This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/FVaF3betIOHg4wPft72ngyCZePE.roa
File:                     FVaF3betIOHg4wPft72ngyCZePE.roa (raw, json)
Hash identifier:          AegadGCHV5CrBJ9fTUuKeMkqUQ9CrMdfpb5QnM9p2ks=
Subject key identifier:   15:56:85:DD:B7:AD:20:E1:E0:E3:03:DF:B7:BD:A7:83:20:99:78:F1
Certificate issuer:       /CN=12e64042b6e7288a485db270c551329b802fd8c4
Certificate serial:       019B7910B374D1E02A00EDFE839485D7F659
Authority key identifier: 12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/FVaF3betIOHg4wPft72ngyCZePE.roa
Signing time:             Thu 01 Jan 2026 10:18:16 +0000
ROA not before:           Thu 01 Jan 2026 10:18:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24868
IP address blocks:        2001:678:4d4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:b3:74:d1:e0:2a:00:ed:fe:83:94:85:d7:f6:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e64042b6e7288a485db270c551329b802fd8c4
        Validity
            Not Before: Jan  1 10:18:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=155685ddb7ad20e1e0e303dfb7bda783209978f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:c8:6a:bb:97:ea:3d:22:6f:23:32:9d:2f:
                    16:b0:22:cc:af:48:b5:cc:57:b9:20:c6:10:af:fa:
                    b1:c7:80:7f:44:1f:32:bb:79:a7:ac:29:b1:2a:77:
                    31:33:ca:0b:f1:a4:7c:45:9b:91:69:90:fe:cc:a8:
                    21:2f:b1:e1:a5:24:22:d0:35:29:4b:6f:57:a0:14:
                    46:4d:ea:98:25:37:81:38:85:f4:7a:16:fc:bd:c5:
                    98:43:f1:30:08:02:d6:f2:8d:c1:45:79:ac:5d:cd:
                    ab:48:bf:14:5c:48:da:6b:66:15:7d:41:61:70:24:
                    b6:42:16:e2:d3:2f:ca:ea:91:6e:71:2a:45:24:84:
                    1a:8b:6a:a8:77:23:f8:03:26:84:7d:16:c0:a2:7c:
                    72:d9:3d:1d:53:bd:1e:e5:97:fd:75:69:e3:54:b7:
                    13:60:02:7d:6c:0d:c4:65:ac:65:b0:2d:89:7e:d8:
                    93:38:1a:c4:cb:11:08:60:7d:ae:50:d2:14:4a:a1:
                    ee:40:12:3c:8a:3a:ed:cc:58:dc:f0:e8:c1:b5:2a:
                    2b:96:d2:77:58:78:00:79:dd:9c:a1:0c:dd:79:21:
                    f1:2e:13:c7:ff:47:bb:7e:27:4e:db:6b:46:0f:5d:
                    c5:9a:88:3e:eb:14:81:9b:a3:0a:e5:99:ee:35:c0:
                    2b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:56:85:DD:B7:AD:20:E1:E0:E3:03:DF:B7:BD:A7:83:20:99:78:F1
            X509v3 Authority Key Identifier:
                keyid:12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/FVaF3betIOHg4wPft72ngyCZePE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:4d4::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:51:64:90:3b:58:64:16:80:16:c0:f3:68:78:0c:d7:34:67:
         1b:0a:31:31:7b:5e:20:c1:c5:bc:05:eb:a3:dd:06:f9:d5:34:
         e9:0e:66:11:05:1e:c8:4f:56:60:08:ce:47:90:34:bd:2a:0c:
         39:79:fb:bf:f4:89:0d:da:2f:80:47:18:74:e2:ed:7a:cd:b6:
         70:8f:51:30:06:89:11:ef:57:97:dd:c7:07:33:cb:65:7f:41:
         9d:a9:87:22:6d:1f:b6:03:68:58:99:ed:7d:d3:7e:79:64:5b:
         a9:79:cd:57:a3:c0:9c:ed:81:84:ec:b0:40:3e:70:80:a4:b6:
         ed:e8:bc:6d:13:22:92:69:0c:d4:55:a2:8b:c3:35:3d:78:8d:
         c5:b9:0d:d8:e8:5e:d3:a2:23:32:a4:5f:dd:82:36:54:2b:59:
         1d:65:ae:15:f8:5d:cb:dd:1d:bc:89:2e:ae:8b:be:df:0a:69:
         64:63:45:14:91:86:8b:f7:34:c0:37:05:78:7e:54:e4:1e:08:
         e8:05:43:3e:6b:a3:f2:b4:70:82:8e:63:8e:e3:3f:5a:88:3d:
         ee:8a:3f:fa:26:da:77:0e:b5:36:de:eb:af:ef:4a:a1:88:64:
         65:05:95:7e:7a:12:80:6e:60:91:d5:59:98:92:ef:90:7a:42:
         49:44:9b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:29:35 2026 by rpki-client