This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/j98UV-BgExyb9adi5erOXscKqog.roa
File:                     j98UV-BgExyb9adi5erOXscKqog.roa (raw, json)
Hash identifier:          88mctdTU6yo8PEQaJDy8QcI7oK95L6LpsJR0cE4Epq4=
Subject key identifier:   8F:DF:14:57:E0:60:13:1C:9B:F5:A7:62:E5:EA:CE:5E:C7:0A:AA:88
Certificate issuer:       /CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
Certificate serial:       019C38E674DBCED28626189B4AEFD337D829
Authority key identifier: 25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/j98UV-BgExyb9adi5erOXscKqog.roa
Signing time:             Sat 07 Feb 2026 16:19:13 +0000
ROA not before:           Sat 07 Feb 2026 16:19:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44227
IP address blocks:        91.202.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:38:e6:74:db:ce:d2:86:26:18:9b:4a:ef:d3:37:d8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
        Validity
            Not Before: Feb  7 16:19:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8fdf1457e060131c9bf5a762e5eace5ec70aaa88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:67:c2:44:30:0e:8e:d5:c5:c0:1f:4a:02:65:
                    6a:d6:87:26:94:7f:e7:71:8e:bb:51:51:d6:8f:b9:
                    e1:8f:43:68:f5:63:d9:09:9e:94:14:85:e5:57:dc:
                    88:79:9c:6f:cd:ce:05:6a:36:39:54:b1:58:b0:09:
                    12:78:79:34:35:bc:d9:79:29:d3:5b:d0:0d:de:0a:
                    b1:f6:72:00:db:b9:9a:26:95:f9:0f:cc:28:35:90:
                    bd:b7:5a:53:b1:41:8f:5a:6a:98:97:b8:3b:a7:8a:
                    d7:94:ce:5a:50:23:57:a9:41:71:5f:66:39:77:91:
                    da:13:6b:5c:10:e9:be:a8:50:1b:18:7a:59:bf:30:
                    56:b5:5d:15:0a:0a:af:62:ae:d6:d4:f2:e4:fa:2e:
                    11:35:9b:2a:23:8a:41:8f:6a:32:52:c6:66:5a:48:
                    c8:52:6d:5e:84:31:e6:af:51:4e:36:b4:f0:74:88:
                    d8:2c:2a:28:91:0f:c5:43:50:47:5d:ce:9f:e1:25:
                    e2:9d:c5:da:31:ab:c0:98:53:78:97:81:c2:8e:a1:
                    75:44:b4:bc:8f:90:f6:2b:eb:8b:56:b8:6a:9d:be:
                    4b:35:84:02:80:bd:e3:ab:81:06:cb:a7:85:4c:a6:
                    0b:f5:5c:0d:8a:28:3e:e9:e0:39:c4:4e:b5:d6:8d:
                    13:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DF:14:57:E0:60:13:1C:9B:F5:A7:62:E5:EA:CE:5E:C7:0A:AA:88
            X509v3 Authority Key Identifier:
                keyid:25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/j98UV-BgExyb9adi5erOXscKqog.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.202.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:e7:41:73:48:a0:dd:9c:85:dd:43:ed:b0:66:3a:3f:80:35:
         8f:cc:58:a2:03:87:d6:3f:6f:68:80:1b:01:5c:68:86:97:03:
         a6:8f:0a:90:10:34:88:2f:d1:f4:9a:0a:0c:cc:2b:8c:62:e5:
         c0:b6:b4:9b:64:25:5d:ad:74:53:d6:de:8f:3e:d1:4b:ce:b1:
         04:7e:cf:11:24:44:49:ec:2b:b7:54:0f:10:6c:a4:e0:71:df:
         14:27:85:84:e8:c5:41:1d:28:bc:c9:ab:c9:e1:5e:00:c1:5e:
         4c:59:b8:ce:42:23:55:32:48:31:61:d4:f4:c0:42:a9:2e:4f:
         fa:d3:cc:04:be:cd:71:c0:55:b0:79:a9:91:23:e3:aa:0b:60:
         55:f8:f8:f0:34:6d:e2:e3:f4:9a:32:bc:4d:54:59:da:03:1a:
         dc:7c:cf:e2:93:41:91:68:b2:90:04:aa:db:05:4f:cc:72:5d:
         ad:6b:c9:77:b9:e2:42:69:d5:e5:82:54:a4:7f:df:0d:ca:95:
         e5:5c:99:b8:aa:c0:39:4e:10:0a:b7:c2:34:5a:37:b7:f9:aa:
         ce:dc:46:eb:cc:5c:9b:51:29:99:89:ef:63:51:b4:0c:86:ac:
         a5:a0:11:4b:fb:d5:8d:fa:68:11:58:04:7f:8b:6c:4c:cf:1b:
         73:59:05:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZw45nTbztKGJhibSu/TN9gpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ODk0MWEzMzdiOGNhMTVmY2FlOTE2ZmNiNDIwYzU4ZGYy
ZTBiOWMwHhcNMjYwMjA3MTYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmRmMTQ1N2UwNjAxMzFjOWJmNWE3NjJlNWVhY2U1ZWM3MGFhYTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2fCRDAOjtXFwB9KAmVq1ocmlH/n
cY67UVHWj7nhj0No9WPZCZ6UFIXlV9yIeZxvzc4FajY5VLFYsAkSeHk0NbzZeSnT
W9AN3gqx9nIA27maJpX5D8woNZC9t1pTsUGPWmqYl7g7p4rXlM5aUCNXqUFxX2Y5
d5HaE2tcEOm+qFAbGHpZvzBWtV0VCgqvYq7W1PLk+i4RNZsqI4pBj2oyUsZmWkjI
Um1ehDHmr1FONrTwdIjYLCookQ/FQ1BHXc6f4SXincXaMavAmFN4l4HCjqF1RLS8
j5D2K+uLVrhqnb5LNYQCgL3jq4EGy6eFTKYL9VwNiig+6eA5xE611o0TeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI/fFFfgYBMcm/WnYuXqzl7HCqqIMB8GA1UdIwQY
MBaAFCWJQaM3uMoV/K6Rb8tCDFjfLgucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSllsQm96ZTR5aFg4cnBGdnkwSU1XTjh1QzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wNGVmNjAtYzc5Zi00ODU0LWE1NzYt
NDc3NWJiNjY4YjA0LzEvajk4VVYtQmdFeHliOWFkaTVlck9Yc2NLcW9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wNGVmNjAtYzc5Zi00ODU0LWE1NzYtNDc3NWJiNjY4YjA0
LzEvSllsQm96ZTR5aFg4cnBGdnkwSU1XTjh1QzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8oCMA0G
CSqGSIb3DQEBCwUAA4IBAQBD50FzSKDdnIXdQ+2wZjo/gDWPzFiiA4fWP29ogBsB
XGiGlwOmjwqQEDSIL9H0mgoMzCuMYuXAtrSbZCVdrXRT1t6PPtFLzrEEfs8RJERJ
7Cu3VA8QbKTgcd8UJ4WE6MVBHSi8yavJ4V4AwV5MWbjOQiNVMkgxYdT0wEKpLk/6
08wEvs1xwFWweamRI+OqC2BV+PjwNG3i4/SaMrxNVFnaAxrcfM/ik0GRaLKQBKrb
BU/Mcl2ta8l3ueJCadXlglSkf98NypXlXJm4qsA5ThAKt8I0Wje3+arO3EbrzFyb
USmZie9jUbQMhqyloBFL+9WN+mgRWAR/i2xMzxtzWQXX
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:23:46 2026 by rpki-client