This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jhwcBBc8oOvXs_IDaLwdciLIw5g.roa
File:                     jhwcBBc8oOvXs_IDaLwdciLIw5g.roa (raw, json)
Hash identifier:          2wOw67KJ6XBImFQRXWSqni2LckUYvmgNYdwa7nlm6bU=
Subject key identifier:   8E:1C:1C:04:17:3C:A0:EB:D7:B3:F2:03:68:BC:1D:72:22:C8:C3:98
Certificate issuer:       /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Certificate serial:       019B7FF18143731A99B8AD7050C413067435
Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jhwcBBc8oOvXs_IDaLwdciLIw5g.roa
Signing time:             Fri 02 Jan 2026 18:21:32 +0000
ROA not before:           Fri 02 Jan 2026 18:21:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        93.157.38.0/23 maxlen: 24
                          2a00:4bc0:2000::/44 maxlen: 56
                          2a00:4bc0:2100::/40 maxlen: 48
                          2a00:4bc0:2300::/40 maxlen: 48
                          2a00:4bc0:2400::/40 maxlen: 48
                          2a00:4bc0:2500::/40 maxlen: 48
                          2a00:4bc0:2600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 00:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f1:81:43:73:1a:99:b8:ad:70:50:c4:13:06:74:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
        Validity
            Not Before: Jan  2 18:21:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8e1c1c04173ca0ebd7b3f20368bc1d7222c8c398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:46:be:22:54:e4:c7:46:46:65:e0:18:7d:16:
                    fe:d9:60:ea:a8:2c:43:4a:27:6d:3c:ad:b3:05:1e:
                    e1:35:3b:18:36:c5:35:32:3b:c9:20:7a:ad:d8:79:
                    9b:f7:b7:d1:d2:9d:5c:c4:3c:b0:a8:a8:28:27:b8:
                    d3:ed:5c:cc:bd:66:8c:38:8d:e8:72:50:b2:eb:3a:
                    44:90:cd:1f:18:90:99:8e:09:2a:35:55:fb:af:06:
                    32:94:22:cd:df:37:a7:7b:a4:08:58:2c:db:a2:97:
                    4b:1f:4f:1f:e5:93:18:6a:78:c6:92:5d:26:a5:8e:
                    b0:b4:17:3b:f8:ff:95:21:e1:2f:c5:b0:c9:5d:83:
                    5e:83:e3:a9:7e:38:d6:9a:2e:c1:85:83:39:5f:fb:
                    7a:5e:59:f3:df:cc:45:12:2a:95:10:48:93:25:12:
                    39:51:8d:77:20:ad:b2:06:ed:0f:96:25:b8:12:1c:
                    cb:99:ba:5b:1c:7f:62:58:2b:48:6b:3e:94:51:b0:
                    ea:b0:5f:1f:24:62:b7:97:e5:45:e9:20:57:4b:7f:
                    d9:e8:dc:79:9b:15:42:b2:4f:f0:5b:a5:b0:7f:75:
                    c6:1a:c0:74:a9:d8:25:4d:39:6a:ee:30:0f:93:29:
                    7c:24:9b:77:1e:94:ca:fa:d3:04:ff:fc:9f:de:b7:
                    27:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1C:1C:04:17:3C:A0:EB:D7:B3:F2:03:68:BC:1D:72:22:C8:C3:98
            X509v3 Authority Key Identifier:
                keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jhwcBBc8oOvXs_IDaLwdciLIw5g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.157.38.0/23
