This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/JUCo4Exam4PNRTU5sCWbfHwS54s.roa
File:                     JUCo4Exam4PNRTU5sCWbfHwS54s.roa (raw, json)
Hash identifier:          +CVnDhXiceqm+9Z71JNdn8epL48e8dAV3xOBv82sADY=
Subject key identifier:   25:40:A8:E0:4C:5A:9B:83:CD:45:35:39:B0:25:9B:7C:7C:12:E7:8B
Certificate issuer:       /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial:       019B7C134FA022D3E68384FF31FB5D8D31D8
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/JUCo4Exam4PNRTU5sCWbfHwS54s.roa
Signing time:             Fri 02 Jan 2026 00:19:58 +0000
ROA not before:           Fri 02 Jan 2026 00:19:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     260
IP address blocks:        78.40.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:4f:a0:22:d3:e6:83:84:ff:31:fb:5d:8d:31:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
        Validity
            Not Before: Jan  2 00:19:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2540a8e04c5a9b83cd453539b0259b7c7c12e78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:67:27:97:bd:78:43:76:45:96:4b:d0:94:
                    89:37:34:3f:19:96:9e:06:e7:51:89:de:0f:3a:96:
                    b1:51:aa:e7:56:a0:ac:3b:9f:76:8b:e0:86:2d:62:
                    4b:76:83:fd:32:f2:d6:00:6c:5a:f1:ce:1a:6a:57:
                    58:d1:98:7c:5d:e5:17:07:53:27:d3:6c:7d:dd:c0:
                    c3:58:4a:0f:76:f2:2a:fb:30:9b:8d:6c:bb:0e:e9:
                    ab:08:61:b4:3a:ce:02:8a:68:a1:8d:22:51:be:88:
                    bf:70:13:5c:12:21:0f:6b:70:7c:a7:83:44:24:d0:
                    1b:33:6a:d8:ed:68:b8:e1:3f:0a:aa:c6:97:05:fa:
                    35:ec:05:bb:b5:4e:e0:41:4a:d2:6c:44:ec:0f:9f:
                    61:bc:3c:63:32:5b:68:6e:04:c5:d6:79:b5:69:7e:
                    2d:40:f1:31:9c:de:05:5f:11:24:11:26:3f:41:92:
                    e1:d8:6c:bd:ab:0b:be:00:ac:ac:a9:af:dd:9a:09:
                    32:25:b4:25:ed:4f:36:fa:c5:20:b4:64:86:b7:dc:
                    29:83:ca:42:f1:0f:6c:11:57:20:27:00:63:66:5d:
                    5c:9f:6e:06:c0:c9:e9:0c:ca:75:1c:d8:ff:ad:ce:
                    07:38:30:e4:2b:4a:cc:de:81:ab:9f:ce:f3:e4:b9:
                    0d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:40:A8:E0:4C:5A:9B:83:CD:45:35:39:B0:25:9B:7C:7C:12:E7:8B
            X509v3 Authority Key Identifier:
                keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/JUCo4Exam4PNRTU5sCWbfHwS54s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.40.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:6a:4c:df:54:ec:56:78:08:02:2c:0a:f2:5a:40:d6:e9:42:
         5a:cc:e3:9a:f8:6f:d6:1c:d9:38:9f:c3:ff:27:f7:23:d1:64:
         ac:e6:79:fc:57:db:e2:24:a2:bb:d3:71:7d:3a:bb:c0:4a:89:
         e2:03:28:7e:fe:7b:54:b7:7c:4f:f3:b9:89:67:bb:f0:1d:dd:
         63:08:68:d8:a4:a8:48:bf:15:d9:24:0f:80:17:4f:da:76:4a:
         30:aa:bf:32:1f:d2:8a:84:0b:d4:df:be:6a:e7:ee:a3:5b:99:
         f9:3b:32:f5:1c:f0:a0:c6:58:a1:c5:8c:f5:ef:2d:c6:a4:5e:
         5b:76:41:a8:af:6b:84:0a:cd:ca:99:72:a7:1d:0c:db:2b:10:
         c3:7c:18:30:69:ad:c8:36:22:1f:73:e1:99:9d:cb:98:a4:ff:
         0b:33:76:32:4e:99:28:cc:8c:f8:6c:68:f1:d6:b3:f5:09:dd:
         d0:c2:32:70:1a:35:65:c1:14:be:df:6e:5b:45:bb:22:9f:70:
         59:3c:ad:6a:48:b1:17:3d:3b:ba:9e:04:92:23:4c:47:f4:8e:
         76:87:6d:1d:43:b8:df:f4:ff:4d:d5:14:5d:a3:e7:2c:9e:75:
         46:69:f1:e3:a4:9d:db:9a:7e:f1:c2:1e:85:52:3e:ae:73:56:
         5d:89:e4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:31 2026 by rpki-client