This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/fyLOdege7rISvKwS6nzptMD3TJw.roa
File:                     fyLOdege7rISvKwS6nzptMD3TJw.roa (raw, json)
Hash identifier:          XupWMossyhFCVMRDOrwvQeOId6GsqZ/55zk7+a6M/A4=
Subject key identifier:   7F:22:CE:75:E8:1E:EE:B2:12:BC:AC:12:EA:7C:E9:B4:C0:F7:4C:9C
Certificate issuer:       /CN=51ee1a67725eb4a764a587bc37079debbe81fb64
Certificate serial:       019B79108E18B9C57D01E072596BCA377A8E
Authority key identifier: 51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/fyLOdege7rISvKwS6nzptMD3TJw.roa
Signing time:             Thu 01 Jan 2026 10:18:06 +0000
ROA not before:           Thu 01 Jan 2026 10:18:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51469
IP address blocks:        31.171.216.0/23 maxlen: 23
                          31.171.218.0/23 maxlen: 23
                          31.171.220.0/23 maxlen: 23
                          31.171.222.0/23 maxlen: 23
                          185.16.232.0/23 maxlen: 23
                          185.16.234.0/23 maxlen: 23
                          217.170.240.0/23 maxlen: 23
                          217.170.242.0/23 maxlen: 23
                          217.170.244.0/23 maxlen: 23
                          217.170.244.0/24 maxlen: 24
                          217.170.245.0/24 maxlen: 24
                          217.170.246.0/23 maxlen: 23
                          217.170.248.0/23 maxlen: 23
                          217.170.250.0/23 maxlen: 23
                          217.170.252.0/23 maxlen: 23
                          217.170.254.0/23 maxlen: 23
                          2a00:6380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:8e:18:b9:c5:7d:01:e0:72:59:6b:ca:37:7a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ee1a67725eb4a764a587bc37079debbe81fb64
        Validity
            Not Before: Jan  1 10:18:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7f22ce75e81eeeb212bcac12ea7ce9b4c0f74c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3b:c8:4b:ed:97:35:07:96:34:07:6b:44:8b:
                    2d:b1:bf:38:d3:a3:d4:e2:05:3b:33:09:c8:af:8e:
                    80:1f:b0:e3:fd:8b:80:f1:af:79:f0:f4:ee:04:99:
                    49:49:0b:6e:a3:01:8d:8f:5b:f3:4d:e7:54:3a:6b:
                    6a:da:38:25:26:02:6a:31:b6:6f:95:f5:2a:6d:32:
                    cf:b1:41:e0:0e:cc:50:6f:46:d5:66:ab:34:bf:2a:
                    02:bb:d9:8c:60:77:98:a6:cb:aa:54:5f:b6:e4:e2:
                    39:31:91:28:75:61:35:08:c4:71:7a:68:2d:38:02:
                    5f:ba:75:d1:c8:cf:80:48:87:b6:45:f6:4b:df:a0:
                    18:d8:0a:e0:85:66:6b:b8:a2:eb:fd:a3:74:99:35:
                    84:34:75:f3:17:41:14:96:4b:10:da:15:8d:52:a6:
                    9c:fb:6f:26:33:52:b1:b0:ad:3a:05:1f:44:fc:e2:
                    e8:e5:74:c0:fd:6d:1c:68:d5:68:70:29:bc:e1:3e:
                    7c:03:57:98:1f:81:55:f6:e9:44:39:00:f6:6b:1c:
                    d3:ca:29:b9:96:49:de:2b:96:5b:a9:0f:b5:bc:12:
                    b5:f4:30:fe:3b:a6:a2:b4:8e:9c:49:78:6a:ee:34:
                    c5:68:6f:ed:15:c1:db:ab:3c:af:83:0c:45:e3:2d:
                    4c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:22:CE:75:E8:1E:EE:B2:12:BC:AC:12:EA:7C:E9:B4:C0:F7:4C:9C
            X509v3 Authority Key Identifier:
                keyid:51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/fyLOdege7rISvKwS6nzptMD3TJw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.171.216.0/21
                  185.16.232.0/22
                  217.170.240.0/20
                IPv6:
                  2a00:6380::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:fa:72:41:44:2a:94:f6:48:2e:02:eb:96:95:f2:76:07:1f:
         8d:f2:04:af:11:af:f3:d8:36:7d:32:c5:45:93:a5:af:9c:22:
         55:bc:b0:7f:ce:3e:70:c0:32:d7:cc:1c:d3:03:f0:5f:4d:90:
         bf:bb:c9:07:f6:0c:eb:55:c5:e2:1e:ff:b9:ad:04:1e:4e:de:
         c9:1c:98:e0:4d:74:88:0b:1d:7d:c8:9b:b5:bd:ce:21:5b:8f:
         97:5e:60:23:bb:b5:0c:80:38:d6:11:32:9d:84:b7:4b:7d:29:
         cb:ae:a7:21:3c:c6:10:43:27:1c:69:85:2b:a4:f5:ae:27:99:
         72:43:6a:67:28:7a:a1:17:30:6c:42:04:87:41:4b:6d:ed:db:
         bb:c8:1f:44:96:13:fd:a4:cc:4d:cd:48:6a:e6:bb:1e:27:eb:
         56:45:c0:61:da:94:de:03:ac:f7:8f:55:72:83:f8:57:2d:9b:
         7a:21:f7:fd:90:df:bb:12:ef:4a:a0:8c:97:c8:05:9e:3b:f0:
         c4:a5:aa:bb:8a:96:a9:44:12:b1:ed:e1:e6:dc:3a:24:24:2d:
         4a:1d:5a:9d:f0:d2:1c:c5:72:d8:a1:d4:73:63:4f:11:8f:7b:
         ee:03:2b:ba:0f:25:5b:e2:b7:aa:a9:c1:09:04:43:39:3c:5a:
         78:b7:46:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:59 2026 by rpki-client