This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jxyIVoVyLTxofFGRm1MrYCI1CgM.roa
File:                     jxyIVoVyLTxofFGRm1MrYCI1CgM.roa (raw, json)
Hash identifier:          427tVTYawesk94JmCd+Km282f3ai2rQ+hQcK/Esmk+s=
Subject key identifier:   8F:1C:88:56:85:72:2D:3C:68:7C:51:91:9B:53:2B:60:22:35:0A:03
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       019B78A3473C987676426E5FE1B062DAAD63
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jxyIVoVyLTxofFGRm1MrYCI1CgM.roa
Signing time:             Thu 01 Jan 2026 08:18:45 +0000
ROA not before:           Thu 01 Jan 2026 08:18:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213893
IP address blocks:        79.110.62.0/24 maxlen: 24
                          185.218.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 02:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:47:3c:98:76:76:42:6e:5f:e1:b0:62:da:ad:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 08:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8f1c885685722d3c687c51919b532b6022350a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:65:2b:ce:bd:f4:d3:70:9c:d3:ee:4d:a3:
                    cb:20:c5:af:d3:d3:b4:89:60:9a:2a:36:63:0d:5a:
                    cd:fd:40:09:bb:3b:a7:ab:41:04:2b:1d:ad:83:9b:
                    f7:1c:4c:4b:83:92:8c:84:f4:be:6a:7d:0c:90:54:
                    01:21:e7:8f:c5:f1:c2:b9:c2:c7:d0:7b:11:30:41:
                    2d:99:58:c7:eb:02:cc:f6:b4:b5:7e:be:b3:5a:1c:
                    4d:d2:89:63:4b:16:09:04:26:3c:25:4a:b3:c6:af:
                    3a:ea:1e:6b:74:33:10:38:68:d2:62:43:76:b7:d8:
                    99:8d:81:d0:57:02:53:4c:6b:b0:ba:16:8b:19:32:
                    87:4c:e4:8a:4b:73:54:dd:c1:32:02:b3:e7:08:8e:
                    99:c2:57:cf:fc:70:be:cc:0d:e4:3c:25:70:79:d6:
                    91:91:14:52:80:a2:9b:da:77:7f:a5:4c:f0:7c:03:
                    96:7a:03:d9:e4:0a:fe:dd:f4:9a:2a:f0:ef:8c:95:
                    5b:4b:8c:18:6e:63:eb:9c:3e:4c:01:6f:81:83:88:
                    76:14:42:24:c3:24:0e:8e:b0:f2:b1:8f:6c:17:d5:
                    84:e6:73:f9:28:f0:c4:22:02:e9:35:ee:0d:40:e5:
                    d5:64:b2:6d:45:78:4f:45:12:ac:21:ed:83:2d:93:
                    d8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1C:88:56:85:72:2D:3C:68:7C:51:91:9B:53:2B:60:22:35:0A:03
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jxyIVoVyLTxofFGRm1MrYCI1CgM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.62.0/24
                  185.218.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:22:c7:d9:43:de:6f:04:c2:81:cb:e4:fb:81:41:73:86:45:
         9b:e1:7d:0e:07:36:f3:fb:d2:fa:73:96:8c:39:53:b9:ef:c9:
         ca:3c:9a:2b:67:59:1a:ee:93:a5:3f:10:ec:40:a9:82:d2:b3:
         90:ed:2e:43:6b:ab:cf:df:ec:69:cf:b9:c6:8a:6c:9d:af:bb:
         3f:f7:c9:64:ca:4e:2e:d2:d1:16:e4:cb:56:71:61:b1:ba:0b:
         06:9c:c0:39:75:f8:75:8d:d9:c7:77:b6:ba:5f:ae:fa:3c:05:
         f0:f9:54:4a:fd:f2:26:5d:74:ef:13:9c:b1:97:e4:e0:cc:c5:
         7b:90:a0:6a:10:32:ba:ea:51:fa:1e:6b:ca:71:0a:05:69:7d:
         15:53:34:92:72:38:4c:b8:b8:68:66:01:d2:eb:a7:b4:47:83:
         8d:e9:47:dc:f8:8a:30:f8:31:fa:7e:fe:31:1e:c3:74:ef:e6:
         cd:4b:b5:27:2d:a4:a4:e6:0f:b0:1b:ce:b5:11:7c:10:3b:26:
         ad:84:7a:58:da:e2:f2:08:ab:17:29:38:47:8e:4d:af:e3:45:
         15:da:5d:28:4c:e7:a8:57:ea:b0:3f:d2:27:03:3a:dd:20:c3:
         3f:7e:0d:ad:d2:40:eb:4d:51:8f:75:a2:f3:79:90:31:d9:22:
         21:01:4d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 12:08:24 2026 by rpki-client