This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/JMsELryrC71hTAcMzLYAc7CKRKk.roa
File:                     JMsELryrC71hTAcMzLYAc7CKRKk.roa (raw, json)
Hash identifier:          rdsIPfGSMD6EsO8NTErhSi4I9C7O//GGQnV/svCoWHA=
Subject key identifier:   24:CB:04:2E:BC:AB:0B:BD:61:4C:07:0C:CC:B6:00:73:B0:8A:44:A9
Certificate issuer:       /CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Certificate serial:       019B7D5CDA3DA2809843E7AE9372B2FC782B
Authority key identifier: 43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/JMsELryrC71hTAcMzLYAc7CKRKk.roa
Signing time:             Fri 02 Jan 2026 06:19:55 +0000
ROA not before:           Fri 02 Jan 2026 06:19:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35424
IP address blocks:        45.67.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:da:3d:a2:80:98:43:e7:ae:93:72:b2:fc:78:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
        Validity
            Not Before: Jan  2 06:19:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=24cb042ebcab0bbd614c070cccb60073b08a44a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:29:b8:ec:ff:d6:9a:69:d9:2b:26:c5:d7:a1:
                    70:31:f9:09:db:59:ad:8d:de:cb:c8:34:e8:d0:a1:
                    25:ce:07:9e:38:6c:16:d5:a4:64:42:40:bb:9e:c7:
                    d2:e1:ae:04:8c:63:c8:c7:11:d3:18:eb:01:a4:61:
                    e4:d7:ab:ee:76:dc:09:52:53:25:cb:12:7d:b6:7e:
                    58:81:f8:9c:e6:97:ca:91:a4:d6:50:11:f0:2b:89:
                    32:23:a7:e2:94:95:f5:37:35:db:be:7f:9b:d8:da:
                    90:ba:61:75:ee:6d:df:69:0c:b3:6b:fb:8d:8f:aa:
                    ae:50:c6:0e:fa:b8:f9:f0:54:ca:33:50:16:82:a7:
                    4b:50:8e:fa:d5:e7:03:35:f1:2e:20:ad:68:3d:59:
                    1d:dc:97:6a:ec:c9:0d:24:4b:de:72:11:d5:e5:98:
                    c4:dc:77:7d:a2:74:29:64:06:b1:04:bd:b5:38:56:
                    f8:b7:d8:12:ce:6b:c6:e0:ce:d1:48:4f:0f:b0:e7:
                    90:de:80:d8:7d:07:5c:98:cc:d2:73:8f:77:8a:75:
                    02:79:72:5d:df:94:e9:a4:c8:aa:33:37:a1:3e:03:
                    d4:6f:85:53:c9:de:80:88:5e:fb:22:0a:3d:93:7a:
                    a6:c6:2d:3d:35:a5:6b:28:fd:89:58:d3:ac:c4:5c:
                    06:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CB:04:2E:BC:AB:0B:BD:61:4C:07:0C:CC:B6:00:73:B0:8A:44:A9
            X509v3 Authority Key Identifier:
                keyid:43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/JMsELryrC71hTAcMzLYAc7CKRKk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:75:c4:e3:fa:89:6c:be:b0:2b:5d:15:e0:b4:7d:60:67:63:
         85:31:c8:e8:62:62:f2:a5:b0:65:d5:01:72:b6:e3:25:e6:9c:
         1c:5a:a5:84:7a:fd:df:08:94:1b:63:f9:75:5e:32:ce:90:a8:
         f9:d0:1a:ba:92:1a:49:00:af:47:66:2a:5c:df:4d:ce:ab:0a:
         80:41:7a:f6:40:f0:86:a9:a8:98:18:44:41:3c:b5:a5:ed:88:
         dd:fb:14:e0:f9:47:5b:9c:7e:29:6b:4a:d1:45:6e:51:37:ba:
         e1:45:1b:0b:bc:fc:05:20:e3:43:e7:bd:89:f8:8b:ce:38:0c:
         f0:d3:8c:dc:b5:97:58:d8:f5:5f:fc:8d:3c:e9:64:3a:81:ce:
         79:3c:c1:e2:f3:8b:ca:5c:a5:17:c7:85:f6:b9:c3:26:7c:5d:
         70:09:bc:c6:1d:6d:ad:65:80:dc:24:e6:af:92:cf:cf:81:0e:
         1d:c9:5a:f3:34:90:c8:cd:57:fe:f0:93:65:45:d1:9a:5f:c9:
         ff:d9:a0:98:50:9c:af:16:13:9b:d7:12:40:34:81:73:f2:a0:
         e2:bd:e2:c8:7b:8b:b8:23:e1:0f:bb:f7:8b:1c:ed:9a:a5:ab:
         6b:5f:b2:a6:40:51:b9:4e:6d:1c:7b:a1:bb:ee:4b:64:14:62:
         3b:bd:2d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:16 2026 by rpki-client