This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/fwsKv3gFuqhW1sf3BEMUe7UIGos.roa
File:                     fwsKv3gFuqhW1sf3BEMUe7UIGos.roa (raw, json)
Hash identifier:          1WCeYdLMrYmy3YdzxETcmdYKttU2fzCPworPqJW1olQ=
Subject key identifier:   7F:0B:0A:BF:78:05:BA:A8:56:D6:C7:F7:04:43:14:7B:B5:08:1A:8B
Certificate issuer:       /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial:       019B7CEE4B817289B710F7DEFB9C920B2ECC
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/fwsKv3gFuqhW1sf3BEMUe7UIGos.roa
Signing time:             Fri 02 Jan 2026 04:19:10 +0000
ROA not before:           Fri 02 Jan 2026 04:19:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206469
IP address blocks:        62.106.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:4b:81:72:89:b7:10:f7:de:fb:9c:92:0b:2e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
        Validity
            Not Before: Jan  2 04:19:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7f0b0abf7805baa856d6c7f70443147bb5081a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e3:ac:7c:dc:33:96:36:31:44:94:84:7f:30:
                    99:a6:ce:81:0f:68:de:e5:39:e0:4f:de:5c:f3:cf:
                    92:d0:d4:13:8d:b7:66:3f:f6:c4:be:72:e2:4a:b6:
                    21:6d:25:b8:15:20:0f:ff:92:30:5a:20:a4:11:b6:
                    be:37:04:4f:42:60:6f:2d:3d:b6:a3:42:5a:33:0c:
                    ca:4b:14:27:0f:69:99:2f:41:ba:68:9e:20:04:42:
                    30:3f:55:ca:12:78:1f:80:0b:cb:11:c1:5f:99:bd:
                    a1:be:e0:a4:ad:bf:ed:e9:06:ed:8f:bb:ca:dd:b9:
                    a9:b2:f5:42:7a:16:84:80:66:aa:9b:e6:40:93:28:
                    53:9e:e7:06:b8:17:b1:33:c3:79:e2:b2:23:63:fb:
                    8b:c2:95:24:90:81:f6:4b:ce:7b:bd:28:54:b6:51:
                    a4:32:24:72:d2:18:5c:f9:5a:de:f1:73:3e:4c:d1:
                    b4:0a:39:0c:39:65:96:b0:21:f4:ec:f9:fe:78:ce:
                    b2:a5:c9:01:1a:60:b6:d4:8c:08:56:3d:e1:74:5e:
                    2b:61:4a:d4:6d:14:1c:02:d0:c1:1f:63:3c:c6:82:
                    2e:26:7f:c8:03:57:f5:e0:2e:c2:ea:d6:69:15:87:
                    f4:fc:81:1b:62:b4:2e:ee:e5:66:0b:ed:82:36:11:
                    55:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0B:0A:BF:78:05:BA:A8:56:D6:C7:F7:04:43:14:7B:B5:08:1A:8B
            X509v3 Authority Key Identifier:
                keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/fwsKv3gFuqhW1sf3BEMUe7UIGos.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:51:ff:e3:c1:46:b9:c2:9b:9c:a4:ac:c4:ec:42:a6:c4:5a:
         7e:e2:04:81:ea:e2:5e:1a:15:bf:8a:10:9b:d4:3e:e5:91:86:
         c7:5e:39:4c:de:da:79:09:45:6e:a5:e0:0f:fe:1d:e8:f4:2f:
         29:97:1b:8e:a6:a5:64:39:8d:11:a5:dd:4a:81:5b:2f:82:7e:
         06:a3:d5:50:bc:05:3b:4d:f6:30:fc:bc:7c:e7:6a:c2:fb:1e:
         94:7a:77:9d:13:25:68:e9:36:2e:1d:6c:31:a0:04:86:03:9a:
         44:31:f6:3c:97:cc:60:55:16:4e:ed:ed:af:11:50:b2:f6:34:
         ca:fb:84:c6:9d:98:ef:70:cd:84:89:79:36:97:68:80:5f:22:
         9d:ba:d9:61:c9:f6:5b:d0:bb:ea:9c:4e:ea:26:f4:9a:c8:ae:
         76:90:50:9c:d3:e2:93:f6:8c:07:0f:93:23:10:9a:fd:ce:bb:
         cf:e0:79:1c:8b:db:33:23:32:58:2e:fc:3b:81:1d:af:c3:a6:
         01:ac:f7:54:2b:0a:fa:08:5f:31:09:85:89:78:a0:45:25:8c:
         9a:65:f1:4f:f6:51:6c:5e:87:c9:70:33:69:01:73:62:be:53:
         2c:23:ba:4b:99:fc:fe:61:78:83:01:83:63:f9:73:86:0f:39:
         95:82:01:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:56:22 2026 by rpki-client