This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/JN9CiCwjJw0FyXyBUSHgEZZqXu8.roa
File:                     JN9CiCwjJw0FyXyBUSHgEZZqXu8.roa (raw, json)
Hash identifier:          gFUGZzp8lJcrd+UrHFxGBVNmpm6H+3Uu/Q+cwgrB2bA=
Subject key identifier:   24:DF:42:88:2C:23:27:0D:05:C9:7C:81:51:21:E0:11:96:6A:5E:EF
Certificate issuer:       /CN=1550afae2baefb6b88f9751bb3218eb39b94b576
Certificate serial:       019B79ED3AF35065C3CE7979BFD03A7A6E17
Authority key identifier: 15:50:AF:AE:2B:AE:FB:6B:88:F9:75:1B:B3:21:8E:B3:9B:94:B5:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/JN9CiCwjJw0FyXyBUSHgEZZqXu8.roa
Signing time:             Thu 01 Jan 2026 14:19:08 +0000
ROA not before:           Thu 01 Jan 2026 14:19:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61221
IP address blocks:        5.252.144.0/24 maxlen: 24
                          5.252.146.0/24 maxlen: 24
                          185.14.244.0/23 maxlen: 23
                          185.14.244.0/24 maxlen: 24
                          185.14.245.0/24 maxlen: 24
                          185.14.246.0/23 maxlen: 23
                          185.14.246.0/24 maxlen: 24
                          185.14.247.0/24 maxlen: 24
                          2a03:b840:2::/48 maxlen: 48
                          2a03:b840:3::/48 maxlen: 64
                          2a03:b840:12::/48 maxlen: 48
                          2a03:b840:13::/48 maxlen: 48
                          2a03:b840:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:3a:f3:50:65:c3:ce:79:79:bf:d0:3a:7a:6e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1550afae2baefb6b88f9751bb3218eb39b94b576
        Validity
            Not Before: Jan  1 14:19:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=24df42882c23270d05c97c815121e011966a5eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:0c:8e:38:5b:a4:be:22:a6:f1:91:cf:c0:
                    a3:9f:f9:4f:03:c8:63:a1:fd:db:27:f3:40:e6:7e:
                    f4:c8:e1:69:3b:32:f8:11:81:0a:ce:f9:f2:93:ca:
                    bb:90:59:db:85:f2:91:93:69:aa:69:76:42:db:f6:
                    0b:0a:4f:53:19:54:bc:07:2c:c4:c4:6b:36:7e:32:
                    d7:41:98:5d:39:f0:b6:dd:f3:21:7c:05:dd:fe:28:
                    84:8e:8c:dc:6d:7e:a4:2e:14:87:84:60:eb:8b:e8:
                    f1:8e:58:01:59:94:47:6f:88:29:be:68:ed:75:88:
                    47:53:6b:ee:0b:d7:fe:54:e6:7f:df:f1:f7:8e:55:
                    17:74:e6:4d:bf:d0:5e:0e:fd:fe:e6:0c:df:b3:fc:
                    cb:f5:67:c5:14:96:cf:bc:9d:c1:5e:47:88:2d:04:
                    eb:e0:7a:12:dc:18:dc:69:42:71:65:96:78:3c:b3:
                    9b:40:3c:64:fd:0f:de:6e:39:c2:4d:22:c5:c3:81:
                    30:4a:d3:84:f2:be:f5:27:da:f5:c8:71:89:7a:b7:
                    38:bc:04:32:df:c9:f7:99:5d:d2:13:1c:e4:8b:a1:
                    62:e7:d1:3e:ff:ce:03:fb:e6:86:20:a3:b6:19:19:
                    07:85:d6:a6:41:a6:db:e7:a0:ed:84:58:4d:1d:46:
                    60:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DF:42:88:2C:23:27:0D:05:C9:7C:81:51:21:E0:11:96:6A:5E:EF
            X509v3 Authority Key Identifier:
                keyid:15:50:AF:AE:2B:AE:FB:6B:88:F9:75:1B:B3:21:8E:B3:9B:94:B5:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/JN9CiCwjJw0FyXyBUSHgEZZqXu8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.144.0/24
                  5.252.146.0/24
                  185.14.244.0/22
                IPv6:
                  2a03:b840:2::/47
                  2a03:b840:12::/47
                  2a03:b840:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:10:de:ed:83:2f:e9:75:13:05:d1:df:e6:77:c9:a8:49:d0:
         1c:ab:81:48:2e:b2:6e:fd:72:db:63:64:62:ab:6e:57:2b:f6:
         ca:83:de:76:ab:41:74:17:f0:35:12:93:81:d2:a8:aa:18:7c:
         4f:04:09:51:18:2e:e4:12:60:f6:91:d6:df:1b:11:91:79:4e:
         f9:a4:1f:c3:63:09:a9:22:3c:c8:75:7e:d9:61:11:e5:b0:60:
         71:32:a6:ce:b4:68:84:50:d6:31:27:48:6f:7a:8f:bb:87:ce:
         fe:cf:9e:6c:34:a9:95:b7:88:1f:b8:cc:b0:c9:e5:96:b0:10:
         b0:4f:31:e9:72:dd:ff:e6:1e:0e:cd:4f:a6:e6:65:39:b6:31:
         9a:ff:6d:f6:36:3d:76:95:80:4e:99:fb:eb:62:64:f6:da:e4:
         5f:6e:38:c1:67:bf:08:37:bf:0b:be:29:da:d4:d5:de:3a:e8:
         3e:15:92:f2:40:6d:8b:c9:0c:68:64:34:20:e7:20:90:9c:3b:
         ef:5e:c7:87:24:c5:83:b8:f4:90:75:f1:f8:c0:1d:fc:ba:82:
         49:32:79:cf:60:4b:79:9a:a1:47:20:2b:36:de:1e:9c:b0:61:
         df:74:2e:0e:a7:93:58:2e:63:81:35:48:c6:43:0a:07:62:94:
         d8:af:4d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:01 2026 by rpki-client