This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/fpv7X-TkVwCqqHH5fj7Z_fTN4Kc.roa
File:                     fpv7X-TkVwCqqHH5fj7Z_fTN4Kc.roa (raw, json)
Hash identifier:          cOqWQjIviZMextqrFLsf3gf8It8rhkkR5FV+uRamQxc=
Subject key identifier:   7E:9B:FB:5F:E4:E4:57:00:AA:A8:71:F9:7E:3E:D9:FD:F4:CD:E0:A7
Certificate issuer:       /CN=596a5fee9345fcd48010348877b7853afccc6474
Certificate serial:       019B7D5B66746ADFE81CC5F2C71E2003DC26
Authority key identifier: 59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/fpv7X-TkVwCqqHH5fj7Z_fTN4Kc.roa
Signing time:             Fri 02 Jan 2026 06:18:20 +0000
ROA not before:           Fri 02 Jan 2026 06:18:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     52164
IP address blocks:        80.244.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:66:74:6a:df:e8:1c:c5:f2:c7:1e:20:03:dc:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=596a5fee9345fcd48010348877b7853afccc6474
        Validity
            Not Before: Jan  2 06:18:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7e9bfb5fe4e45700aaa871f97e3ed9fdf4cde0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2e:a6:ca:68:a8:a8:0f:c6:59:0d:ef:e9:be:
                    14:37:f6:e6:55:1d:71:f6:e2:b2:46:02:cc:ef:ad:
                    4a:e2:2d:eb:dd:58:30:e8:0a:4a:f6:35:a8:ac:e9:
                    cf:70:d5:bc:0b:66:d5:38:54:aa:fc:f8:f1:fe:fe:
                    4a:66:89:af:ba:f1:8a:6a:ca:b8:09:00:fc:75:75:
                    4a:09:95:cc:58:ce:58:1d:fa:3a:f5:e3:67:8f:88:
                    1b:54:f5:22:a5:8c:f6:ae:54:22:79:48:ca:62:ad:
                    8d:c4:3d:f5:f3:e2:87:00:56:83:c4:e7:36:5d:30:
                    9a:46:13:23:48:25:54:66:e2:bc:a4:a2:89:12:ca:
                    a1:6c:d9:35:fb:c2:1c:1a:c2:45:47:c9:28:bf:6a:
                    18:49:66:31:37:e4:86:4f:5f:c7:c5:02:a4:f2:4c:
                    58:df:c0:cc:9b:02:16:b4:aa:99:71:e5:70:4f:d3:
                    c9:31:6e:94:dc:a5:af:1f:61:90:d0:06:17:23:6a:
                    da:9b:b1:22:53:05:b3:71:00:8b:50:00:16:9f:c0:
                    17:06:ec:06:d4:c6:50:f0:8e:45:11:d7:b9:e7:42:
                    e5:c1:d8:4d:01:19:68:34:82:99:5d:a8:41:44:3c:
                    d0:e6:26:74:0d:6b:30:cd:2a:5f:31:20:ef:b9:08:
                    25:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9B:FB:5F:E4:E4:57:00:AA:A8:71:F9:7E:3E:D9:FD:F4:CD:E0:A7
            X509v3 Authority Key Identifier:
                keyid:59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/fpv7X-TkVwCqqHH5fj7Z_fTN4Kc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.244.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:0c:7d:90:8c:e7:94:cd:9c:cd:2d:0d:c2:fd:de:10:cc:cd:
