This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/tpgO__8JIWwf0K5I2LYCZrVrikM.roa
File:                     tpgO__8JIWwf0K5I2LYCZrVrikM.roa (raw, json)
Hash identifier:          f2PcjHiabtY+DnGAD4NglKdZJPzXxJGrLSGQ06vKQuY=
Subject key identifier:   B6:98:0E:FF:FF:09:21:6C:1F:D0:AE:48:D8:B6:02:66:B5:6B:8A:43
Certificate issuer:       /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial:       019B7834CFBAB5F8542F59FDC722387F7CB4
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/tpgO__8JIWwf0K5I2LYCZrVrikM.roa
Signing time:             Thu 01 Jan 2026 06:18:05 +0000
ROA not before:           Thu 01 Jan 2026 06:18:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47995
IP address blocks:        193.164.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:cf:ba:b5:f8:54:2f:59:fd:c7:22:38:7f:7c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
        Validity
            Not Before: Jan  1 06:18:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b6980effff09216c1fd0ae48d8b60266b56b8a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:a7:45:27:78:c0:3d:50:62:a6:1b:da:f1:
                    de:21:64:fb:ec:1a:62:3a:71:8a:d8:c9:0e:8e:bf:
                    5a:31:70:c3:d5:a4:19:b0:23:90:8b:68:a3:30:38:
                    6d:2c:83:6f:15:20:e4:98:a8:5c:c5:17:10:59:04:
                    fb:1b:71:73:77:d3:7a:62:12:18:db:0b:99:47:99:
                    3d:00:0e:07:0c:7a:de:59:13:29:6d:9f:4a:da:f0:
                    50:3b:58:a2:62:40:46:21:78:b1:8b:c3:62:40:1f:
                    f1:c1:b9:6e:8d:a8:6a:3a:71:f3:bd:e2:f6:f2:6c:
                    9e:68:6e:0e:86:83:6a:f1:22:7c:98:18:34:13:57:
                    c5:95:00:51:a6:1d:7a:02:bb:8f:d5:d3:65:ea:bb:
                    87:f5:58:86:03:3d:87:60:19:ff:ee:53:e7:eb:92:
                    56:4a:39:4c:36:cb:1e:31:c2:53:a1:bf:b2:e9:ee:
                    9e:07:08:19:79:94:56:42:05:03:28:c3:9e:55:ac:
                    6b:7c:b5:8b:78:82:f8:b7:15:74:c1:30:7d:7d:f5:
                    03:33:d0:b0:59:09:da:5d:1f:46:39:fd:a4:4c:2b:
                    95:15:49:59:0f:ca:0d:11:fd:63:85:cd:a6:ce:2c:
                    e4:a0:12:cc:ca:55:f3:7d:63:92:6c:dd:fe:38:ba:
                    c8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:98:0E:FF:FF:09:21:6C:1F:D0:AE:48:D8:B6:02:66:B5:6B:8A:43
            X509v3 Authority Key Identifier:
                keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/tpgO__8JIWwf0K5I2LYCZrVrikM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.164.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:54:8a:30:65:4b:97:ed:dd:6b:64:6f:42:f3:6f:94:f1:0c:
         ff:90:a2:bc:2b:97:b9:28:66:c8:b4:0a:18:e9:12:ab:c1:fe:
         1a:f0:8e:ab:fd:6e:f9:1b:04:c3:46:8b:8c:81:00:b2:1d:6b:
         38:2d:93:96:7f:35:8d:59:bc:8d:e2:bd:82:ae:f8:fb:f5:94:
         dd:12:f9:64:04:7a:dc:70:f1:59:39:b0:f8:18:00:e3:20:9f:
         4c:77:47:41:7e:85:17:47:29:67:41:8b:12:8c:de:29:26:ce:
         44:5c:c7:d9:54:0e:fa:e4:a5:5e:ce:3a:57:02:1b:e3:64:89:
         22:f1:56:fe:02:f7:18:2c:fc:38:e1:b0:c4:30:6c:0b:05:fd:
         8c:b8:db:c4:68:69:a1:40:8a:52:95:f1:38:1d:9f:31:3e:4f:
         75:24:43:8e:42:41:e6:bf:fe:6b:02:e6:89:9a:34:9f:08:64:
         fa:23:a6:b1:32:94:3e:a7:da:8d:3f:21:1a:93:0e:3a:bd:0b:
         30:62:66:ae:f0:f4:13:2c:84:b7:39:46:98:8a:a3:8c:82:5c:
         83:9b:4e:3e:f7:5d:c6:cb:fa:ba:fd:ab:5e:a9:10:f1:49:39:
         5a:7d:1a:57:78:bd:05:b3:c5:4e:55:c8:ef:c1:75:08:3b:51:
         42:02:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:30 2026 by rpki-client