This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/FpoddKCGr-EmD3JxWU1OzHrVJLc.roa
File:                     FpoddKCGr-EmD3JxWU1OzHrVJLc.roa (raw, json)
Hash identifier:          ROi2eo4TqhcCCb7fNgBCVSOXbPuRbOQtHq9ApAAA5F4=
Subject key identifier:   16:9A:1D:74:A0:86:AF:E1:26:0F:72:71:59:4D:4E:CC:7A:D5:24:B7
Certificate issuer:       /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial:       019B1206BB9AEAA5BED493825AB1E73EEE13
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/FpoddKCGr-EmD3JxWU1OzHrVJLc.roa
Signing time:             Fri 12 Dec 2025 10:06:29 +0000
ROA not before:           Fri 12 Dec 2025 10:06:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215152
IP address blocks:        178.210.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:06:bb:9a:ea:a5:be:d4:93:82:5a:b1:e7:3e:ee:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
        Validity
            Not Before: Dec 12 10:06:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=169a1d74a086afe1260f7271594d4ecc7ad524b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b5:a8:76:7c:b3:a6:2a:6b:f7:dc:31:c9:48:
                    d9:7d:31:ac:04:38:56:cd:9e:5a:17:d1:a4:aa:4d:
                    d3:7f:87:83:2c:a9:0d:48:fe:34:69:c1:7d:62:e3:
                    7d:f3:49:28:f1:29:de:fc:8a:cf:6b:0b:fd:ca:7f:
                    48:58:59:5b:d2:ca:ba:69:9e:b2:67:c5:68:6e:98:
                    b4:c0:57:03:c8:cd:a5:6e:65:f1:8d:e9:42:7a:b7:
                    5a:61:08:d8:05:0a:d6:8d:f2:99:c9:ab:cf:13:02:
                    13:22:25:9e:20:ee:47:31:c2:3b:83:d1:e0:9d:e8:
                    cb:b1:de:ca:fb:60:8f:7b:e3:cb:24:fa:de:2f:e4:
                    d8:7b:a6:ab:08:e5:96:f0:ac:c7:48:c0:07:3b:87:
                    b7:40:66:83:19:77:f7:a7:48:cb:87:e9:80:b6:d8:
                    c8:6d:a0:ed:d1:65:09:8a:0a:08:d3:4a:36:16:1d:
                    f5:71:ea:b8:bf:4c:ff:d0:bb:f7:d9:9f:6a:f4:48:
                    d6:02:b1:ea:9f:d0:33:64:1c:e2:db:bd:7a:de:04:
                    b4:93:1c:ce:fc:71:fd:ba:1d:80:cd:e7:25:69:f3:
                    6d:a3:39:3b:a5:a9:36:d1:a7:a2:d8:56:0a:43:87:
                    9a:5c:41:c4:1a:df:2d:9d:06:0d:85:ad:36:90:29:
                    94:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9A:1D:74:A0:86:AF:E1:26:0F:72:71:59:4D:4E:CC:7A:D5:24:B7
            X509v3 Authority Key Identifier:
                keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/FpoddKCGr-EmD3JxWU1OzHrVJLc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.210.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:d4:62:bf:c0:a0:f5:93:b8:6b:8b:70:eb:0a:ea:32:83:7a:
         8d:35:9d:bf:39:4c:49:8b:b0:35:79:47:1b:35:70:7e:b4:a2:
         b3:3e:4d:7d:44:e7:50:0c:26:6c:1a:30:71:05:cc:22:90:d5:
         0b:23:ea:82:11:1a:b1:f1:7f:0f:8f:94:2d:30:4d:fb:83:82:
         3e:cd:d7:81:f1:c3:b4:2d:16:69:11:5a:26:44:19:ad:da:6c:
         80:da:a4:25:87:64:65:57:14:4f:99:fa:38:c0:f3:c7:c6:5f:
         be:29:2d:cf:35:60:2a:4b:d5:60:ce:91:ff:18:2b:dc:66:92:
         0e:66:3f:94:9e:a9:b1:33:bb:58:7d:c9:a0:df:12:b4:aa:ad:
         0a:54:c4:05:45:a5:15:12:12:7c:da:99:a1:ee:bc:62:4c:9a:
         d6:42:ba:59:76:ce:65:57:b8:60:2a:8b:1e:e3:29:fb:8e:d2:
         ba:65:3e:8a:51:64:21:0e:26:c1:4d:df:8a:f5:5b:29:8a:0c:
         42:28:db:a5:02:0e:c5:09:2a:14:da:ef:dc:90:21:29:b7:31:
         ee:50:e7:cd:d9:48:7e:84:ba:54:d8:2e:9b:d7:83:cf:3e:d1:
         bf:ff:9b:9a:50:bb:66:b1:dc:26:cd:50:a8:d7:b2:f7:ef:b4:
         5a:1a:1e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:10:07 2025 by rpki-client