This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/fuzFacJNaiVRrJ_GlGY2C6GBS6M.roa
File:                     fuzFacJNaiVRrJ_GlGY2C6GBS6M.roa (raw, json)
Hash identifier:          C5oZSE4o23c6OxxwxdkDVpPrg7ORDnBnQBKmM1UexSA=
Subject key identifier:   7E:EC:C5:69:C2:4D:6A:25:51:AC:9F:C6:94:66:36:0B:A1:81:4B:A3
Certificate issuer:       /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial:       019B7A5B80182B5666C5C01B46FF1BC8C91A
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/fuzFacJNaiVRrJ_GlGY2C6GBS6M.roa
Signing time:             Thu 01 Jan 2026 16:19:35 +0000
ROA not before:           Thu 01 Jan 2026 16:19:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28907
IP address blocks:        193.107.200.0/22 maxlen: 24
                          193.107.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:80:18:2b:56:66:c5:c0:1b:46:ff:1b:c8:c9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
        Validity
            Not Before: Jan  1 16:19:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7eecc569c24d6a2551ac9fc69466360ba1814ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:f9:2f:b5:ed:2d:d5:64:9b:b7:19:52:be:
                    5a:f8:56:9e:c3:11:29:9d:ea:b0:05:4d:6c:62:c5:
                    0b:96:c5:07:c3:76:c7:9d:5d:ba:69:3b:59:95:2b:
                    d2:4c:55:d0:f9:bb:0b:f9:7d:a6:bc:19:83:da:e4:
                    6f:15:dc:2e:9c:f0:39:04:d3:4b:14:20:1e:90:84:
                    d2:a0:ba:6d:73:a0:24:f4:68:d1:cd:7a:28:e8:18:
                    16:7c:70:a0:38:09:cf:4b:e5:2d:ca:39:b3:5b:9f:
                    ec:fe:56:d8:90:e7:0d:22:f6:d3:77:f8:63:c2:94:
                    b7:7b:07:10:e1:13:6e:62:14:7d:99:b8:af:d0:73:
                    50:06:c8:0e:43:4a:6b:20:2a:70:39:b2:19:18:24:
                    6c:60:ec:5c:34:a4:29:d5:e2:cb:68:e9:dd:2d:d1:
                    db:9d:77:5e:17:24:ab:4d:b6:14:5d:42:e2:39:e0:
                    eb:e9:fe:da:3d:78:4d:59:d6:ae:c5:d9:0b:18:08:
                    8d:65:f6:96:96:d0:36:cb:b6:b3:37:7c:88:56:e3:
                    1e:95:1c:95:81:57:48:ab:6c:33:e0:36:1d:7a:14:
                    b3:c8:d2:1b:68:b0:b6:e1:f5:e9:ec:41:1d:b1:bd:
                    ec:31:e4:93:98:7e:20:09:9b:ff:b2:0d:9e:98:fd:
                    54:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EC:C5:69:C2:4D:6A:25:51:AC:9F:C6:94:66:36:0B:A1:81:4B:A3
            X509v3 Authority Key Identifier:
                keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/fuzFacJNaiVRrJ_GlGY2C6GBS6M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:3b:aa:c0:f8:cc:32:9d:2f:c3:af:9f:4d:4d:b0:75:13:56:
         69:ee:fd:1f:94:20:dc:4f:97:92:da:a1:ed:c2:b6:35:9b:9b:
         9f:ce:2a:b7:d9:3a:b9:95:30:f0:84:1c:f4:83:9c:1c:87:be:
         86:8e:e4:df:34:50:fb:b8:05:1b:74:ed:a0:31:38:54:ca:04:
         26:1a:16:87:70:7a:43:62:e1:71:24:ab:88:74:83:3f:9f:27:
         98:34:3e:60:6a:3c:b9:6b:c5:71:36:ca:8d:5b:70:10:4b:a0:
         a8:eb:dd:1e:82:c2:a9:49:97:c4:b9:46:04:c5:36:3f:2f:3d:
         67:51:7f:d5:0e:ac:5e:52:b1:36:ee:64:98:d7:f1:bd:8a:a6:
         fd:51:68:e0:fa:63:9b:84:f1:83:45:28:73:3b:d9:73:c6:af:
         13:71:b7:bf:ce:0f:57:c7:e1:cf:f8:68:34:1c:ff:f0:57:4e:
         5f:e6:c4:61:48:d2:8c:b4:92:37:ef:63:39:4e:e1:f0:2b:f8:
         a5:30:67:2a:cd:ad:8f:1d:44:db:6f:6b:b2:f7:d7:dc:90:a1:
         97:95:81:1d:84:48:5f:a8:2f:59:c7:ba:13:26:e2:c1:09:aa:
         a1:fe:74:12:67:53:1a:b2:10:d5:fc:c1:8b:da:48:cc:ef:41:
         17:48:f6:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6W4AYK1ZmxcAbRv8byMkaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNDcxOGU3YTI2M2ViZTQ1ZTc3MDY3MzkyNDFlYzZkNmFl
NThlNzQwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWVjYzU2OWMyNGQ2YTI1NTFhYzlmYzY5NDY2MzYwYmExODE0YmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJT5L7XtLdVkm7cZUr5a+FaewxEp
neqwBU1sYsULlsUHw3bHnV26aTtZlSvSTFXQ+bsL+X2mvBmD2uRvFdwunPA5BNNL
FCAekITSoLptc6Ak9GjRzXoo6BgWfHCgOAnPS+UtyjmzW5/s/lbYkOcNIvbTd/hj
wpS3ewcQ4RNuYhR9mbiv0HNQBsgOQ0prICpwObIZGCRsYOxcNKQp1eLLaOndLdHb
nXdeFySrTbYUXULiOeDr6f7aPXhNWdauxdkLGAiNZfaWltA2y7azN3yIVuMelRyV
gVdIq2wz4DYdehSzyNIbaLC24fXp7EEdsb3sMeSTmH4gCZv/sg2emP1U4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH7sxWnCTWolUayfxpRmNguhgUujMB8GA1UdIwQY
MBaAFABHGOeiY+vkXncGc5JB7G1q5Y50MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUVjWTU2Smo2LVJlZHdaemtrSHNiV3Jsam5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8zZWVjZjgtZWIwNC00MWNlLWE5ZjYt
M2E5MWE2MTNhNDA3LzEvZnV6RmFjSk5haVZSckpfR2xHWTJDNkdCUzZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8zZWVjZjgtZWIwNC00MWNlLWE5ZjYtM2E5MWE2MTNhNDA3
LzEvQUVjWTU2Smo2LVJlZHdaemtrSHNiV3Jsam5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwWvIMA0G
CSqGSIb3DQEBCwUAA4IBAQANO6rA+MwynS/Dr59NTbB1E1Zp7v0flCDcT5eS2qHt
wrY1m5ufziq32Tq5lTDwhBz0g5wch76GjuTfNFD7uAUbdO2gMThUygQmGhaHcHpD
YuFxJKuIdIM/nyeYND5gajy5a8VxNsqNW3AQS6Co690egsKpSZfEuUYExTY/Lz1n
UX/VDqxeUrE27mSY1/G9iqb9UWjg+mObhPGDRShzO9lzxq8Tcbe/zg9Xx+HP+Gg0
HP/wV05f5sRhSNKMtJI372M5TuHwK/ilMGcqza2PHUTbb2uy99fckKGXlYEdhEhf
qC9Zx7oTJuLBCaqh/nQSZ1MashDV/MGL2kjM70EXSPbP
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:53 2026 by rpki-client