                IPv6:
                  2a00:4bc0:2000::/44
                  2a00:4bc0:2100::/40
                  2a00:4bc0:2300::-2a00:4bc0:26ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         40:ed:42:79:b2:54:ee:ea:dd:d5:1d:23:64:94:e0:e3:03:f8:
         fa:c8:cf:04:d7:c9:59:19:eb:23:23:91:c3:cd:16:5d:d2:14:
         0c:b0:e7:5e:1d:60:7e:0d:2b:1c:2f:77:93:5a:57:01:7d:d5:
         be:eb:47:3e:24:6c:f7:d8:70:e1:37:e4:46:82:9f:ed:1d:42:
         cc:be:11:c2:18:20:31:00:ac:f5:f4:84:bf:aa:33:1b:46:44:
         70:6e:d9:ed:97:89:c6:c5:97:e1:20:c5:d3:e2:e6:67:9d:96:
         e9:50:47:c0:1b:aa:99:f7:6a:49:ea:e0:84:ab:2c:5c:3f:44:
         6f:b9:05:cb:4a:f4:46:a0:23:67:a2:d7:16:5c:3c:f2:9c:a1:
         fa:26:99:2b:24:9d:48:07:f5:23:f8:28:4e:12:02:b8:2d:95:
         59:6b:3c:ab:60:93:8f:d6:7f:ce:b5:de:20:f9:00:81:99:52:
         b5:ed:f2:a2:6b:9f:cd:d9:22:6e:d8:ea:c3:95:81:92:e8:59:
         f3:b8:a5:66:3c:a9:3a:63:d1:9c:22:cc:66:5d:fc:a7:9d:c3:
         61:99:ec:3e:2b:33:65:2d:50:8c:e5:c9:54:4f:0e:aa:06:28:
         e0:b0:5c:b2:de:2e:6a:4a:f4:4f:68:fc:cb:b3:86:9c:0a:55:
         a3:34:46:ae
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAZt/8YFDcxqZuK1wUMQTBnQ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMjgyNGM2MTM1N2RjMzQ0YmJkZjM1YjgzNTc3NDU5Yjlk
M2ZjNDQwHhcNMjYwMTAyMTgyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTFjMWMwNDE3M2NhMGViZDdiM2YyMDM2OGJjMWQ3MjIyYzhjMzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEa+IlTkx0ZGZeAYfRb+2WDqqCxD
SidtPK2zBR7hNTsYNsU1MjvJIHqt2Hmb97fR0p1cxDywqKgoJ7jT7VzMvWaMOI3o
clCy6zpEkM0fGJCZjgkqNVX7rwYylCLN3zene6QIWCzbopdLH08f5ZMYanjGkl0m
pY6wtBc7+P+VIeEvxbDJXYNeg+OpfjjWmi7BhYM5X/t6Xlnz38xFEiqVEEiTJRI5
UY13IK2yBu0PliW4EhzLmbpbHH9iWCtIaz6UUbDqsF8fJGK3l+VF6SBXS3/Z6Nx5
mxVCsk/wW6Wwf3XGGsB0qdglTTlq7jAPkyl8JJt3HpTK+tME//yf3rcnRQIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFI4cHAQXPKDr17PyA2i8HXIiyMOYMB8GA1UdIwQY
MBaAFI8oJMYTV9w0S73zW4NXdFm50/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTJlYjQtMzIxYy00OGMwLTkyNzIt
M2FlNzExYWYwMzRiLzEvamh3Y0JCYzhvT3ZYc19JRGFMd2RjaUxJdzVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82NTJlYjQtMzIxYy00OGMwLTkyNzItM2FlNzExYWYwMzRi
LzEvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAMBAIAATAGAwQBXZ0mMCkE
AgACMCMDBwQqAEvAIAADBgAqAEvAITAQAwYAKgBLwCMDBgAqAEvAJjANBgkqhkiG
9w0BAQsFAAOCAQEAQO1CebJU7urd1R0jZJTg4wP4+sjPBNfJWRnrIyORw80WXdIU
DLDnXh1gfg0rHC93k1pXAX3VvutHPiRs99hw4TfkRoKf7R1CzL4RwhggMQCs9fSE
v6ozG0ZEcG7Z7ZeJxsWX4SDF0+LmZ52W6VBHwBuqmfdqSerghKssXD9Eb7kFy0r0
RqAjZ6LXFlw88pyh+iaZKySdSAf1I/goThICuC2VWWs8q2CTj9Z/zrXeIPkAgZlS
te3yomufzdkibtjqw5WBkuhZ87ilZjypOmPRnCLMZl38p53DYZnsPiszZS1QjOXJ
VE8OqgYo4LBcst4uakr0T2j8y7OGnApVozRGrg==
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:46:20 2026 by rpki-client