This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/lNSsiMsgFC3PSDwg_wipOCI36Sc.roa
File:                     lNSsiMsgFC3PSDwg_wipOCI36Sc.roa (raw, json)
Hash identifier:          T+M2rwciKN++pJU4zsuNLc+4agGsiYLXoX3H/Bds62g=
Subject key identifier:   94:D4:AC:88:CB:20:14:2D:CF:48:3C:20:FF:08:A9:38:22:37:E9:27
Certificate issuer:       /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial:       019B7835176E19AB7523B9FFB706A4A0BC10
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/lNSsiMsgFC3PSDwg_wipOCI36Sc.roa
Signing time:             Thu 01 Jan 2026 06:18:23 +0000
ROA not before:           Thu 01 Jan 2026 06:18:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48847
IP address blocks:        147.78.44.0/24 maxlen: 24
                          147.78.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:17:6e:19:ab:75:23:b9:ff:b7:06:a4:a0:bc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
        Validity
            Not Before: Jan  1 06:18:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=94d4ac88cb20142dcf483c20ff08a9382237e927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:db:8a:eb:8a:ed:91:b8:d8:5b:99:6b:93:
                    35:e5:f5:ac:a2:20:23:9f:5d:38:71:c4:f6:88:35:
                    8c:e3:ba:48:48:2c:f4:c4:ef:10:a1:92:1f:ee:40:
                    df:a7:f6:ca:48:84:d4:08:c8:c1:36:38:c9:02:55:
                    ce:f8:ba:a0:67:33:39:72:6f:62:e9:b2:18:a5:13:
                    84:67:98:d0:fb:95:2a:00:c1:28:9b:9f:83:1d:38:
                    a6:78:ef:65:99:b4:08:f6:72:0c:db:e7:1c:1b:f4:
                    94:30:eb:f7:a4:e4:31:b2:b1:3d:06:e3:5a:02:04:
                    24:d6:64:00:be:d4:a2:8f:e6:a5:b1:7f:aa:80:a4:
                    48:b5:84:20:24:85:77:b5:bf:b4:d3:0e:6e:09:7f:
                    4b:e2:d6:92:7f:94:17:f9:eb:69:4c:5f:f2:3e:fb:
                    4f:a5:1a:9a:67:c3:e1:58:ad:45:ae:2c:d5:fa:ef:
                    d3:80:7d:4f:8c:28:4f:fe:13:85:18:70:b6:2f:b9:
                    98:e2:ac:2f:1c:bc:1b:8f:5f:6d:df:5c:2f:39:86:
                    b5:16:78:7c:eb:ba:5d:a4:34:66:80:d8:d3:4e:cd:
                    5b:c8:44:4e:fc:96:54:80:19:5c:18:cd:cc:02:40:
                    2f:50:0d:09:e6:dc:86:80:87:1e:f7:f3:13:5c:29:
                    2e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D4:AC:88:CB:20:14:2D:CF:48:3C:20:FF:08:A9:38:22:37:E9:27
            X509v3 Authority Key Identifier:
                keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/lNSsiMsgFC3PSDwg_wipOCI36Sc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:61:2b:82:db:15:bf:f3:ad:ca:e7:c3:11:14:af:3c:68:b8:
         b1:a7:88:24:5c:60:6a:e8:81:dc:8b:b7:75:76:52:b7:62:3c:
         a5:92:68:13:45:98:f7:56:ea:0c:a8:da:a5:ad:cf:a7:73:19:
         c9:1d:0a:49:f8:97:d1:67:1b:d6:98:be:f0:83:20:58:b6:87:
         05:ad:a7:8a:38:5f:68:ed:4f:c5:6a:0b:af:3b:06:7e:df:48:
         35:d5:23:e7:0c:cc:bf:7c:5e:e9:2a:4e:c0:26:53:fa:93:bc:
         30:88:e4:7f:3a:e4:8b:b5:0a:88:a8:46:98:e9:8c:cc:59:bf:
         05:b3:70:6c:00:e4:5c:15:43:10:6e:84:08:02:9d:1e:a9:6e:
         7d:4e:d7:f3:dc:63:5d:71:c6:5a:6d:c9:91:49:6b:80:21:73:
         d8:83:02:10:02:c3:89:c7:34:97:ef:9a:cb:39:98:4c:8c:f3:
         3a:ca:a9:64:9e:a8:8d:61:76:2f:3c:c5:1d:81:49:90:51:cf:
         8c:85:e3:1a:68:eb:a6:b1:7d:53:49:23:32:ad:e3:6f:7e:33:
         45:1d:de:82:19:9a:4c:4b:ad:1f:37:de:9f:50:b4:ed:52:3a:
         4f:40:8c:c5:80:e2:9c:0f:36:31:7a:b5:fb:f7:2e:09:89:7b:
         68:ce:73:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NRduGat1I7n/twakoLwQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy
MzQxMmYwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGQ0YWM4OGNiMjAxNDJkY2Y0ODNjMjBmZjA4YTkzODIyMzdlOTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMnbiuuK7ZG42FuZa5M15fWsoiAj
n104ccT2iDWM47pISCz0xO8QoZIf7kDfp/bKSITUCMjBNjjJAlXO+LqgZzM5cm9i
6bIYpROEZ5jQ+5UqAMEom5+DHTimeO9lmbQI9nIM2+ccG/SUMOv3pOQxsrE9BuNa
AgQk1mQAvtSij+alsX+qgKRItYQgJIV3tb+00w5uCX9L4taSf5QX+etpTF/yPvtP
pRqaZ8PhWK1FrizV+u/TgH1PjChP/hOFGHC2L7mY4qwvHLwbj19t31wvOYa1Fnh8
67pdpDRmgNjTTs1byERO/JZUgBlcGM3MAkAvUA0J5tyGgIce9/MTXCkuxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJTUrIjLIBQtz0g8IP8IqTgiN+knMB8GA1UdIwQY
MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt
MWUwNDY1NTEzYjYzLzEvbE5Tc2lNc2dGQzNQU0R3Z193aXBPQ0kzNlNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz
LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk04sMA0G
CSqGSIb3DQEBCwUAA4IBAQCNYSuC2xW/863K58MRFK88aLixp4gkXGBq6IHci7d1
dlK3YjylkmgTRZj3VuoMqNqlrc+ncxnJHQpJ+JfRZxvWmL7wgyBYtocFraeKOF9o
7U/FaguvOwZ+30g11SPnDMy/fF7pKk7AJlP6k7wwiOR/OuSLtQqIqEaY6YzMWb8F
s3BsAORcFUMQboQIAp0eqW59Ttfz3GNdccZabcmRSWuAIXPYgwIQAsOJxzSX75rL
OZhMjPM6yqlknqiNYXYvPMUdgUmQUc+MheMaaOumsX1TSSMyreNvfjNFHd6CGZpM
S60fN96fULTtUjpPQIzFgOKcDzYxerX79y4JiXtoznNU
-----END CERTIFICATE-----
Generated at Wed Jan 21 16:14:43 2026 by rpki-client