This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/_Is55eprYJHGzzgi40LxH_TrZqk.roa
File:                     _Is55eprYJHGzzgi40LxH_TrZqk.roa (raw, json)
Hash identifier:          HP9cJa1h/LUEOsTzpzwnnWglXx+wz1k77jR/Bchp47k=
Subject key identifier:   FC:8B:39:E5:EA:6B:60:91:C6:CF:38:22:E3:42:F1:1F:F4:EB:66:A9
Certificate issuer:       /CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4
Certificate serial:       019B79EC6CA2470E0D6E22F3254C14F52C5A
Authority key identifier: B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/_Is55eprYJHGzzgi40LxH_TrZqk.roa
Signing time:             Thu 01 Jan 2026 14:18:16 +0000
ROA not before:           Thu 01 Jan 2026 14:18:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204693
IP address blocks:        2a02:e220:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 11:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:6c:a2:47:0e:0d:6e:22:f3:25:4c:14:f5:2c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4
        Validity
            Not Before: Jan  1 14:18:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fc8b39e5ea6b6091c6cf3822e342f11ff4eb66a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:48:5c:1c:cf:dd:22:79:d5:3b:4c:55:95:
                    78:09:ab:7e:26:11:84:c3:74:01:cc:58:f9:d0:14:
                    36:e5:06:e6:61:45:95:90:ee:b6:f2:09:9c:bf:49:
                    2b:73:1e:b6:91:47:e4:2a:3b:b7:55:c9:62:fd:27:
                    ee:b7:2b:fe:0e:e7:d3:19:88:79:4a:6a:4b:8a:5c:
                    a1:b5:a3:b2:71:f1:fe:0a:ab:d6:28:ec:bb:4b:fc:
                    e5:d4:d5:69:d9:b0:27:9a:75:68:64:7c:95:ad:c5:
                    18:81:3e:7e:95:42:c7:6e:29:3b:da:81:ab:58:3c:
                    79:40:40:7a:21:eb:70:0d:01:4a:66:9f:c8:cd:b1:
                    4d:31:d1:14:6d:27:d0:c4:c2:a4:4d:2c:ff:cd:6c:
                    ce:3c:b0:46:b5:a5:67:91:36:d9:d1:93:32:9c:1c:
                    34:25:ca:89:c3:a2:26:4f:65:40:9f:15:a5:7b:ab:
                    77:d6:07:4b:23:bf:4c:52:9d:be:8a:f4:b6:57:57:
                    1b:a4:60:5d:41:84:0f:40:da:a3:15:de:90:49:15:
                    aa:4b:60:14:17:7e:a7:05:a6:fd:ab:cb:1b:ad:27:
                    0e:99:6f:b6:2d:df:8f:06:a9:49:e4:6a:b0:17:c5:
                    7d:81:8b:d0:2f:8d:0d:c5:50:df:db:a1:fc:e8:b3:
                    be:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8B:39:E5:EA:6B:60:91:C6:CF:38:22:E3:42:F1:1F:F4:EB:66:A9
            X509v3 Authority Key Identifier:
                keyid:B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/_Is55eprYJHGzzgi40LxH_TrZqk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:e220:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:b8:6d:64:3c:2e:e8:33:8e:0e:8a:6b:60:21:44:25:1a:aa:
         95:0c:2a:9c:6f:0e:b0:b0:1f:74:95:f0:db:c7:84:0d:61:41:
         53:f3:e9:16:18:bd:02:98:de:65:52:21:a0:a4:67:95:5c:25:
         b1:79:b3:97:e6:e0:c8:69:99:08:ab:c0:df:55:e5:54:c6:6a:
         ef:bb:ad:50:62:b6:8d:07:23:0b:a8:9a:13:6f:3d:b9:48:8b:
         cd:d5:36:28:ad:e9:d7:5b:af:67:8f:76:b5:d8:2b:f4:4b:39:
         ce:2a:ff:1d:8b:73:7a:f3:01:22:20:a6:60:ed:67:eb:c5:db:
         06:8b:51:37:a3:d6:42:f8:e8:73:5f:dc:e1:d7:40:3c:0f:29:
         75:fe:45:e1:f4:8e:ed:ed:de:56:a8:c2:b6:5d:70:25:e9:ea:
         63:97:39:31:c0:32:bd:2d:ab:f3:64:1f:a3:20:73:5a:41:e0:
         ff:ef:c6:fe:da:3b:7e:ca:34:a8:03:37:2a:5d:c9:ee:5c:b4:
         4f:90:26:f7:b9:dc:35:5a:e4:a7:a6:14:1f:44:ee:e7:f9:3c:
         cc:2b:6f:ed:39:c3:76:06:7a:77:d3:0c:fb:25:69:d4:a2:e9:
         aa:73:17:83:cf:47:a6:49:b3:63:d6:a3:96:e5:50:68:f6:a7:
         2e:58:f9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 15:59:12 2026 by rpki-client