This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/FilFuxaHNlZodlAIrDOhTmh6ldo.roa
File:                     FilFuxaHNlZodlAIrDOhTmh6ldo.roa (raw, json)
Hash identifier:          uhGLiCFEBOn6o6kgW6SCO1d0PO9VmCMZayR7rM7fOKo=
Subject key identifier:   16:29:45:BB:16:87:36:56:68:76:50:08:AC:33:A1:4E:68:7A:95:DA
Certificate issuer:       /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial:       019B7835525A72CC5F2EB4F7082EB39516B6
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/FilFuxaHNlZodlAIrDOhTmh6ldo.roa
Signing time:             Thu 01 Jan 2026 06:18:39 +0000
ROA not before:           Thu 01 Jan 2026 06:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16645
IP address blocks:        46.236.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:52:5a:72:cc:5f:2e:b4:f7:08:2e:b3:95:16:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
        Validity
            Not Before: Jan  1 06:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=162945bb1687365668765008ac33a14e687a95da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1d:a1:4f:29:3f:55:b1:43:2e:68:b8:ad:c2:
                    52:e4:81:c6:84:dc:c7:c4:e4:e7:0a:04:be:ca:97:
                    67:bd:93:56:a2:0f:66:ec:d9:59:98:db:a5:2f:3f:
                    e3:7e:65:af:f4:f4:fe:15:6a:a1:1e:03:52:43:98:
                    cf:46:0f:62:e8:99:6f:3b:38:24:46:e5:73:e2:c0:
                    7e:bd:9e:ec:53:56:5b:2b:cc:3e:0b:1a:25:97:8d:
                    0c:09:a0:52:96:50:96:b8:22:60:6d:d4:8b:66:b7:
                    52:f3:f3:15:dc:60:52:f0:87:87:e2:1f:b9:49:37:
                    d9:fb:f9:83:92:b6:b2:f3:db:b1:0d:5c:0b:aa:27:
                    1f:aa:eb:ab:2f:da:95:98:c0:79:74:f5:16:2a:f4:
                    ca:da:5b:f3:03:1e:da:06:26:ac:bb:67:b3:a2:f2:
                    a5:0c:51:57:67:71:a1:0c:28:de:38:bd:c0:e8:71:
                    08:29:7d:16:3d:4f:e5:82:55:2d:6f:81:ba:c2:63:
                    b0:94:bc:d5:f6:2e:34:97:3c:7a:41:1e:f7:5a:22:
                    82:e1:55:d3:d1:96:01:8a:69:35:20:ab:5a:14:41:
                    f7:d1:89:d5:80:17:55:d1:1e:fe:13:9f:d9:dd:ad:
                    a8:d4:43:67:48:a6:d5:96:df:79:7f:f5:1a:14:c5:
                    aa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:29:45:BB:16:87:36:56:68:76:50:08:AC:33:A1:4E:68:7A:95:DA
            X509v3 Authority Key Identifier:
                keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/FilFuxaHNlZodlAIrDOhTmh6ldo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.236.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:4b:32:93:3d:7d:6c:06:3a:19:c3:bf:11:26:09:40:89:9d:
         9f:50:3e:f8:11:b8:a2:ce:5d:0b:fd:29:9a:7a:6d:33:9e:41:
         80:9f:78:ed:78:9a:fd:c3:88:9e:c0:53:25:64:b6:16:15:34:
         fb:27:0e:bc:49:70:12:30:a4:c9:35:45:2b:8e:a3:da:8b:1f:
         8f:14:09:7e:91:25:7f:6b:4e:ef:60:8d:a5:b0:37:f6:9c:2f:
         2d:32:0f:9f:11:4a:ff:42:72:57:97:92:0e:26:17:f2:5c:2c:
         61:2c:93:9d:ca:9e:ab:80:65:fd:d9:d8:b8:b5:52:28:2f:09:
         a5:9a:88:8c:9d:e6:dc:2a:dc:3f:58:77:ed:fd:e6:b1:a5:6b:
         63:6d:52:96:3e:72:6f:ab:f6:8a:f4:c3:55:bd:cb:7f:e1:be:
         f4:0a:40:21:1a:62:b6:25:24:6a:4c:b2:fd:69:3e:e2:79:9b:
         62:c3:e3:4e:fd:17:4c:44:9b:52:be:5b:8e:d3:51:01:29:50:
         3d:ff:c5:e3:5d:99:ef:26:d1:e1:a1:15:82:80:fe:99:e1:53:
         3a:9f:95:1f:81:e8:b4:c3:e7:60:5f:1a:18:0a:9a:4d:59:a7:
         92:71:5e:a2:f3:e4:00:d8:ae:e4:37:2c:4f:d2:ab:bc:c0:ca:
         fd:6a:0c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:14:00 2026 by rpki-client