This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fgo4Miqb4jQslCprOBMg8cztn_M.roa
File:                     fgo4Miqb4jQslCprOBMg8cztn_M.roa (raw, json)
Hash identifier:          k2qxBmnHr37Ha0qsg4GXVszV/tuvReEZWFX64hLz/l4=
Subject key identifier:   7E:0A:38:32:2A:9B:E2:34:2C:94:2A:6B:38:13:20:F1:CC:ED:9F:F3
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019B1211BA2257B15C8EC9A2DF63007D990D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fgo4Miqb4jQslCprOBMg8cztn_M.roa
Signing time:             Fri 12 Dec 2025 10:18:30 +0000
ROA not before:           Fri 12 Dec 2025 10:18:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214238
IP address blocks:        212.192.0.0/24 maxlen: 24
                          212.192.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 17:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:11:ba:22:57:b1:5c:8e:c9:a2:df:63:00:7d:99:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Dec 12 10:18:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7e0a38322a9be2342c942a6b381320f1cced9ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:71:62:72:9c:75:f8:2a:f0:81:4f:9b:11:
                    21:30:00:a0:9b:ff:f9:68:5a:0b:f8:ab:6b:0b:b8:
                    c3:23:2d:77:1c:56:bb:b4:ce:be:da:7d:c3:35:67:
                    af:92:21:14:23:d9:db:a9:07:72:c8:f5:56:86:7f:
                    37:c6:43:96:19:e4:f8:8c:e9:45:d3:e8:dc:29:18:
                    0e:0e:68:84:ef:31:38:a5:f0:28:60:b1:f7:ef:27:
                    ed:8d:89:41:f9:f5:33:a9:40:fb:f9:88:2a:95:0b:
                    1a:f4:c6:aa:da:26:17:a8:e8:ac:e1:0f:90:ed:94:
                    b3:19:f2:1b:dc:ec:d7:55:fe:72:b0:37:11:fe:e6:
                    26:e9:e4:f3:ae:22:e1:cd:e0:d7:83:e7:c3:8c:d6:
                    26:aa:1f:fc:14:f7:da:bb:75:bf:b3:4c:37:c2:dc:
                    b8:1b:17:ba:24:4e:68:e1:89:63:d7:88:91:ee:1d:
                    a7:61:df:d6:50:07:4a:db:11:81:d8:45:ef:0c:a3:
                    5c:3e:de:82:fb:d6:8d:17:75:53:df:47:1e:63:d5:
                    2b:db:7a:31:07:09:ac:5e:9b:20:da:4a:36:b6:de:
                    2f:16:64:5a:98:69:8d:db:d5:fe:24:c3:05:cc:30:
                    79:c4:8a:fb:0d:53:c4:31:f2:03:1f:c0:fc:06:74:
                    71:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0A:38:32:2A:9B:E2:34:2C:94:2A:6B:38:13:20:F1:CC:ED:9F:F3
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fgo4Miqb4jQslCprOBMg8cztn_M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.192.0.0/24
                  212.192.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:a5:55:29:8c:ad:b4:13:87:83:9a:9f:b4:c3:7c:99:91:a2:
         bf:31:5e:db:68:99:27:ba:8f:b5:3b:8b:b5:59:88:a5:b2:b2:
         c6:3b:8f:e0:e1:09:d4:0e:ed:ad:ae:71:30:c6:ec:84:67:8f:
         68:f4:14:e2:ff:d2:c0:7f:93:de:41:95:57:c0:a4:f5:0a:a2:
         b6:7c:aa:9b:03:a3:39:40:a6:a7:db:35:19:78:fb:2b:3d:9f:
         f2:15:16:25:c3:d7:9d:19:59:a5:2a:8c:b6:b2:2d:8b:98:2a:
         09:3b:0f:e2:3e:52:3d:56:aa:87:c7:bc:3f:4c:be:5e:7f:09:
         38:68:ed:04:9f:a4:67:db:34:ee:0f:d2:ff:66:e3:a8:fa:35:
         f1:bf:bd:91:dc:61:69:a8:78:eb:a6:00:a0:77:1e:0d:15:17:
         51:77:8b:fc:1d:76:19:b5:d1:1f:88:35:93:9b:98:d3:9d:03:
         c0:50:f5:61:df:1e:b8:2f:62:02:c0:e4:cf:24:85:30:74:3c:
         a8:3e:f6:41:fb:8e:99:d1:fe:16:fb:08:6b:45:a6:d6:0b:50:
         e5:59:b6:db:81:75:02:95:d9:c2:68:94:2b:3c:5d:0e:65:fb:
         9a:d1:9a:be:e8:47:79:be:9f:5e:e2:ef:d4:cc:36:a8:03:2d:
         18:10:4d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:51:57 2025 by rpki-client