This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/FYi2op6EKF00E1GgCH9P1pwsWKA.roa
File:                     FYi2op6EKF00E1GgCH9P1pwsWKA.roa (raw, json)
Hash identifier:          SVnGJLKooRqonEdOpAassNIuL9GssfXn7HsbxdU+WUA=
Subject key identifier:   15:88:B6:A2:9E:84:28:5D:34:13:51:A0:08:7F:4F:D6:9C:2C:58:A0
Certificate issuer:       /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial:       019C4144CAD14BDA0CD2081D16E39F38B2BE
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/FYi2op6EKF00E1GgCH9P1pwsWKA.roa
Signing time:             Mon 09 Feb 2026 07:19:13 +0000
ROA not before:           Mon 09 Feb 2026 07:19:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28917
IP address blocks:        62.140.224.0/19 maxlen: 19
                          62.140.250.0/24 maxlen: 24
                          80.77.164.0/22 maxlen: 24
                          80.77.167.0/24 maxlen: 24
                          80.77.169.0/24 maxlen: 24
                          93.191.8.0/21 maxlen: 21
                          93.191.11.0/24 maxlen: 24
                          93.191.12.0/23 maxlen: 23
                          185.221.44.0/22 maxlen: 22
                          2a02:2518::/29 maxlen: 29
                          2a02:2518::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:44:ca:d1:4b:da:0c:d2:08:1d:16:e3:9f:38:b2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
        Validity
            Not Before: Feb  9 07:19:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1588b6a29e84285d341351a0087f4fd69c2c58a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:84:df:26:28:dc:4e:18:69:d9:76:12:35:a9:
                    c6:79:6c:5b:b6:8c:e3:7e:b9:2d:8b:45:f3:c2:94:
                    e4:c8:fb:92:0f:e7:96:6a:6a:0c:1c:a3:bc:dc:5c:
                    42:ac:62:fd:46:9a:27:44:8c:42:48:ac:ea:c8:71:
                    b7:d8:ea:de:7a:8c:99:c9:ef:d1:cf:82:7b:8a:17:
                    0f:f4:4c:7c:81:03:60:9b:01:6a:d6:53:b1:ff:58:
                    db:02:fd:b9:87:18:29:86:9f:b4:07:0d:f5:83:55:
                    95:ff:90:96:ac:94:be:68:b7:71:33:e1:0a:e4:ab:
                    b3:57:5e:cc:26:76:a0:e1:2e:da:51:bc:99:87:0f:
                    a6:3a:83:d5:3d:31:ff:0c:80:71:93:a0:42:1b:75:
                    ed:cb:cd:f7:5c:e0:c1:72:4f:17:a7:b1:33:42:ad:
                    dc:ba:7f:6a:9f:e6:63:d1:92:50:60:97:fc:27:7f:
                    df:ad:3b:e0:27:98:3e:97:d2:00:88:ad:8f:34:7b:
                    f2:0c:65:db:d3:12:12:91:22:a1:2a:7f:fe:de:6a:
                    08:5c:2d:fd:2f:13:4e:a8:e1:52:c6:1a:ab:83:e5:
                    be:0a:9c:dc:45:c8:f2:31:db:ba:65:31:0d:a8:94:
                    13:b9:91:de:cd:5d:58:41:53:9b:e2:f2:05:da:3c:
                    05:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:88:B6:A2:9E:84:28:5D:34:13:51:A0:08:7F:4F:D6:9C:2C:58:A0
            X509v3 Authority Key Identifier:
                keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/FYi2op6EKF00E1GgCH9P1pwsWKA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.140.224.0/19
                  80.77.164.0/22
                  80.77.169.0/24
                  93.191.8.0/21
                  185.221.44.0/22
                IPv6:
                  2a02:2518::/29

    Signature Algorithm: sha256WithRSAEncryption
         a8:b2:06:37:a8:d6:46:04:5f:31:40:50:7d:63:d8:ae:0b:3e:
         97:86:de:34:f5:9b:2f:2b:75:e8:62:2b:a4:d4:f9:2f:eb:da:
         85:ab:35:c7:0e:0a:73:d5:17:db:bc:f8:6c:24:19:18:ff:1f:
         d7:9d:bf:9c:cb:a4:35:d1:79:95:e9:1e:46:a4:39:98:43:1c:
         85:71:64:a3:b5:94:08:3e:91:fa:e3:1d:18:4b:5c:b6:3e:dd:
         78:85:7d:74:2d:41:87:d4:99:39:c0:64:80:ff:4c:b4:9e:cb:
         c7:c0:41:86:bd:da:26:c3:b3:ef:2d:d2:a9:86:e7:ce:a2:89:
         0d:43:e8:60:c5:ab:13:01:99:36:a3:ff:25:68:25:03:08:56:
         34:26:c1:46:a8:ff:a6:99:85:ac:65:b0:40:fe:e0:c9:f5:77:
         66:25:e6:52:7d:5b:38:b8:c1:2e:27:d8:63:69:20:ae:d5:e1:
         cd:ab:5a:27:49:e3:c9:f8:8d:3f:4d:c1:33:49:a0:a9:4a:86:
         02:de:12:03:c4:77:e2:28:11:d5:a6:0e:dd:c1:8a:3b:99:b4:
         2a:c6:78:da:db:b3:57:de:b3:ea:a1:4c:2a:7d:d0:fe:d0:f2:
         39:87:68:48:5c:c2:70:a0:71:a9:f1:da:82:04:2c:00:82:48:
         e4:b5:39:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:27 2026 by rpki-client