This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/nJVTV_xC46i_jMWC0u5aQlLsYTI.roa
File:                     nJVTV_xC46i_jMWC0u5aQlLsYTI.roa (raw, json)
Hash identifier:          1PR1dDwuBSuvJYidaakEzx/AJjq3GTgS+XI3K+QB2/k=
Subject key identifier:   9C:95:53:57:FC:42:E3:A8:BF:8C:C5:82:D2:EE:5A:42:52:EC:61:32
Certificate issuer:       /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial:       019B7EA641A9EE64AD4C09295AB465256DCC
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/nJVTV_xC46i_jMWC0u5aQlLsYTI.roa
Signing time:             Fri 02 Jan 2026 12:19:43 +0000
ROA not before:           Fri 02 Jan 2026 12:19:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        132.75.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 02:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:41:a9:ee:64:ad:4c:09:29:5a:b4:65:25:6d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
        Validity
            Not Before: Jan  2 12:19:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9c955357fc42e3a8bf8cc582d2ee5a4252ec6132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:eb:b8:c5:48:cf:a8:72:cd:cf:0a:45:df:
                    2f:95:ea:9f:20:bb:24:fd:dd:a3:f6:fb:4d:17:f3:
                    8a:e8:c9:7c:d1:06:4f:f5:9e:6e:4e:87:63:3e:cc:
                    f0:ad:69:d6:bb:8f:83:56:a7:27:22:c7:fa:79:22:
                    80:ca:fb:09:a3:75:37:60:9b:e5:35:11:cb:94:22:
                    73:5e:66:e6:db:37:f2:ee:c7:75:51:44:8f:a4:a2:
                    bb:7a:14:ee:a3:6d:fc:cc:26:18:3e:80:90:82:4c:
                    d1:5a:48:fd:d2:1c:5b:ad:6a:ee:f0:cb:71:c1:73:
                    bf:9c:ea:9e:55:28:71:45:be:28:b6:c3:ef:ef:2e:
                    d9:5e:cd:55:fb:1b:81:d0:80:c3:e1:e8:bf:86:9c:
                    d6:61:dd:e8:55:b7:1d:1a:3c:fc:52:fa:59:3a:a6:
                    ad:f3:2b:db:1a:62:91:38:29:d2:17:6d:07:ab:7f:
                    89:83:0b:c3:9b:4b:01:1b:a7:40:d7:31:09:1a:70:
                    02:94:66:96:66:5c:31:ae:c5:9b:3c:fa:08:37:44:
                    6d:2b:a5:4a:b5:73:c1:7f:29:07:94:c6:fc:10:48:
                    20:d5:ac:31:54:05:01:26:f0:7e:33:b0:c4:ae:55:
                    ad:8b:19:a8:4b:6b:c2:7c:d6:05:a2:dd:43:d2:73:
                    ff:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:95:53:57:FC:42:E3:A8:BF:8C:C5:82:D2:EE:5A:42:52:EC:61:32
            X509v3 Authority Key Identifier:
                keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/nJVTV_xC46i_jMWC0u5aQlLsYTI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.75.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:06:76:c3:39:bd:c6:15:1d:d6:60:d2:ec:89:f9:b4:10:59:
         fc:f5:5b:bd:77:15:aa:80:c4:14:95:00:67:5b:b1:79:6d:98:
         74:ea:ed:ec:f7:4f:ff:e2:d2:46:95:d1:7d:9d:c9:70:68:ff:
         98:a2:c8:22:16:66:2a:e5:27:ea:a4:c4:a6:8e:09:68:4e:39:
         0e:e8:20:53:38:78:4d:6b:44:d0:37:15:66:83:aa:26:cc:a4:
         87:3e:2c:44:64:1a:7c:f3:24:af:c6:82:0d:5c:78:9d:18:15:
         f6:a8:df:25:fe:35:4e:22:28:87:79:3e:02:11:55:37:a8:3d:
         16:6d:02:19:d6:7f:9f:f2:0c:15:e6:71:5c:80:44:e8:36:cd:
         aa:99:dc:af:c6:67:0a:cd:ae:b0:6c:a4:31:af:94:1f:86:2c:
         3c:1d:c8:0a:a2:46:67:19:9d:48:a1:f5:48:fd:8f:b1:72:c1:
         e9:56:14:dc:3e:ab:f7:4a:cc:53:aa:a9:ba:b3:17:af:a6:39:
         b4:ce:dd:8c:12:01:6f:52:9b:56:d1:f4:7a:b5:d7:52:80:0b:
         dc:01:7d:84:61:27:b2:9e:ff:53:f1:32:66:18:89:fe:e1:93:
         ba:a7:c0:dc:3e:52:12:69:30:a5:ca:69:dd:29:5c:ec:0c:03:
         45:3f:59:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 06:46:18 2026 by rpki-client