This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/P3uhwZVtBog2MCLVgG6wcSgmxc0.roa
File:                     P3uhwZVtBog2MCLVgG6wcSgmxc0.roa (raw, json)
Hash identifier:          ieAD0UkSqCquHFAONT31C2Q9x8Ke2zXum3W10Ar+9qw=
Subject key identifier:   3F:7B:A1:C1:95:6D:06:88:36:30:22:D5:80:6E:B0:71:28:26:C5:CD
Certificate issuer:       /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial:       019B7CED8FA4151AA516B72A482083A62FCB
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/P3uhwZVtBog2MCLVgG6wcSgmxc0.roa
Signing time:             Fri 02 Jan 2026 04:18:22 +0000
ROA not before:           Fri 02 Jan 2026 04:18:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206004
IP address blocks:        151.237.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:8f:a4:15:1a:a5:16:b7:2a:48:20:83:a6:2f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
        Validity
            Not Before: Jan  2 04:18:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3f7ba1c1956d0688363022d5806eb0712826c5cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fb:d3:61:60:dd:5c:b3:2f:cf:91:81:a5:6c:
                    c9:b6:52:80:55:32:a6:31:a3:cd:87:29:62:e0:d9:
                    90:18:2a:42:70:26:e2:1e:03:2b:7e:25:8f:bf:46:
                    61:d6:8d:4c:39:00:10:00:9f:23:12:6a:ac:a2:4f:
                    5b:11:57:27:1d:ab:1d:c0:f0:02:74:c5:b9:71:a2:
                    3f:14:95:97:6d:25:68:0b:93:46:20:3f:91:c5:a7:
                    6f:c1:b1:ce:91:f3:c6:f1:4c:92:f9:52:e3:01:e2:
                    4c:99:4e:cc:1f:df:d0:90:fc:17:0c:04:25:34:4c:
                    6b:0a:13:4f:9d:21:c3:8c:04:ca:b0:e0:60:81:8a:
                    da:62:0a:5f:01:95:02:56:4d:e3:ea:42:90:17:35:
                    bd:e9:63:c2:84:0d:79:c0:e5:55:1c:82:bb:ff:a2:
                    af:9f:66:db:79:3a:d5:2a:bd:24:2d:97:ce:5c:b0:
                    4e:59:64:61:b3:e8:30:80:5b:02:0d:cf:d4:df:a7:
                    f3:38:f0:49:3b:a6:72:51:28:32:90:d5:08:85:cc:
                    22:24:16:37:5a:fa:c8:4c:45:63:44:ee:0b:39:7c:
                    36:c8:27:49:77:4b:e9:82:48:79:3d:db:a9:9a:4b:
                    b6:ae:bf:6f:4b:03:c2:c7:2e:6e:f6:8a:62:70:03:
                    53:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7B:A1:C1:95:6D:06:88:36:30:22:D5:80:6E:B0:71:28:26:C5:CD
            X509v3 Authority Key Identifier:
                keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/P3uhwZVtBog2MCLVgG6wcSgmxc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.237.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:46:4c:67:7e:6c:d2:76:1c:38:b3:c7:3d:24:cf:ab:a3:d2:
         67:b4:e5:63:7e:33:71:a3:a6:62:53:54:fe:06:3b:7a:d1:4e:
         ef:cd:b5:ba:01:c1:23:1d:32:f6:13:34:f5:99:27:ae:4b:df:
         b4:ba:f0:f2:c9:1c:3a:2d:3e:2e:77:1a:9d:e6:c6:52:22:5a:
         1f:1b:79:a2:fa:c6:c0:94:1a:0e:78:8a:74:a1:f5:64:75:dd:
         47:6f:96:70:11:76:6f:0e:e7:0e:ae:c2:3f:b4:cc:e7:49:59:
         a5:6d:dc:7c:81:c7:2a:95:17:d5:1d:0f:da:a6:43:36:3c:de:
         dc:e2:04:bd:dd:a2:13:fa:3e:7f:a4:1d:3d:0c:86:e1:d5:3f:
         f4:d8:23:a0:f3:94:04:5d:ea:b6:06:db:b0:58:f5:a4:90:54:
         6a:7e:f2:84:4e:a6:3f:58:f4:63:f3:f0:65:75:fc:37:0e:c6:
         10:72:5f:24:ec:95:3e:69:22:53:74:20:8e:4a:78:59:ae:28:
         30:50:c4:84:c9:13:7f:9b:68:60:41:fe:1b:a4:7d:9d:da:2f:
         24:b9:1a:e8:7b:2c:08:5e:18:48:0a:a4:9b:4f:28:e6:70:50:
         ea:fb:87:8a:91:8a:5b:a8:be:b5:1d:38:c2:db:a2:34:d9:57:
         7a:3b:05:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:24:46 2026 by rpki-client