This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/F0LzkFVGMTBWApSs_wM978YwiCQ.roa
File:                     F0LzkFVGMTBWApSs_wM978YwiCQ.roa (raw, json)
Hash identifier:          eqGhiZkloBkRtfkxnH/kF16wbkGdYNJEpml7PevLHH4=
Subject key identifier:   17:42:F3:90:55:46:31:30:56:02:94:AC:FF:03:3D:EF:C6:30:88:24
Certificate issuer:       /CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Certificate serial:       019B76EAD7BD66F4D5A0E6B612312F0FFA99
Authority key identifier: 69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/F0LzkFVGMTBWApSs_wM978YwiCQ.roa
Signing time:             Thu 01 Jan 2026 00:17:40 +0000
ROA not before:           Thu 01 Jan 2026 00:17:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207231
IP address blocks:        185.25.95.0/24 maxlen: 24
                          2a0c:85c0::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:d7:bd:66:f4:d5:a0:e6:b6:12:31:2f:0f:fa:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
        Validity
            Not Before: Jan  1 00:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1742f39055463130560294acff033defc6308824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:aa:c9:d1:96:c6:c9:08:cd:07:35:60:f1:64:
                    54:12:f1:60:5e:5c:1e:4e:cf:f6:7e:a1:18:d0:3d:
                    32:b6:bb:cb:2a:8f:e9:56:f9:4a:2e:c9:e9:8c:6d:
                    1e:61:17:2c:f6:07:f5:eb:de:70:fa:90:4f:5a:af:
                    d9:d1:ed:a6:92:fd:0d:12:59:d8:79:85:96:6c:23:
                    33:4c:4c:fe:26:fa:9a:59:17:b2:02:11:e4:3c:ba:
                    08:0e:37:7f:36:0d:b8:91:c8:80:46:0b:a2:3d:ea:
                    29:da:fe:ea:ca:3e:b0:c2:9a:de:b5:9a:4f:7f:af:
                    b0:4c:87:fb:09:b8:5c:87:7f:95:97:64:12:d9:d1:
                    01:e0:9b:f0:c5:d1:cb:b9:c7:b2:64:71:c6:97:3b:
                    6d:98:51:b4:ad:11:fb:d0:c5:8a:a3:fe:88:fe:b1:
                    6f:9b:99:17:e0:f6:58:86:3f:29:da:d5:6d:dc:80:
                    ac:0d:09:cf:a5:2a:18:ca:09:d4:e3:d1:c8:6f:d3:
                    90:b0:9c:94:69:ff:1b:bc:71:56:78:a2:67:2a:87:
                    09:a4:47:5c:8d:3a:85:ff:55:29:c3:ff:7c:14:af:
                    b4:99:da:2e:ae:a0:a4:3c:ff:53:03:ce:87:00:d0:
                    7a:78:ff:ec:ba:4a:93:25:5d:58:4e:c2:c2:b4:a3:
                    9e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:42:F3:90:55:46:31:30:56:02:94:AC:FF:03:3D:EF:C6:30:88:24
            X509v3 Authority Key Identifier:
                keyid:69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/F0LzkFVGMTBWApSs_wM978YwiCQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.25.95.0/24
                IPv6:
                  2a0c:85c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         4f:7d:a8:1e:db:c3:48:24:4c:7a:55:44:1d:b5:f3:f6:2c:82:
         c6:af:fe:b3:21:e3:56:17:7a:df:29:fd:20:ff:23:f8:c7:35:
         fb:8c:b0:5b:77:27:ea:22:ec:17:69:b0:3d:1b:47:80:d2:fd:
         c6:a6:e4:09:8b:fa:2e:e9:5d:35:e9:ae:4d:00:94:29:31:51:
         8d:15:f8:54:8c:5a:e5:37:89:94:5b:55:04:6d:c0:04:75:fd:
         31:b7:c0:ed:e0:5c:df:81:ba:c6:25:58:c8:fe:70:63:07:15:
         a3:27:9b:91:07:60:3a:26:59:e1:7c:c0:4e:3b:25:6b:de:32:
         08:3c:f7:e2:00:e9:b5:99:39:a9:dd:bd:17:b1:77:fe:78:ad:
         51:03:a8:d3:9b:b4:00:c7:23:a9:d2:46:5f:ce:9b:eb:d7:9b:
         b2:0e:a2:6e:8c:f4:2f:bc:09:77:62:31:37:17:23:7a:99:b0:
         f1:27:19:d3:04:9a:c8:7f:9a:0e:81:5a:63:a1:67:4d:32:e9:
         f7:a8:b0:2f:12:91:3e:f8:e8:f4:80:ad:b1:f2:3a:c2:04:30:
         59:e2:5f:50:5f:69:ba:68:95:db:fc:b6:7b:33:7a:90:f8:05:
         37:71:00:8b:c2:31:82:de:d7:ac:e8:e5:f6:d0:26:d4:ba:20:
         1e:2e:85:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:29 2026 by rpki-client