This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/fXIuRdpdCqaDZDgiKz2t2b5oySY.roa
File:                     fXIuRdpdCqaDZDgiKz2t2b5oySY.roa (raw, json)
Hash identifier:          Gvye9Ee1GExEttsOLXh4x8Ij0Kt8F9u/iEYkec6XgEI=
Subject key identifier:   7D:72:2E:45:DA:5D:0A:A6:83:64:38:22:2B:3D:AD:D9:BE:68:C9:26
Certificate issuer:       /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial:       019B27423806AFE25DF4CDD311CE5F4AF221
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/fXIuRdpdCqaDZDgiKz2t2b5oySY.roa
Signing time:             Tue 16 Dec 2025 13:03:29 +0000
ROA not before:           Tue 16 Dec 2025 13:03:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     51219
IP address blocks:        93.189.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 04:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:42:38:06:af:e2:5d:f4:cd:d3:11:ce:5f:4a:f2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
        Validity
            Not Before: Dec 16 13:03:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7d722e45da5d0aa6836438222b3dadd9be68c926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:85:c9:15:ef:ec:50:ce:f8:20:25:ad:68:
                    5d:b5:3d:80:9f:3d:9f:7b:cc:9e:84:3a:ba:b1:e5:
                    d4:44:fa:79:04:f6:4a:ee:fd:5b:27:a5:77:5f:8e:
                    5d:af:60:a5:f9:80:87:5c:7d:f4:d7:02:ab:27:03:
                    56:51:bb:57:b2:6a:3c:da:be:c6:94:92:e4:19:14:
                    ce:92:e5:9d:2e:41:57:bf:be:e2:a8:42:0e:0b:b1:
                    0f:2e:72:9d:93:ca:37:56:ff:84:b2:1b:99:9e:e0:
                    5e:fd:1f:9f:ed:21:4d:15:62:9c:83:64:1b:85:2f:
                    ba:53:27:98:c9:9c:df:fd:e9:d9:68:f4:26:0b:f7:
                    02:b8:3a:fb:d1:8f:a3:33:35:9d:1a:dc:bb:4c:bf:
                    61:71:6d:d0:fb:c1:02:1e:00:67:83:3f:0f:95:59:
                    8f:d5:b3:bd:15:bb:93:d9:1c:8b:38:0e:73:47:c8:
                    01:a0:02:08:30:0e:62:b1:17:a9:ed:d9:4b:f5:2a:
                    65:7f:c6:0f:52:e6:5a:0d:00:25:4e:14:d5:24:c7:
                    fd:d0:06:7d:3d:ad:10:19:ac:5f:59:f7:dc:1c:1a:
                    4c:19:00:81:fc:ce:23:de:5d:eb:bc:19:f1:a0:7d:
                    07:3f:b1:cb:1e:da:65:9f:0b:76:30:51:cf:f0:be:
                    53:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:72:2E:45:DA:5D:0A:A6:83:64:38:22:2B:3D:AD:D9:BE:68:C9:26
            X509v3 Authority Key Identifier:
                keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/fXIuRdpdCqaDZDgiKz2t2b5oySY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.189.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:da:56:b3:4f:69:11:5b:a2:01:cf:36:32:90:32:fa:3d:76:
         d8:96:19:b2:5b:87:f2:c3:e6:15:ee:68:22:ed:8d:f6:26:85:
         7c:8d:57:3a:ad:cd:ce:a9:a6:7b:00:24:8a:73:66:4b:96:b4:
         20:96:f9:0b:d4:b3:41:59:91:3e:a8:58:55:63:33:a4:ce:e8:
         30:8d:1e:85:d4:56:43:7e:44:f6:01:08:67:15:f6:20:9f:f4:
         58:2d:39:24:76:57:e5:ec:e5:35:e2:44:df:db:b9:43:30:2e:
         ba:84:1c:2e:ab:3e:1e:a4:9e:5e:af:c5:07:3f:77:74:fe:f6:
         58:4d:5e:e3:eb:f6:6f:04:57:bc:12:fc:9b:2a:53:85:c9:f6:
         ff:ef:ae:bd:45:44:fe:c0:33:1b:c9:44:c1:51:a2:61:14:34:
         30:6f:7c:32:c0:86:17:00:22:79:2f:14:ad:98:e2:f6:86:28:
         19:9b:ea:17:21:ec:79:5c:1c:c9:cf:dc:4b:8b:f4:99:b1:3d:
         07:f9:d5:10:e6:8c:17:f0:71:03:18:f3:c9:7b:61:29:93:fe:
         50:48:cc:0c:72:c1:69:e1:ea:b8:4d:c8:ba:32:52:ea:46:12:
         90:a5:07:f8:41:08:43:d0:29:57:20:1e:bb:58:e9:8c:6b:43:
         e0:24:96:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:28:20 2025 by rpki-client