This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/fL10Ig4d3crLZGY9ylUsNdJrhx4.roa
File:                     fL10Ig4d3crLZGY9ylUsNdJrhx4.roa (raw, json)
Hash identifier:          59cphjVnvRGhN51MwGpM2RBhtTLQE+TadVntWntgkw8=
Subject key identifier:   7C:BD:74:22:0E:1D:DD:CA:CB:64:66:3D:CA:55:2C:35:D2:6B:87:1E
Certificate issuer:       /CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Certificate serial:       019B77591A550D31726A9BF421AFC0729F18
Authority key identifier: 3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/fL10Ig4d3crLZGY9ylUsNdJrhx4.roa
Signing time:             Thu 01 Jan 2026 02:18:06 +0000
ROA not before:           Thu 01 Jan 2026 02:18:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25591
IP address blocks:        45.84.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:1a:55:0d:31:72:6a:9b:f4:21:af:c0:72:9f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
        Validity
            Not Before: Jan  1 02:18:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7cbd74220e1dddcacb64663dca552c35d26b871e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a7:6d:11:e5:cf:10:0a:06:97:2b:db:fc:9f:
                    c0:3d:49:ea:da:d6:6d:79:da:82:88:cf:76:7c:5d:
                    97:a9:61:ba:eb:39:23:17:64:79:3d:ac:1c:04:7f:
                    94:2e:93:bb:19:4f:d1:8c:b7:1c:4e:5b:5c:ac:f0:
                    96:ef:25:f5:3b:7b:95:72:4d:1c:08:cf:39:ed:55:
                    f4:75:68:a7:f7:10:df:49:9a:44:50:f2:eb:f2:a9:
                    9c:9f:b5:f1:87:eb:87:56:96:29:e8:a4:3a:24:b2:
                    9d:5d:fc:b3:f0:27:8b:c1:e7:8f:14:76:12:e8:37:
                    67:93:72:eb:f6:4e:d2:00:df:37:c6:36:20:c3:1d:
                    11:02:3f:50:93:da:76:b6:51:44:3b:34:fa:01:37:
                    74:1a:95:ed:62:5a:8e:7f:ff:d9:86:0e:06:03:89:
                    82:3d:30:71:14:92:99:fa:32:ad:19:d6:c3:af:57:
                    3a:e6:48:6c:2b:29:d2:38:ec:d7:fc:99:4c:e2:62:
                    92:59:4c:59:e7:b4:ef:97:88:c9:9c:ec:c4:a9:fc:
                    72:16:b6:5c:18:38:a3:10:c1:8f:31:67:7a:a5:72:
                    f5:a3:db:0c:26:45:94:bc:af:2d:91:9e:d0:81:d2:
                    59:3a:b8:81:3d:5b:10:04:80:ea:bb:5a:fc:42:6f:
                    5e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BD:74:22:0E:1D:DD:CA:CB:64:66:3D:CA:55:2C:35:D2:6B:87:1E
            X509v3 Authority Key Identifier:
                keyid:3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/fL10Ig4d3crLZGY9ylUsNdJrhx4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:71:b3:53:af:a4:e3:92:cf:83:eb:d5:c7:30:56:42:f2:44:
         89:1d:3b:f0:53:37:a5:52:cf:2b:d8:d6:d0:96:0d:6f:a0:15:
         a9:9a:ab:53:31:70:2c:5c:72:90:ce:0f:7a:16:bb:7b:38:59:
         6f:88:8a:cc:3f:22:8e:c3:40:f8:c5:4f:d2:53:74:fc:aa:56:
         6c:4b:96:b1:23:c5:e9:cc:35:14:e5:c5:a7:22:d7:61:9b:c3:
         32:a5:42:fb:d4:2f:f9:91:64:08:44:5f:96:cc:e9:35:94:79:
         6e:96:41:37:6b:c1:e8:2d:b9:5c:0d:a3:ea:b3:8f:78:70:b0:
         dd:31:9a:e2:f2:4c:0a:48:9b:b6:7b:d6:e3:31:45:6c:87:be:
         7f:13:ea:69:16:41:5b:da:3d:c0:0e:f0:a9:90:74:3a:c3:8a:
         71:62:d3:b4:ce:cb:06:21:14:2a:36:bb:9d:e9:4e:21:12:38:
         a6:b1:9e:5e:cd:1a:dd:6c:72:b1:88:f9:9c:9e:4c:20:e8:ad:
         2b:83:e2:46:d9:81:8b:69:28:54:95:76:39:f0:c6:65:cd:f8:
         2a:09:bf:fe:52:fe:1f:1a:35:68:90:0d:f9:7d:03:7c:fa:59:
         f7:23:2e:9d:18:76:b6:67:f0:d6:f4:e0:b8:57:16:81:f3:f2:
         d0:60:9b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:27:40 2026 by rpki-client