This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/FGHSySotSpOKaNLpsAxEZbVXQws.roa
File:                     FGHSySotSpOKaNLpsAxEZbVXQws.roa (raw, json)
Hash identifier:          nxZE3ZEDAfrFSYoAOUMwq235qoOhi9CvADpYdOkFcZU=
Subject key identifier:   14:61:D2:C9:2A:2D:4A:93:8A:68:D2:E9:B0:0C:44:65:B5:57:43:0B
Certificate issuer:       /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial:       019B7AC900F6750DDC8E6E63E2AD4BB1634F
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/FGHSySotSpOKaNLpsAxEZbVXQws.roa
Signing time:             Thu 01 Jan 2026 18:19:11 +0000
ROA not before:           Thu 01 Jan 2026 18:19:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202013
IP address blocks:        46.235.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Jan 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:00:f6:75:0d:dc:8e:6e:63:e2:ad:4b:b1:63:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
        Validity
            Not Before: Jan  1 18:19:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1461d2c92a2d4a938a68d2e9b00c4465b557430b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:79:d8:51:64:79:0f:0a:37:23:a5:ed:a5:12:
                    4a:5c:6f:78:86:0f:f4:31:33:b1:65:f0:23:b8:f3:
                    36:ed:a1:a8:c6:6c:ec:7f:64:84:eb:24:1c:36:4e:
                    6e:2b:b6:25:ac:de:e4:b5:ea:a7:fc:86:e3:ff:e0:
                    88:c0:8e:5f:d9:39:0b:c2:1c:28:ab:b2:3d:c9:a7:
                    ed:d5:7e:ef:f2:22:a4:86:68:fb:fd:ad:e5:39:40:
                    40:43:40:ce:c6:f0:0c:fb:0a:a4:c0:96:fc:d9:32:
                    82:47:14:02:db:33:df:54:61:72:41:f3:59:5c:85:
                    ca:f7:ee:82:a0:f4:d3:47:e9:de:0f:36:7c:da:1e:
                    60:6c:99:88:3b:11:cb:e8:58:2a:bb:d0:23:e6:61:
                    97:e4:5b:4d:f8:5d:f6:ab:2b:ae:10:ee:86:73:8d:
                    c1:5a:38:3d:b3:ba:e8:ad:55:32:c7:40:f5:02:eb:
                    fd:8a:29:3e:62:cf:05:0b:25:97:2a:bb:10:14:96:
                    16:4d:34:32:e1:fb:62:96:bc:6e:e0:8e:dc:d3:61:
                    6c:09:b0:18:9f:08:e2:23:2a:34:11:1a:6c:6b:7c:
                    dc:13:f5:ab:d9:15:74:bf:dc:ac:50:5e:bb:b8:72:
                    2b:c7:d7:1f:ca:1c:e1:53:24:24:f9:6b:2b:4b:7c:
                    67:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:61:D2:C9:2A:2D:4A:93:8A:68:D2:E9:B0:0C:44:65:B5:57:43:0B
            X509v3 Authority Key Identifier:
                keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/FGHSySotSpOKaNLpsAxEZbVXQws.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.235.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:66:8c:38:55:b3:d2:86:aa:97:53:b1:aa:89:91:ff:ab:37:
         33:58:9b:35:9c:50:df:35:4f:5b:b4:d3:dd:46:2b:8e:cd:05:
         5f:15:a9:fc:c9:cc:2d:97:ab:f2:40:62:18:40:cd:b4:e6:e4:
         d5:f5:4e:f3:41:46:5f:54:4c:6e:16:d3:12:14:e3:e5:1f:fe:
         73:03:cb:8a:0a:cf:57:15:58:9f:69:d6:da:51:f3:9b:dc:94:
         37:56:4d:5b:d4:92:6d:7c:a1:c3:75:01:22:6f:f8:48:7b:d2:
         d1:4d:ba:92:22:1b:98:00:fb:6f:ab:f8:62:17:82:6c:e3:99:
         65:d5:b3:74:d2:40:f3:19:64:a0:5d:37:87:91:fb:63:83:de:
         48:96:f3:e2:3c:34:6a:f7:11:14:38:52:8c:fa:c5:1b:ef:14:
         6f:11:6f:cf:7d:b2:46:10:b8:fe:69:d4:69:81:4b:27:91:46:
         c8:e0:c8:c3:54:86:8e:3e:6a:7f:eb:84:2d:49:d4:2c:ce:a6:
         a3:80:e4:f2:ee:03:8f:83:d7:7e:43:90:a9:96:56:db:78:fb:
         37:bf:3c:5a:6e:18:3b:d8:fe:74:ec:0e:f3:ec:99:8a:62:61:
         fe:35:89:6b:39:d5:38:47:9f:67:00:6c:48:51:a7:94:3d:81:
         69:b1:7d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 19:14:30 2026 by rpki-client