This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/jeUCTnllWBc2YjwSNbaBtlWcww4.roa
File:                     jeUCTnllWBc2YjwSNbaBtlWcww4.roa (raw, json)
Hash identifier:          A3urkixwNeWZh9C+aMoLes8n2HeLxR2S7cO9Wh2QMPQ=
Subject key identifier:   8D:E5:02:4E:79:65:58:17:36:62:3C:12:35:B6:81:B6:55:9C:C3:0E
Certificate issuer:       /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Certificate serial:       019B7E3904515AA8CB3A90BD7430EB677120
Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/jeUCTnllWBc2YjwSNbaBtlWcww4.roa
Signing time:             Fri 02 Jan 2026 10:20:24 +0000
ROA not before:           Fri 02 Jan 2026 10:20:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197922
IP address blocks:        45.81.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:39:04:51:5a:a8:cb:3a:90:bd:74:30:eb:67:71:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
        Validity
            Not Before: Jan  2 10:20:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8de5024e7965581736623c1235b681b6559cc30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:74:e0:d3:cb:60:99:a4:61:01:25:c3:20:22:
                    50:af:28:8a:b2:7b:07:f6:da:ad:ea:a3:8c:5d:db:
                    4f:84:f9:24:ca:d3:a9:89:0f:9f:76:ca:b2:88:89:
                    b5:ac:64:b0:99:23:b2:f6:d3:23:5a:c8:f1:63:9f:
                    40:c4:8b:42:c2:13:d8:7b:5d:d4:68:04:96:ad:fb:
                    d5:03:40:ea:5c:70:4e:44:4c:90:cd:56:5c:45:df:
                    4c:be:d2:fa:d9:6d:75:d7:45:c8:ac:3b:4c:55:74:
                    d6:d2:b7:a3:35:69:49:3e:b2:8e:a0:e6:97:4b:fe:
                    10:8c:b8:6d:38:79:ed:1b:25:af:c0:22:ee:1e:22:
                    8d:07:a3:b2:06:c5:e9:f3:65:6f:0e:f8:93:49:10:
                    ea:65:23:0a:f6:20:d4:05:dd:0a:d6:9e:48:07:f0:
                    ad:7f:0b:ca:8b:fa:46:17:b2:91:d6:7d:4c:78:d7:
                    67:4d:c7:7b:31:e3:c0:5e:51:7a:20:df:30:65:a7:
                    8d:c9:9b:72:db:63:70:ec:69:30:bc:66:a1:02:3a:
                    76:6d:da:81:83:47:1b:a1:d8:e3:84:32:7d:ff:7c:
                    f3:cf:1a:1d:26:02:dd:c2:1a:35:87:28:e6:36:a6:
                    ca:83:36:35:a6:d4:71:46:11:c9:b2:42:f3:0f:c0:
                    f4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E5:02:4E:79:65:58:17:36:62:3C:12:35:B6:81:B6:55:9C:C3:0E
            X509v3 Authority Key Identifier:
                keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/jeUCTnllWBc2YjwSNbaBtlWcww4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:97:57:b9:32:f0:4c:0a:5c:fc:2b:68:ee:91:df:d9:07:59:
         e2:27:5b:85:21:82:53:41:dc:19:28:57:67:5c:77:e3:21:81:
         8d:85:ac:3b:de:74:f4:5f:38:af:86:2c:b2:a4:ac:74:3b:e0:
         e8:f7:d2:1b:2a:9e:6d:ac:d3:40:7e:15:9b:67:b4:91:7a:a8:
         3f:95:aa:1c:4c:3d:b8:c7:37:6c:0f:55:7d:06:b1:7f:16:32:
         c9:01:5c:75:ed:56:15:47:87:74:8d:b7:9c:ea:0b:c7:7f:96:
         2d:71:78:e7:91:15:ce:c2:e7:26:80:16:90:e7:56:70:c2:f6:
         fb:88:ef:3f:f8:7b:c7:5c:31:77:36:b9:db:75:d2:5d:f8:b1:
         3d:5e:14:09:9f:af:56:9d:97:7e:6c:d7:57:c0:73:9f:03:28:
         49:8e:32:ed:ce:08:93:c2:83:fa:5c:76:5a:f7:6d:52:d9:69:
         c5:f1:e9:e0:78:ae:98:e1:de:7a:c2:81:b1:71:0c:c2:17:77:
         97:d4:b1:9c:c1:8b:19:fe:9f:01:db:18:4b:9c:f6:7a:1e:61:
         d4:ac:10:6c:0f:da:62:f3:e3:c7:a3:7a:3c:ac:9a:88:36:54:
         d4:1c:52:3d:f6:94:ea:aa:05:0d:14:be:c2:f2:00:72:fb:b1:
         11:7d:96:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:05:16 2026 by rpki-client