This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Fow_DRD0J9Sk-bBDpqDfNKsW1qg.roa
File:                     Fow_DRD0J9Sk-bBDpqDfNKsW1qg.roa (raw, json)
Hash identifier:          OKmdm7ysJvOteC9H/zvOdemCTeoLV8EABr4yQLYsMuA=
Subject key identifier:   16:8C:3F:0D:10:F4:27:D4:A4:F9:B0:43:A6:A0:DF:34:AB:16:D6:A8
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       019B7C134C28E9774133B5199B2189DAE4EC
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Fow_DRD0J9Sk-bBDpqDfNKsW1qg.roa
Signing time:             Fri 02 Jan 2026 00:19:58 +0000
ROA not before:           Fri 02 Jan 2026 00:19:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     5511
IP address blocks:        46.34.58.0/24 maxlen: 24
                          46.34.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:4c:28:e9:77:41:33:b5:19:9b:21:89:da:e4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Jan  2 00:19:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=168c3f0d10f427d4a4f9b043a6a0df34ab16d6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:4c:2c:6e:f6:db:b2:31:76:1c:8f:46:d0:
                    7f:df:f7:dc:6d:9c:3a:10:5d:62:02:3f:34:6c:3a:
                    db:9d:d3:d7:49:a0:0a:b9:f8:68:37:0a:de:bf:59:
                    e8:30:ad:15:a7:0b:36:8b:9f:b4:2d:53:92:52:a1:
                    79:ec:cb:5f:12:a1:9c:50:73:b1:01:ef:26:a3:0a:
                    03:72:51:1e:cf:92:5c:e3:4f:9c:58:b5:29:eb:70:
                    ff:7b:d3:cc:71:e8:e4:95:fe:5e:56:82:b2:32:b9:
                    fa:0c:a2:14:69:28:00:f6:8a:fb:cd:19:16:e8:4b:
                    03:61:79:50:70:ba:14:a4:f6:0f:7f:f9:06:f0:f4:
                    55:c9:f1:66:fe:dc:63:cb:4b:4e:9b:57:73:d7:3f:
                    dd:6f:47:b2:d3:bb:01:92:c0:c4:59:b6:31:09:d7:
                    d1:43:41:58:54:66:a9:90:6f:7d:27:7e:f2:48:05:
                    b3:8d:4f:14:7c:58:a2:0c:bc:d6:37:39:46:4c:62:
                    d4:6f:e1:6a:9e:48:2e:2c:55:31:a0:60:03:85:4e:
                    5b:85:db:a2:d6:83:08:0e:e4:c7:49:91:3c:7d:ce:
                    d2:54:1f:b5:fc:c7:84:9b:89:30:a1:fd:ed:f7:2d:
                    63:8f:9f:b2:eb:dd:cf:e4:f0:31:06:0d:d0:3c:50:
                    15:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8C:3F:0D:10:F4:27:D4:A4:F9:B0:43:A6:A0:DF:34:AB:16:D6:A8
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Fow_DRD0J9Sk-bBDpqDfNKsW1qg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.34.58.0/24
                  46.34.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:5c:46:dd:0d:b5:f0:03:4b:fc:1d:f7:b3:74:e5:ba:d1:a3:
         f4:c0:0f:92:72:7c:63:f0:61:d4:5a:96:39:bc:b3:4d:25:c3:
         19:68:79:5a:f1:6e:dc:3f:a8:73:a3:d7:fa:70:64:60:f2:b0:
         0c:5f:58:51:16:ff:25:10:d0:f5:fc:d4:91:0e:f9:2c:ee:75:
         b6:88:7f:99:4e:de:19:fb:53:3f:41:96:f9:1f:64:ee:5a:e4:
         a1:01:b3:42:44:e2:5f:f7:f9:4a:51:07:91:40:06:ab:16:94:
         c0:33:5e:67:4b:e5:84:ef:c2:bd:b4:19:1d:90:86:ea:cc:43:
         e9:ec:51:63:ef:89:ee:68:d8:9f:d9:ff:97:52:66:5e:32:c4:
         49:7d:4c:c5:f8:0a:17:59:e1:d8:6d:ba:db:e5:e9:c2:a0:58:
         67:76:4e:3d:b0:22:22:2d:6b:b0:a3:66:fc:dd:0e:61:a4:8c:
         ff:c2:02:6c:71:1c:e3:36:0e:6f:de:4e:87:5e:98:33:f9:c6:
         3f:99:8c:08:e1:f7:f6:d0:29:72:ba:19:59:32:2c:b8:bd:f9:
         f6:39:55:96:0e:5c:39:2f:91:1d:1a:9e:91:41:28:6f:09:07:
         a4:97:88:e9:b4:78:67:18:7e:ac:20:bf:8c:22:22:ea:fc:de:
         be:93:3b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:30 2026 by rpki-client