This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/YwC9pKPBjvGZtmMsz8q7-L2iwUg.roa
File:                     YwC9pKPBjvGZtmMsz8q7-L2iwUg.roa (raw, json)
Hash identifier:          doEjRnjZRLGiYVoGRzQjHdhg1pJzAYP6ZgcVU+Bf/bE=
Subject key identifier:   63:00:BD:A4:A3:C1:8E:F1:99:B6:63:2C:CF:CA:BB:F8:BD:A2:C1:48
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       019B7C134C0124EC29CDD6526650A2FD1C08
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/YwC9pKPBjvGZtmMsz8q7-L2iwUg.roa
Signing time:             Fri 02 Jan 2026 00:19:58 +0000
ROA not before:           Fri 02 Jan 2026 00:19:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        46.34.60.0/24 maxlen: 24
                          46.34.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:4c:01:24:ec:29:cd:d6:52:66:50:a2:fd:1c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Jan  2 00:19:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6300bda4a3c18ef199b6632ccfcabbf8bda2c148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c3:04:2b:0c:d7:35:61:01:8e:b1:7d:90:35:
                    ac:45:bc:01:c7:17:48:fb:ba:c1:30:16:39:03:51:
                    42:47:ad:cd:9e:e6:11:c2:e2:e4:af:45:78:99:3d:
                    1c:cd:df:85:ee:1a:dc:cf:35:19:8e:0b:39:19:94:
                    b0:99:b4:cc:f5:cf:d2:b8:15:8b:cc:92:ef:7d:2b:
                    f5:99:5d:22:77:64:4a:1d:f4:39:09:d3:0e:08:91:
                    67:30:a6:45:67:82:8f:78:c3:96:31:44:a4:f1:28:
                    00:27:a4:e6:f8:0f:1f:23:b8:fd:49:49:6d:8a:95:
                    4e:e0:46:f8:12:01:53:ea:ab:b9:bb:d4:36:9b:0f:
                    f6:95:dd:6d:f6:80:8c:6c:0d:b6:73:a7:d9:a7:c0:
                    11:17:0b:e3:f0:a0:f9:59:4d:d6:02:6b:30:f0:f2:
                    61:8f:ff:bb:a9:4e:46:50:4c:cc:bb:1a:d2:0d:71:
                    e6:76:0c:70:91:07:72:28:59:df:9f:c0:9c:64:7a:
                    7d:c1:b4:aa:f5:bd:d2:63:0c:88:d4:f2:4d:e2:ed:
                    ff:0e:e6:0a:ee:e0:55:5e:f6:41:58:79:db:39:cc:
                    12:78:40:14:a9:61:f0:5e:6a:9e:6f:aa:0b:c8:68:
                    20:68:b2:95:cb:b6:75:a3:03:68:e8:f9:e6:10:d0:
                    df:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:00:BD:A4:A3:C1:8E:F1:99:B6:63:2C:CF:CA:BB:F8:BD:A2:C1:48
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/YwC9pKPBjvGZtmMsz8q7-L2iwUg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.34.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:8b:17:45:7f:ea:6c:8e:a7:d2:f7:60:cf:cb:5b:f7:fc:9f:
         55:a1:4e:0d:6c:79:eb:8c:f0:f7:82:c8:ff:7b:25:73:11:44:
         54:09:86:4f:3e:52:af:12:c4:e8:2e:74:ca:e8:06:c8:18:a5:
         de:29:7a:cd:ff:3e:c8:bd:92:af:e8:f0:2c:6b:23:ea:3a:d7:
         89:34:5a:18:6f:0e:0d:0d:7b:53:f0:3f:82:93:5e:37:5e:37:
         b7:79:0a:7d:07:32:b8:38:37:c2:68:2e:a6:84:77:85:7e:5f:
         5d:f9:d9:75:59:13:9b:42:1c:46:8f:d6:0d:76:00:35:c3:12:
         15:4f:ac:11:e9:d8:b7:26:19:6c:08:ee:ee:ca:74:fd:70:06:
         7b:da:d7:a7:b6:5c:7c:15:3a:d7:b0:6c:5d:75:cc:64:56:e0:
         c4:eb:6c:d7:14:44:8d:ba:6a:e8:e3:70:7b:cc:7b:75:4d:56:
         74:ec:a0:e7:91:28:f5:2f:f0:78:53:9b:dc:f2:7b:39:c8:22:
         47:d9:a3:f5:5d:ec:c7:db:66:8a:9c:d3:20:5d:71:cb:84:eb:
         e4:5f:ed:38:d7:d8:e4:f1:85:44:33:c6:30:b8:fb:34:1d:67:
         40:6a:ac:d7:12:d9:92:4e:91:63:ed:c3:3e:e6:d2:af:24:ed:
         07:74:d3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 00:11:50 2026 by rpki-client