This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/J-fPqsN-bTywutCgBgm0oMsMZn4.roa
File:                     J-fPqsN-bTywutCgBgm0oMsMZn4.roa (raw, json)
Hash identifier:          GwWRnUTMSKlctTV12vVbv4ww0CbgnMjaJS61PVU8Qu8=
Subject key identifier:   27:E7:CF:AA:C3:7E:6D:3C:B0:BA:D0:A0:06:09:B4:A0:CB:0C:66:7E
Certificate issuer:       /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial:       019B7B36DAFE5CF3F44DF298D77D3144CE10
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/J-fPqsN-bTywutCgBgm0oMsMZn4.roa
Signing time:             Thu 01 Jan 2026 20:19:11 +0000
ROA not before:           Thu 01 Jan 2026 20:19:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     53356
IP address blocks:        213.145.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 11:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:da:fe:5c:f3:f4:4d:f2:98:d7:7d:31:44:ce:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
        Validity
            Not Before: Jan  1 20:19:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=27e7cfaac37e6d3cb0bad0a00609b4a0cb0c667e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f3:b0:1b:66:e2:6f:1d:76:bc:aa:fe:ef:6a:
                    e2:b3:cd:f6:45:90:a1:f9:4d:3f:df:30:21:0d:6c:
                    88:52:5b:08:8a:ae:8f:ba:93:6c:05:40:6a:c6:2b:
                    ac:06:01:00:80:33:90:02:be:0b:7a:9b:fa:58:36:
                    d8:ce:fb:d6:cc:ff:5f:39:3f:1c:60:28:a5:d5:d4:
                    df:f3:28:51:f5:74:00:33:3b:a1:ee:03:f8:ab:b7:
                    a3:3b:3a:2b:05:ae:76:60:64:64:d8:50:1a:aa:3c:
                    cc:04:d2:e3:6a:40:1c:02:fe:11:aa:e8:76:d5:45:
                    48:47:69:04:75:82:00:20:15:e7:e3:91:30:80:f1:
                    5b:a0:26:4a:91:25:88:eb:44:fe:6e:35:20:d4:b0:
                    92:1d:da:64:f0:2d:f3:99:76:26:e2:cc:91:5c:1f:
                    4f:dd:82:ae:84:fa:bb:e7:92:4a:ef:81:16:e2:c6:
                    c1:c3:41:c2:e4:1f:88:ae:08:8a:60:a4:be:5e:e2:
                    5f:af:ad:cb:d4:0e:74:a0:d5:4f:fa:6e:b7:21:1d:
                    61:a7:b0:a2:bf:5c:89:49:66:dc:fe:4c:51:03:dc:
                    50:1b:3a:b3:d7:fd:c7:20:63:f0:7b:b1:81:ad:a9:
                    19:b9:26:2f:ee:27:f1:09:72:ba:f9:2d:c8:1c:a4:
                    b1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E7:CF:AA:C3:7E:6D:3C:B0:BA:D0:A0:06:09:B4:A0:CB:0C:66:7E
            X509v3 Authority Key Identifier:
                keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/J-fPqsN-bTywutCgBgm0oMsMZn4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.145.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:0f:61:a3:4e:47:e4:86:d4:b7:e3:ee:d3:df:01:6b:cc:af:
         cc:79:c5:9a:8b:6d:33:f0:64:9c:e7:11:7e:63:cb:5a:19:f7:
         17:5b:ec:6e:32:78:8e:db:e3:18:83:ce:37:20:c5:5c:1c:85:
         f1:63:22:b2:eb:1a:9e:4b:dd:c0:f3:90:c7:22:33:c7:1d:b5:
         40:87:fa:d8:cc:8c:20:29:0c:47:34:dc:63:6b:fa:9d:fe:a9:
         40:b4:ba:13:46:81:d4:88:82:c6:7a:99:d4:3e:f5:63:11:5f:
         bc:4b:16:1c:23:c9:0f:10:53:f6:e7:6a:ea:e0:99:34:8e:71:
         8c:02:93:33:53:63:76:15:4c:9c:04:05:f6:02:a2:f7:e0:db:
         40:8f:4b:9c:b7:47:e7:39:31:8a:7c:c5:2e:b9:1c:02:a4:b5:
         a6:d1:e7:53:a9:cc:8d:9e:d1:ef:b3:74:0d:f8:68:d6:ee:e9:
         fe:fc:33:5b:69:35:48:fa:6f:f9:c6:cd:0b:82:18:e4:84:01:
         2b:59:fe:45:89:22:b0:e4:cc:9c:f9:41:5f:fc:a6:7b:37:cd:
         75:4f:67:82:0f:ac:17:ec:c2:50:09:eb:af:6e:ce:36:b6:16:
         0e:09:5d:24:62:af:6f:f8:e6:fe:fd:51:78:a3:ec:00:00:11:
         db:1c:b7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:16:41 2026 by rpki-client