This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/7YFanazp_Hk_jwwFignJKO3DKAI.roa
File:                     7YFanazp_Hk_jwwFignJKO3DKAI.roa (raw, json)
Hash identifier:          nBudYXC1l0ZOKMta9ie5NuhQi7PKlNbLGiH6NUxthx8=
Subject key identifier:   ED:81:5A:9D:AC:E9:FC:79:3F:8F:0C:05:8A:09:C9:28:ED:C3:28:02
Certificate issuer:       /CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Certificate serial:       019B7BA3A5426C55A860366DA2FD0F92EAC7
Authority key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/7YFanazp_Hk_jwwFignJKO3DKAI.roa
Signing time:             Thu 01 Jan 2026 22:18:00 +0000
ROA not before:           Thu 01 Jan 2026 22:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15404
IP address blocks:        46.28.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:a5:42:6c:55:a8:60:36:6d:a2:fd:0f:92:ea:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
        Validity
            Not Before: Jan  1 22:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ed815a9dace9fc793f8f0c058a09c928edc32802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b8:b8:05:0c:c3:55:a9:35:58:dc:e7:a6:ca:
                    53:31:27:d1:24:df:25:33:53:d7:d5:8e:91:75:3a:
                    f7:d1:20:03:ea:a5:36:43:6f:4c:03:36:35:ec:ef:
                    a1:d0:8d:8d:10:be:eb:39:04:41:f3:01:b3:3a:4f:
                    d3:0f:3e:2c:eb:29:5c:40:e0:9f:7c:c0:dd:dc:2a:
                    25:d3:3f:36:12:cf:2e:9a:a2:a1:fc:3f:40:38:04:
                    3b:c0:66:6a:00:01:40:ce:0c:d0:a3:4c:7d:a4:e1:
                    63:0b:90:3e:21:bb:ef:b3:b5:b1:a4:5c:17:ea:2f:
                    f7:4d:d6:e6:4a:80:4b:f9:46:bb:3e:8a:8c:86:98:
                    91:96:25:25:b0:c3:10:2d:33:55:5d:87:8b:8f:58:
                    42:8e:24:32:c1:c1:94:74:68:44:86:41:7c:f5:75:
                    42:84:86:6b:31:d7:a1:08:ea:5d:f6:11:ae:34:11:
                    ac:a0:04:58:63:ea:5f:6a:81:50:56:17:97:3e:97:
                    00:13:0b:19:da:48:ef:55:8f:76:08:c5:7f:77:f8:
                    3b:6d:5e:02:10:d3:04:84:d5:d6:42:3a:61:87:b6:
                    24:72:ef:a2:30:3e:5b:b3:58:c0:11:ff:a4:c6:9d:
                    bf:36:fe:03:00:50:eb:2e:fb:bb:8c:81:bc:02:de:
                    72:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:81:5A:9D:AC:E9:FC:79:3F:8F:0C:05:8A:09:C9:28:ED:C3:28:02
            X509v3 Authority Key Identifier:
                keyid:A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/7YFanazp_Hk_jwwFignJKO3DKAI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.28.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:52:8d:fd:94:c8:08:99:f1:cd:a5:ea:c2:23:50:04:bf:85:
         8e:e0:5a:f5:4d:c1:7f:a3:bb:8a:e7:bb:a2:bd:54:7b:9e:cf:
         d0:3d:40:0b:74:50:0d:4c:06:10:73:9b:f6:b1:9b:63:a2:61:
         70:4c:3b:d8:f5:a3:29:8a:13:0f:1e:c0:d8:42:eb:a9:79:51:
         ec:d8:d1:e5:db:4d:49:d3:5f:81:2f:75:9c:bb:06:67:45:21:
         23:24:69:8f:04:c4:7e:4e:99:e4:8d:2a:ac:71:03:e4:ef:83:
         44:9e:6d:04:07:fc:4b:b0:2b:55:b4:ed:36:e8:a6:f9:b5:8c:
         3d:8e:34:a8:bc:ad:19:ea:99:73:17:a4:cf:c9:2c:dc:a9:a8:
         ae:b3:a0:54:2b:d0:83:6f:b9:16:a9:c2:22:13:e1:c1:19:1a:
         a1:9d:76:a3:09:cf:6b:25:0f:b3:2f:08:22:2c:b1:cc:97:a2:
         96:57:9c:d2:91:fd:a8:11:65:5f:41:83:69:0b:d5:7a:32:56:
         90:39:dc:1b:a0:23:65:e3:c4:65:e4:ee:65:60:df:b9:eb:62:
         53:24:52:f3:b4:f3:05:86:38:40:5e:4d:dd:c2:ce:d4:82:ba:
         6c:fa:5f:f2:85:11:ca:15:a3:ed:a8:dd:10:ea:b4:ca:dc:3c:
         4f:83:2d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:17:03 2026 by rpki-client