This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/j7bpgZ_TU9vzcFue8faMORelUQQ.roa
File:                     j7bpgZ_TU9vzcFue8faMORelUQQ.roa (raw, json)
Hash identifier:          0kf703DvH3F1AsTZ3TG4TVaaXNh+hhZvMXvXyoAQL+s=
Subject key identifier:   8F:B6:E9:81:9F:D3:53:DB:F3:70:5B:9E:F1:F6:8C:39:17:A5:51:04
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019BB725036E845DDF1914FDD308DFE934D8
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/j7bpgZ_TU9vzcFue8faMORelUQQ.roa
Signing time:             Tue 13 Jan 2026 11:36:54 +0000
ROA not before:           Tue 13 Jan 2026 11:36:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39531
IP address blocks:        80.96.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b7:25:03:6e:84:5d:df:19:14:fd:d3:08:df:e9:34:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan 13 11:36:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8fb6e9819fd353dbf3705b9ef1f68c3917a55104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:d8:cf:2b:4c:ec:1a:5f:9a:17:42:f4:7e:
                    c7:60:ce:c7:87:38:39:b7:17:f9:e7:51:c6:3b:11:
                    a4:1c:ff:56:1f:27:37:3d:7c:fc:20:f8:f3:33:1d:
                    9f:78:f4:09:c8:a9:3e:7c:2c:e0:cb:6b:68:3e:44:
                    10:15:a4:d8:92:f9:23:dc:d1:b1:bb:93:ed:dd:ee:
                    34:e6:5d:24:3c:e1:37:e7:72:0a:53:e3:79:77:81:
                    3b:09:df:15:83:5a:97:98:85:c4:96:e9:52:49:2f:
                    10:f6:e4:1f:95:4c:25:86:7a:86:fa:98:de:93:6d:
                    22:85:f4:f5:0f:f8:0f:e5:7f:8b:fb:a4:0f:48:71:
                    95:21:ca:cd:a5:6e:08:29:d4:91:fb:36:22:41:41:
                    f6:22:0b:5d:dc:dc:20:b1:0f:a4:65:d6:6e:1e:9f:
                    a5:30:d0:06:0f:c1:0f:99:a1:10:04:7d:34:86:58:
                    43:72:bd:b2:5c:26:50:76:06:3e:82:22:96:ff:a6:
                    dd:76:1f:56:6c:6d:4c:15:fd:15:bd:6e:04:ab:97:
                    57:04:dd:3b:43:2e:ed:2b:fe:af:f6:1f:03:99:00:
                    ae:05:c9:f5:1e:fa:d4:0a:88:9f:82:09:32:dd:5e:
                    fd:48:89:27:20:85:f2:4b:1e:a5:36:b9:b7:1d:e9:
                    80:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B6:E9:81:9F:D3:53:DB:F3:70:5B:9E:F1:F6:8C:39:17:A5:51:04
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/j7bpgZ_TU9vzcFue8faMORelUQQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:f9:73:2e:fa:72:7a:df:98:4e:c8:2f:26:54:2d:9d:af:f7:
         e2:3c:48:11:35:60:0f:13:c1:69:51:48:0e:7f:02:ef:ef:44:
         8d:49:40:75:10:d6:f4:82:64:5f:42:33:f2:00:93:7e:73:e0:
         4b:d1:b9:1c:a3:84:68:10:4e:44:30:76:18:f6:d3:41:eb:c6:
         12:c9:19:bf:f5:f3:aa:53:ef:19:75:76:01:27:d9:11:f9:cd:
         21:db:cf:2f:ea:f8:3c:13:57:e3:dd:e6:a2:fc:f7:94:ee:3a:
         2f:96:79:c6:3e:de:3f:76:8e:a5:11:de:5e:5a:cf:c9:ab:ef:
         a5:35:ec:bf:76:e5:69:6a:7a:2f:d9:bd:e3:d0:cc:b0:85:bf:
         63:51:10:79:45:5b:87:d8:a8:58:7d:39:46:4e:cb:3d:06:38:
         e3:92:ea:d0:d5:4e:5e:b5:4f:3c:33:b5:3c:ec:2c:43:ce:0e:
         8f:83:be:91:45:4e:8a:67:6b:f7:b7:af:f3:8a:29:8f:86:e2:
         08:6e:39:90:08:5a:c5:d1:75:3f:26:bd:ee:aa:28:78:11:ae:
         1f:3d:59:34:99:f5:ca:14:b0:40:29:9d:09:98:e4:91:49:ab:
         eb:50:ae:df:3e:99:2b:c4:d5:78:8b:b4:96:54:ea:58:e9:a9:
         ad:92:7a:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZu3JQNuhF3fGRT90wjf6TTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwMTEzMTEzNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmI2ZTk4MTlmZDM1M2RiZjM3MDViOWVmMWY2OGMzOTE3YTU1MTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWjYzytM7BpfmhdC9H7HYM7Hhzg5
txf551HGOxGkHP9WHyc3PXz8IPjzMx2fePQJyKk+fCzgy2toPkQQFaTYkvkj3NGx
u5Pt3e405l0kPOE353IKU+N5d4E7Cd8Vg1qXmIXElulSSS8Q9uQflUwlhnqG+pje
k20ihfT1D/gP5X+L+6QPSHGVIcrNpW4IKdSR+zYiQUH2Igtd3NwgsQ+kZdZuHp+l
MNAGD8EPmaEQBH00hlhDcr2yXCZQdgY+giKW/6bddh9WbG1MFf0VvW4Eq5dXBN07
Qy7tK/6v9h8DmQCuBcn1HvrUCoifggky3V79SIknIIXySx6lNrm3HemAXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI+26YGf01Pb83BbnvH2jDkXpVEEMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvajdicGdaX1RVOXZ6Y0Z1ZThmYU1PUmVsVVFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUGAbMA0G
CSqGSIb3DQEBCwUAA4IBAQC7+XMu+nJ635hOyC8mVC2dr/fiPEgRNWAPE8FpUUgO
fwLv70SNSUB1ENb0gmRfQjPyAJN+c+BL0bkco4RoEE5EMHYY9tNB68YSyRm/9fOq
U+8ZdXYBJ9kR+c0h288v6vg8E1fj3eai/PeU7jovlnnGPt4/do6lEd5eWs/Jq++l
Ney/duVpanov2b3j0Mywhb9jURB5RVuH2KhYfTlGTss9BjjjkurQ1U5etU88M7U8
7CxDzg6Pg76RRU6KZ2v3t6/ziimPhuIIbjmQCFrF0XU/Jr3uqih4Ea4fPVk0mfXK
FLBAKZ0JmOSRSavrUK7fPpkrxNV4i7SWVOpY6amtknrd
-----END CERTIFICATE-----
Generated at Tue Jan 20 02:47:39 2026 by rpki-client