         58:d1:db:48:62:ec:be:9c:c6:22:ed:2b:37:01:d8:a9:a0:5e:
         49:cf:81:a4:53:99:93:4f:fc:df:f6:eb:d1:fa:67:09:4e:41:
         bb:8c:f8:3b:82:05:4c:e4:79:34:4c:cf:9c:cd:6f:21:22:d2:
         ff:21:46:54:18:c1:8b:fd:ed:da:06:58:84:61:ef:47:cb:35:
         fa:5e:62:e6:59:77:18:bb:d1:50:9d:c6:8e:d2:19:4f:c0:38:
         5b:31:7e:21:29:37:81:4b:f5:70:80:fc:0f:83:e2:44:47:72:
         df:2a:cd:3c:a0:02:73:2b:45:28:f4:51:37:c2:63:bc:28:c2:
         3a:05:69:57:e6:6e:86:58:3e:06:5e:49:e5:75:1e:b4:9c:4d:
         26:b8:80:f5:fb:3b:6a:c7:e6:42:b2:db:f0:e8:89:f0:63:7c:
         da:4e:68:1f:47:28:83:3f:82:5b:5c:f9:28:51:7e:d8:74:7b:
         ac:f1:66:eb:73:1a:8e:28:6d:c3:e7:c8:71:fe:69:c3:92:07:
         64:bf:a1:10:8a:66:6e:e3:46:80:87:d6:6a:84:0a:76:f0:3d:
         63:6f:39:51:29:2c:9d:26:f1:5f:56:a5:64:c4:74:d5:31:c9:
         55:58:08:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9W2Z0at/oHMXyxx4gA9wmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NmE1ZmVlOTM0NWZjZDQ4MDEwMzQ4ODc3Yjc4NTNhZmNj
YzY0NzQwHhcNMjYwMTAyMDYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTliZmI1ZmU0ZTQ1NzAwYWFhODcxZjk3ZTNlZDlmZGY0Y2RlMGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC6mymioqA/GWQ3v6b4UN/bmVR1x
9uKyRgLM761K4i3r3Vgw6ApK9jWorOnPcNW8C2bVOFSq/Pjx/v5KZomvuvGKasq4
CQD8dXVKCZXMWM5YHfo69eNnj4gbVPUipYz2rlQieUjKYq2NxD318+KHAFaDxOc2
XTCaRhMjSCVUZuK8pKKJEsqhbNk1+8IcGsJFR8kov2oYSWYxN+SGT1/HxQKk8kxY
38DMmwIWtKqZceVwT9PJMW6U3KWvH2GQ0AYXI2ram7EiUwWzcQCLUAAWn8AXBuwG
1MZQ8I5FEde550LlwdhNARloNIKZXahBRDzQ5iZ0DWswzSpfMSDvuQgluQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH6b+1/k5FcAqqhx+X4+2f30zeCnMB8GA1UdIwQY
MBaAFFlqX+6TRfzUgBA0iHe3hTr8zGR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1dwZjdwTkZfTlNBRURTSWQ3ZUZPdnpNWkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi82ZjZiN2MtYzBhOS00OTUzLTk4NjUt
ZGU0YmRhYTM3MjAzLzEvZnB2N1gtVGtWd0NxcUhINWZqN1pfZlRONEtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi82ZjZiN2MtYzBhOS00OTUzLTk4NjUtZGU0YmRhYTM3MjAz
LzEvV1dwZjdwTkZfTlNBRURTSWQ3ZUZPdnpNWkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPQGMA0G
CSqGSIb3DQEBCwUAA4IBAQDODH2QjOeUzZzNLQ3C/d4QzM1Y0dtIYuy+nMYi7Ss3
AdipoF5Jz4GkU5mTT/zf9uvR+mcJTkG7jPg7ggVM5Hk0TM+czW8hItL/IUZUGMGL
/e3aBliEYe9HyzX6XmLmWXcYu9FQncaO0hlPwDhbMX4hKTeBS/VwgPwPg+JER3Lf
Ks08oAJzK0Uo9FE3wmO8KMI6BWlX5m6GWD4GXknldR60nE0muID1+ztqx+ZCstvw
6InwY3zaTmgfRyiDP4JbXPkoUX7YdHus8WbrcxqOKG3D58hx/mnDkgdkv6EQimZu
40aAh9ZqhAp28D1jbzlRKSydJvFfVqVkxHTVMclVWAg6
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:51 2026 by rpki-client