This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/fNAR_JPkkC491YU-kT_ByTYIEm4.roa
File:                     fNAR_JPkkC491YU-kT_ByTYIEm4.roa (raw, json)
Hash identifier:          sYR/Ti3r2dDvrcuUCgrf8MhHNZLnx4vKqJjpp3V/CwA=
Subject key identifier:   7C:D0:11:FC:93:E4:90:2E:3D:D5:85:3E:91:3F:C1:C9:36:08:12:6E
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       019B7C134F014D17A1E969833566367D7DD5
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/fNAR_JPkkC491YU-kT_ByTYIEm4.roa
Signing time:             Fri 02 Jan 2026 00:19:58 +0000
ROA not before:           Fri 02 Jan 2026 00:19:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9009
IP address blocks:        46.34.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:4f:01:4d:17:a1:e9:69:83:35:66:36:7d:7d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Jan  2 00:19:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7cd011fc93e4902e3dd5853e913fc1c93608126e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:72:51:21:d2:e6:4f:bd:18:ed:1a:28:8c:3d:
                    55:cc:17:7e:6e:ea:1b:12:e9:66:30:38:29:d6:55:
                    13:b3:2f:04:d7:2f:9e:de:72:c0:32:cf:9e:05:da:
                    d3:73:75:f0:ee:d2:97:2a:13:6e:26:d7:4b:a5:2c:
                    88:e3:3d:57:86:99:7a:5d:bd:19:d4:d2:69:83:fa:
                    4d:58:0b:97:0b:0b:ac:67:de:72:e8:14:e6:39:7d:
                    2c:f6:08:d1:da:8b:c6:ac:07:37:47:95:dd:25:31:
                    4a:07:09:3d:54:ed:32:3e:ad:bc:5c:79:0d:5f:d8:
                    38:f7:a7:e3:7b:68:6b:1e:1e:af:f0:91:07:9c:fb:
                    a4:c6:21:1f:0c:e3:f3:5c:76:47:39:73:ba:a4:6d:
                    f7:a9:68:74:2a:78:09:d5:9c:20:9b:3a:35:18:e4:
                    f9:d2:a7:09:72:d3:89:d1:18:6f:c2:d0:c4:d1:77:
                    17:0b:b4:31:5a:a1:63:43:f1:06:fa:25:6c:24:eb:
                    7f:3f:82:aa:6f:11:da:09:bb:5c:68:f8:29:26:f4:
                    d4:a7:e0:0f:59:aa:5f:b0:e8:50:4a:bf:ea:1b:90:
                    11:17:a6:cf:8d:b1:31:bc:7f:16:ea:84:f5:b1:b7:
                    02:de:ed:e8:68:5b:7b:e8:70:a0:be:81:52:57:4b:
                    dc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D0:11:FC:93:E4:90:2E:3D:D5:85:3E:91:3F:C1:C9:36:08:12:6E
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/fNAR_JPkkC491YU-kT_ByTYIEm4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.34.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:8f:79:47:cc:03:2a:c6:9f:ca:71:e1:f0:4b:ca:26:6c:76:
         aa:a0:23:b5:ad:89:ed:b9:82:ba:89:d5:8e:70:94:32:fe:15:
         3f:d1:6f:26:b6:70:ff:99:78:92:9c:1c:74:b2:e0:38:7f:df:
         3e:43:09:60:57:cc:05:41:7d:7d:02:b0:ba:3f:f3:ae:d8:05:
         8f:a9:9d:bc:4b:10:07:91:2c:9a:ee:e7:af:27:d3:d2:87:47:
         54:79:7c:5a:5f:9f:8f:38:c2:7b:31:ed:35:a3:b2:8e:1d:aa:
         89:63:c2:17:f0:7d:e0:6b:a6:b0:9f:e5:6d:fa:56:69:0f:65:
         74:04:49:b0:c6:84:68:de:8f:a7:ee:0f:fb:9b:2c:e7:42:b6:
         7b:6b:e5:f1:72:06:06:f4:c8:55:44:36:f2:72:95:39:9d:da:
         f8:84:a0:20:56:9d:f2:0f:0e:64:7a:7d:c6:b6:4b:97:5e:66:
         b2:09:ff:ac:7d:f2:e1:43:7c:ad:77:fb:41:58:c0:c7:53:f8:
         14:61:e1:1f:93:44:da:ec:4e:c8:5d:08:1a:b8:4f:7d:19:19:
         ff:8e:d2:1f:c4:1b:66:a5:56:5d:e2:ca:8c:64:c4:9b:9a:b4:
         13:67:19:a7:63:4e:9f:52:7d:2b:3e:c3:45:a7:1a:4b:d6:87:
         93:07:a0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:53:52 2026 by rpki-client