This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/_mlWLWGEeY126ouf9N2RBXWxQWs.roa
File:                     _mlWLWGEeY126ouf9N2RBXWxQWs.roa (raw, json)
Hash identifier:          hRcT7FQAvX81ZtVwVTQnfnVplPzsGoXPbu1Og6gLElU=
Subject key identifier:   FE:69:56:2D:61:84:79:8D:76:EA:8B:9F:F4:DD:91:05:75:B1:41:6B
Certificate issuer:       /CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
Certificate serial:       019B7B3630389D345B7247A8CECF3A549137
Authority key identifier: FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/_mlWLWGEeY126ouf9N2RBXWxQWs.roa
Signing time:             Thu 01 Jan 2026 20:18:27 +0000
ROA not before:           Thu 01 Jan 2026 20:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208391
IP address blocks:        2001:678:aec::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:30:38:9d:34:5b:72:47:a8:ce:cf:3a:54:91:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
        Validity
            Not Before: Jan  1 20:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fe69562d6184798d76ea8b9ff4dd910575b1416b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:88:28:a2:49:a8:82:28:1d:cd:d4:a9:26:
                    9c:41:a7:0c:e7:d6:8d:57:a2:df:15:3e:ac:7a:01:
                    10:8c:0a:52:7e:f5:cd:41:fc:f9:d8:ee:29:da:26:
                    95:80:55:54:45:94:0c:48:6d:5d:16:45:d5:84:05:
                    94:a0:37:55:ff:52:f8:09:f8:02:19:ba:50:41:f0:
                    5c:a9:06:91:46:38:de:c6:a9:52:b8:7f:19:0e:26:
                    56:48:f9:a1:89:a0:85:b5:a6:d7:4e:3b:99:b8:b1:
                    b8:d5:05:31:a2:ef:e9:f7:94:4f:c0:d3:00:c5:26:
                    34:9f:67:56:32:ad:21:87:7c:88:c8:e1:ab:e0:7b:
                    88:e5:ad:8c:46:e8:fd:65:4e:1a:2b:05:bd:45:78:
                    3d:04:08:7b:33:28:5f:d7:6e:47:66:7f:63:63:bf:
                    62:ae:b5:d5:7c:a2:31:55:0a:64:1d:76:ec:05:e6:
                    85:2d:3d:99:58:86:36:ae:cc:5d:7c:3e:9b:80:43:
                    b3:67:d0:6b:38:93:23:4e:97:1f:dc:7e:f3:62:b2:
                    8a:66:03:fa:12:a4:85:05:69:23:a1:cc:2a:c2:2a:
                    5e:50:64:46:9e:7e:60:27:f3:83:83:74:58:14:e5:
                    5c:81:64:94:36:21:22:25:54:31:4b:96:bf:75:20:
                    92:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:69:56:2D:61:84:79:8D:76:EA:8B:9F:F4:DD:91:05:75:B1:41:6B
            X509v3 Authority Key Identifier:
                keyid:FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/_mlWLWGEeY126ouf9N2RBXWxQWs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:aec::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:a4:5d:8d:fd:65:91:97:26:75:17:db:b0:4a:55:03:16:a3:
         8b:b2:b5:9b:ec:80:d7:6b:6f:fa:7b:c8:62:74:e6:5e:51:3c:
         f8:d1:cc:7f:af:fe:70:bb:a3:01:81:d1:bb:68:8d:0a:60:4f:
         6e:8d:53:b9:a7:39:0e:63:eb:41:7f:5d:07:7f:31:6b:d1:d8:
         99:73:61:89:ca:05:49:9f:f0:1d:c2:a0:f9:08:92:49:2a:40:
         92:64:85:bd:46:05:d9:c8:64:23:e7:f3:c6:ab:13:57:76:b4:
         61:43:04:41:04:01:ce:3e:6b:7a:ea:2c:7f:1f:9c:5e:b0:f6:
         f5:90:13:92:39:03:92:c7:cc:a6:55:9a:fe:da:87:5f:21:8f:
         53:23:37:c8:c3:4c:e7:76:a8:80:ed:4e:73:80:00:26:4f:4e:
         31:df:3b:88:90:e3:39:78:57:ab:f3:da:80:8b:41:72:ab:e2:
         c6:06:9c:6e:64:03:c2:78:60:71:68:6f:0f:64:96:2d:f0:99:
         f4:99:57:f8:94:4d:5e:d8:fc:ca:75:13:f3:8b:26:13:54:56:
         30:3b:4c:a0:24:73:d7:ed:73:82:f7:f0:a2:46:67:3b:34:f5:
         1b:0f:87:61:ed:85:50:a8:42:e2:e8:5b:a9:f4:d6:f9:59:ea:
         bc:bd:dd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:09:13 2026 by rpki-client