ad:4b:17:3b:50:8c:f2:7b:f1:b0:
         c1:09:2b:4f:0c:64:c9:71:a0:fd:34:f9:58:20:60:ba:af:c4:
         4d:a5:a4:28:35:c4:cd:fb:db:78:85:44:57:82:51:4d:d6:c9:
         27:d0:01:57:3e:c5:bb:3c:dc:b4:d3:25:d0:72:47:08:c0:16:
         90:34:f0:50
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZwekSTUcRbZj7yDmHlvYFHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwMjAyMTMzNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWY3YzUyZDgxNWI3NjQ1NDA3YjllMDRiZmU1ZjY0N2JhYWRmNjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv6PP8zIplOIyYxX42/r/tP+AGUm
f1V7TQ29SsYe8rx8LE35cwf+wg3srjFmc4CSMj/1c/GHqh05nFHHNFlgfjayozuw
J/1H+rUrdBjXVMhSTvPaGkuL2El69TPL/+rDD5aqLACzdLclkTcNTqOzQz6vNZgn
iPpzkVbdCKZx3Arm/fA9JbAAU/EzdNXCMo0qNN8a3owqlYncvgG7Yi6otkjgjTwj
f8inSBnn5AFHDJ4tAiRg8xn5rvUWmBuUGy5METG/KRoZPCBrNuP8JNMzQtbBUnyQ
PxCGvArK62mtKvjA3d9KRwbMlc8ubgpL9BqXYduADoN2IyvWBYom2Zx6/QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEr3xS2BW3ZFQHueBL/l9ke6rfZRMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvU3ZmRkxZRmJka1ZBZTU0RXYtWDJSN3F0OWxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhMYxsmh
MA0GCSqGSIb3DQEBCwUAA4IBAQC0lwxjrpt0msJXoQzHtLfS24ThtGkPTRltW060
be17dTRzso5ICgMKTVwx3Lyj0+jxhO5lg1WkGv/DzphzICSs2l1nbyunYm6TOqB9
qbhcGAwgMVGc+9F+LnjuGcSe2TvwDcKqpkjDJuZwuT/sDidlWNclVYZFhjYQUPyu
SzVSAJbSK6sS46gYvt46zvjWAY4VAeUlVdsaXEHQmF4QE70X7VEae5Fkg32qu8nd
UvcilvjzqD+7mQYNvpuJ/61LFztQjPJ78bDBCStPDGTJcaD9NPlYIGC6r8RNpaQo
NcTN+9t4hURXglFN1skn0AFXPsW7PNy00yXQckcIwBaQNPBQ
-----END CERTIFICATE-----
Generated at Mon Feb 2 21:09:18 2026 by rpki-client