This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/_EivhTXgyqtUEnL5ZBaTCtFOB6g.roa
File:                     _EivhTXgyqtUEnL5ZBaTCtFOB6g.roa (raw, json)
Hash identifier:          kjD9LGRqBQ8x8EplH44i4vqT7eiGzA0FSv5pb4fmTWA=
Subject key identifier:   FC:48:AF:85:35:E0:CA:AB:54:12:72:F9:64:16:93:0A:D1:4E:07:A8
Certificate issuer:       /CN=5788cc0f0edc55f26f4c1b5a86f7be4551d4e315
Certificate serial:       019B7AC79206E43A91778C3F249FEC333189
Authority key identifier: 57:88:CC:0F:0E:DC:55:F2:6F:4C:1B:5A:86:F7:BE:45:51:D4:E3:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V4jMDw7cVfJvTBtahve-RVHU4xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/_EivhTXgyqtUEnL5ZBaTCtFOB6g.roa
Signing time:             Thu 01 Jan 2026 18:17:37 +0000
ROA not before:           Thu 01 Jan 2026 18:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44906
IP address blocks:        194.42.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/V4jMDw7cVfJvTBtahve-RVHU4xU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/V4jMDw7cVfJvTBtahve-RVHU4xU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V4jMDw7cVfJvTBtahve-RVHU4xU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:92:06:e4:3a:91:77:8c:3f:24:9f:ec:33:31:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5788cc0f0edc55f26f4c1b5a86f7be4551d4e315
        Validity
            Not Before: Jan  1 18:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fc48af8535e0caab541272f96416930ad14e07a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:c9:77:e3:ad:ca:82:a3:58:ef:3a:f7:2f:
                    b0:50:e0:e0:c4:c3:93:de:b2:cc:cb:78:b2:cd:aa:
                    36:ec:5e:78:64:19:14:85:f4:b3:cd:c7:94:51:99:
                    33:9c:c5:c5:64:d9:5e:5f:40:e5:47:21:e1:44:00:
                    d2:db:5f:0f:c5:21:18:2f:e9:1b:c5:17:85:36:a8:
                    18:b2:bf:bd:a4:aa:97:23:24:6d:01:4c:c6:e3:07:
                    8b:85:f6:9e:12:99:16:72:8b:3e:9a:1d:fb:89:f4:
                    39:13:1d:72:cf:43:06:9d:e5:25:f3:17:b4:76:e7:
                    49:5d:40:8f:39:fe:8b:55:25:ec:de:ea:c3:a0:19:
                    86:ad:96:25:42:b7:f3:cb:4d:7c:07:db:b7:dd:15:
                    40:5d:33:c0:e6:6b:c5:44:84:cc:96:69:c7:9e:6a:
                    5e:99:69:5b:90:4a:6b:81:5a:66:1f:9e:8e:37:68:
                    fe:70:15:fa:48:67:8c:17:c7:9c:2d:c9:f7:68:9a:
                    51:bf:2a:3c:f4:58:37:03:6b:c7:19:c0:3a:d4:ab:
                    ac:df:c4:7e:4f:3a:5b:70:1d:10:93:b6:00:f5:08:
                    7d:d0:b2:fb:38:1c:f2:74:d6:02:62:4d:5c:fd:f7:
                    fa:42:a7:76:60:db:30:85:e2:1f:94:79:97:d7:72:
                    76:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:48:AF:85:35:E0:CA:AB:54:12:72:F9:64:16:93:0A:D1:4E:07:A8
            X509v3 Authority Key Identifier:
                keyid:57:88:CC:0F:0E:DC:55:F2:6F:4C:1B:5A:86:F7:BE:45:51:D4:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4jMDw7cVfJvTBtahve-RVHU4xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/_EivhTXgyqtUEnL5ZBaTCtFOB6g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/V4jMDw7cVfJvTBtahve-RVHU4xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.42.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:4d:e5:5e:a7:13:d8:de:9b:22:a7:a7:13:58:1b:4b:16:fa:
         93:f0:14:e8:69:01:23:54:72:46:35:97:c8:ee:46:ab:cf:94:
         68:4d:ff:b6:74:44:e4:5f:3f:c8:d3:e6:26:00:b6:74:47:7c:
         bd:a9:f4:0a:fe:a9:c1:1c:5a:3d:78:a6:ef:15:f7:65:45:b8:
         1c:68:e2:b0:1a:1f:a3:49:49:87:cc:45:3e:35:33:58:b4:71:
         1c:e5:94:58:03:75:28:41:8e:50:ed:39:03:19:e4:7d:ee:50:
         12:38:94:aa:ef:e2:c9:00:31:db:d9:3f:dc:88:e1:ca:e3:eb:
         fc:83:21:0b:11:67:d0:30:11:3d:4a:e4:6f:51:96:12:0b:51:
         b2:f1:cc:0e:40:54:43:2e:c9:2f:15:a0:36:69:a7:80:72:0d:
         45:36:46:1e:e2:13:49:60:41:65:ba:8b:fb:ae:94:bd:ac:e3:
         e7:dd:82:96:43:1c:49:52:e6:e5:75:74:d0:3d:8f:5f:c3:4d:
         4e:77:e4:2a:a3:8e:cf:2d:c2:e3:14:38:2d:52:25:25:e7:e9:
         f3:01:af:8f:8a:c2:20:ab:23:6c:19:0a:1e:7a:ae:7f:9d:c2:
         94:6c:2e:fb:8e:20:40:7f:7e:62:78:f4:54:af:3c:8b:87:0a:
         ea:dd:92:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:41:30 2026 by rpki-client