This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/A6PR5zhuGTtMw_OQ_F8hxk5Q5nM.roa
File:                     A6PR5zhuGTtMw_OQ_F8hxk5Q5nM.roa (raw, json)
Hash identifier:          TGslLfU4kNnaeAuNV7CpYV4k2JG7kGnYe5ortZjLBhM=
Subject key identifier:   03:A3:D1:E7:38:6E:19:3B:4C:C3:F3:90:FC:5F:21:C6:4E:50:E6:73
Certificate issuer:       /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial:       019B7CED8796B827324F562A89D35A079414
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/A6PR5zhuGTtMw_OQ_F8hxk5Q5nM.roa
Signing time:             Fri 02 Jan 2026 04:18:20 +0000
ROA not before:           Fri 02 Jan 2026 04:18:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60916
IP address blocks:        185.72.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:87:96:b8:27:32:4f:56:2a:89:d3:5a:07:94:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
        Validity
            Not Before: Jan  2 04:18:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=03a3d1e7386e193b4cc3f390fc5f21c64e50e673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ff:99:61:64:dd:fd:eb:01:72:9e:b8:61:67:
                    6e:79:af:db:f8:58:f4:90:a1:0c:88:34:eb:0c:36:
                    e9:c8:e4:11:29:5e:d2:f0:be:69:7a:d3:76:56:07:
                    13:df:2a:b6:86:23:9b:ab:7f:1d:8f:14:cf:70:00:
                    69:81:ae:d3:78:d8:cf:60:32:d4:61:16:53:12:ca:
                    9d:df:8e:81:4d:1b:cb:75:be:20:82:40:55:07:6a:
                    58:c6:a0:a3:c6:28:ea:3d:68:bf:15:15:34:83:ad:
                    7f:39:e4:5d:a9:9b:57:29:49:7c:e2:7d:aa:da:1f:
                    ca:4a:ac:a4:31:76:50:73:8d:21:9f:81:ab:5d:4d:
                    47:12:d8:39:fe:6d:32:2e:bc:bc:07:6a:32:e5:bd:
                    0a:d9:52:0f:54:7d:30:ea:16:d5:98:e1:d8:d8:96:
                    02:30:9d:a5:58:26:02:cd:f2:0b:64:86:3b:2d:ac:
                    7a:d0:93:3e:3d:65:44:cc:16:b7:84:f8:11:05:55:
                    fd:5b:81:72:7b:94:dc:db:9d:2d:61:75:a6:ff:1a:
                    51:b8:24:8c:89:65:be:8b:8f:5f:fb:3e:e7:a8:64:
                    06:11:6a:c9:e4:d4:28:82:cb:5f:1c:05:e3:c7:39:
                    24:08:5c:a1:22:6d:0e:83:8f:57:e2:d7:87:7b:9b:
                    a8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A3:D1:E7:38:6E:19:3B:4C:C3:F3:90:FC:5F:21:C6:4E:50:E6:73
            X509v3 Authority Key Identifier:
                keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/A6PR5zhuGTtMw_OQ_F8hxk5Q5nM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.72.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:25:85:d5:9a:1e:88:bf:b4:2b:2c:69:3e:b3:62:06:5b:9a:
         c7:79:bb:22:41:c0:52:3e:62:7c:da:af:65:f5:68:28:9f:f4:
         11:d9:1a:8f:f5:24:d1:94:be:6a:bb:e9:30:4f:7c:e3:d9:05:
         77:1f:0c:89:7a:de:4c:33:75:b8:61:27:9e:91:68:ce:1e:10:
         c5:a6:79:6b:5b:c8:c7:7e:e5:c6:b8:88:d7:a4:89:ed:4a:9f:
         f9:b2:c5:a1:c4:19:3b:52:c8:8d:bd:ce:45:ad:db:67:ef:9d:
         65:4f:c1:3b:4a:62:1a:5e:69:06:61:b4:93:68:b0:86:aa:cb:
         aa:10:3e:bd:3e:d5:65:dc:d0:64:f5:bc:ac:38:49:3a:7a:27:
         af:4f:59:d7:c9:7b:a5:bd:7e:b3:d4:7d:93:33:0c:54:ae:92:
         8b:52:61:ef:1a:49:09:14:80:52:d9:26:35:b6:dc:fd:53:38:
         b5:6a:18:c2:7b:76:70:91:e1:e6:3d:d1:0e:0d:f4:cc:6e:42:
         2d:9d:96:25:e6:f9:4c:5a:4b:b7:d6:9a:ec:f0:c3:2c:a7:44:
         ab:a3:c9:42:93:6c:9d:ea:d6:83:5d:f6:cd:f0:fc:a1:61:91:
         6d:6b:79:ce:bd:39:cf:aa:e9:37:f1:e5:94:fa:9e:1b:2b:73:
         78:fd:51:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:26:04 2026 by rpki-client