This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/fTOgoYe-1RQHUjMr-5lceDA6Gh4.roa
File:                     fTOgoYe-1RQHUjMr-5lceDA6Gh4.roa (raw, json)
Hash identifier:          OQrhj5Ohl5/XRuzhCMj8biXrUCvWFxmJGppdP4KOC0k=
Subject key identifier:   7D:33:A0:A1:87:BE:D5:14:07:52:33:2B:FB:99:5C:78:30:3A:1A:1E
Certificate issuer:       /CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Certificate serial:       019B7834C9F0C99A312E70C437A549670CA3
Authority key identifier: 6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/fTOgoYe-1RQHUjMr-5lceDA6Gh4.roa
Signing time:             Thu 01 Jan 2026 06:18:04 +0000
ROA not before:           Thu 01 Jan 2026 06:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49033
IP address blocks:        45.8.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:c9:f0:c9:9a:31:2e:70:c4:37:a5:49:67:0c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
        Validity
            Not Before: Jan  1 06:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7d33a0a187bed5140752332bfb995c78303a1a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:cf:9f:c7:2b:6b:69:65:bc:7a:33:ad:19:
                    65:9f:d6:a9:f1:8b:b9:6e:07:53:28:fd:12:ea:aa:
                    25:79:87:5d:ac:24:b4:b6:f2:46:dc:b9:e7:3c:bd:
                    cf:23:e9:5d:43:44:f5:1f:e3:0a:5f:69:df:3b:02:
                    34:3f:19:55:73:5e:d9:0e:4a:42:ce:08:77:e4:b1:
                    d5:dd:c0:65:4f:5b:18:37:4f:51:e5:61:58:49:ca:
                    06:8d:54:34:6d:f6:ee:9b:39:a3:fb:cb:e6:db:fe:
                    6c:87:15:a5:48:ff:ed:33:3f:75:c5:98:48:ec:63:
                    51:be:9a:20:d5:eb:5f:de:a9:a8:72:f4:00:8d:39:
                    27:93:6b:f1:23:76:20:c9:e7:15:16:71:f7:46:f7:
                    2e:b6:68:fb:5b:c3:41:12:9f:7e:30:cb:bb:fd:76:
                    b4:67:71:e9:1c:36:30:92:68:e3:46:44:35:e3:ba:
                    d3:ca:df:9c:77:e2:d9:bd:37:df:38:3f:c5:da:c0:
                    37:be:c5:fc:96:ec:9d:82:af:33:c5:ae:d4:e7:e0:
                    1e:52:74:79:49:af:ff:ec:c4:03:07:1e:89:99:09:
                    ee:3d:2b:39:e8:5b:f1:5b:1b:f9:eb:71:2a:0f:df:
                    ea:32:77:e6:88:49:2a:15:ce:91:88:30:a5:af:ea:
                    61:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:33:A0:A1:87:BE:D5:14:07:52:33:2B:FB:99:5C:78:30:3A:1A:1E
            X509v3 Authority Key Identifier:
                keyid:6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/fTOgoYe-1RQHUjMr-5lceDA6Gh4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:72:a6:2a:f5:ce:bd:79:8e:7d:9e:6d:8c:9c:1b:c7:76:47:
         6b:6a:9e:7e:6e:29:3a:9a:49:89:93:98:0c:21:bd:f8:a0:89:
         fb:9d:58:1c:be:46:93:c3:03:84:86:2e:ff:13:88:92:1d:41:
         ad:8f:08:f4:79:8a:c3:46:a5:76:40:e0:04:02:bb:03:31:ae:
         7e:6f:7f:19:63:cb:4b:d2:53:af:70:e7:13:1c:0a:6d:fe:3b:
         a8:1a:5b:5c:3f:27:f8:a4:81:54:bf:d1:99:22:ce:c9:76:3d:
         8e:8e:fe:42:68:4c:55:48:c0:6a:28:47:e9:5a:5f:6a:3b:2f:
         63:c2:10:a3:2e:ed:f3:83:f8:cf:0b:e5:63:04:2a:5b:3c:a7:
         30:9e:fc:72:56:56:f7:58:81:29:c4:44:4a:00:29:e1:e9:61:
         82:87:23:0b:25:e8:84:cb:a7:8e:fe:41:24:53:55:f1:df:43:
         d1:10:c4:2b:d3:7c:f3:e5:43:10:ac:9c:af:34:1d:1c:7c:a4:
         1f:b9:5d:80:05:60:8d:fc:62:45:61:ac:e3:28:16:0a:8e:80:
         08:ac:74:da:d5:ed:9d:7f:5c:82:ee:7d:09:5d:9d:0b:51:ca:
         03:00:2b:18:2c:db:06:ec:51:39:02:5c:31:78:d0:3c:a7:ab:
         e5:db:45:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:21 2026 by rpki-client