This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/pcWMRWhYeiOy3kqkQxP424kAjSw.roa
File:                     pcWMRWhYeiOy3kqkQxP424kAjSw.roa (raw, json)
Hash identifier:          91t3lOCpz165XTACShSUX5kfMv7uJUtfiuBmjOM8WJQ=
Subject key identifier:   A5:C5:8C:45:68:58:7A:23:B2:DE:4A:A4:43:13:F8:DB:89:00:8D:2C
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       019B7C1353262FE5A0DA1077DD4F0EE13EB8
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/pcWMRWhYeiOy3kqkQxP424kAjSw.roa
Signing time:             Fri 02 Jan 2026 00:19:59 +0000
ROA not before:           Fri 02 Jan 2026 00:19:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209492
IP address blocks:        46.34.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 15:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:53:26:2f:e5:a0:da:10:77:dd:4f:0e:e1:3e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Jan  2 00:19:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a5c58c4568587a23b2de4aa44313f8db89008d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:16:ee:45:44:5e:76:a3:2b:1f:07:43:1d:80:
                    69:2b:df:8d:36:fd:9e:99:83:5d:d6:f5:cd:b9:d1:
                    46:5a:ab:13:7d:7f:7d:95:7d:d1:71:00:e0:2a:d4:
                    9f:ec:bf:23:6c:ea:fb:c4:71:d7:04:86:56:34:93:
                    8f:1b:7d:e0:e0:bb:c3:23:fe:1c:53:5a:2d:58:f3:
                    1d:62:ca:2a:af:1b:5a:ff:db:ca:90:d5:06:f2:b8:
                    31:1e:fa:bf:05:d0:9f:64:a3:0e:0d:be:5f:f2:64:
                    34:ab:b0:2a:49:87:c6:fc:fe:51:03:b0:5f:31:aa:
                    df:bc:b0:fa:b2:19:37:c0:c5:c7:0e:88:c1:32:32:
                    86:e8:03:90:bc:b6:11:7e:f4:e1:72:6e:9f:08:af:
                    be:82:3d:e8:95:1f:18:7c:f7:94:1e:af:af:c5:fd:
                    ff:ab:27:63:52:b7:92:8d:37:4d:ac:9c:65:18:09:
                    ba:6b:4b:9e:ac:4a:a2:81:30:08:43:42:2b:4b:28:
                    ad:07:6e:26:52:96:8b:72:a7:88:af:66:09:30:b6:
                    75:a1:2a:25:a1:7d:8b:69:cd:11:0b:d4:b5:f1:f7:
                    a9:98:ec:8c:f8:13:7b:c3:f0:14:9d:25:dd:bf:b0:
                    f6:65:13:d9:ab:b9:58:81:95:89:9a:9d:2d:a8:67:
                    5c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C5:8C:45:68:58:7A:23:B2:DE:4A:A4:43:13:F8:DB:89:00:8D:2C
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/pcWMRWhYeiOy3kqkQxP424kAjSw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.34.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:64:f2:32:ea:1a:5a:4b:e8:d4:84:46:3a:57:d8:b1:a6:30:
         05:fb:32:7a:2c:b7:db:ba:62:41:36:f5:56:57:b3:cf:31:fd:
         d7:db:39:98:5f:15:06:af:54:56:78:f1:af:fb:8d:15:f6:12:
         c5:3b:80:cc:96:d3:c9:c3:20:a8:cc:25:8e:a4:79:7f:23:c1:
         0c:6d:50:1f:18:ba:db:1b:f2:99:75:92:6f:38:14:ee:29:a5:
         d4:6c:5a:11:7f:af:38:d2:2b:2b:06:ea:07:9a:37:5d:6c:f3:
         5c:70:47:a7:54:63:da:5d:2c:f9:f3:e2:19:92:e2:c4:2d:01:
         9c:10:7b:02:57:f9:da:35:16:29:00:04:ec:9f:e3:27:83:f0:
         6a:77:52:1f:d3:34:74:47:42:fd:2d:c5:67:98:b0:63:26:49:
         b1:bd:1d:47:36:4e:dd:f9:6f:d4:fe:79:45:e5:30:76:09:c4:
         2d:c8:e4:20:d6:9b:59:16:b0:4f:5f:0d:6a:f8:97:20:bd:cf:
         85:29:6a:40:1b:44:25:38:41:a5:74:27:ea:55:ca:15:2b:bc:
         20:f6:9a:25:8d:3b:f9:ea:36:ee:a8:b5:67:f1:0e:15:ce:6c:
         2b:24:48:1d:99:e5:87:77:f1:60:38:e0:d6:25:3f:4f:b9:63:
         ad:8c:41:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:51:21 2026 by rpki-client