This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/J3iD4VDZ8-aXeeShiHXSPMED-RU.roa
File:                     J3iD4VDZ8-aXeeShiHXSPMED-RU.roa (raw, json)
Hash identifier:          RKIJqaCSpUiu7efuOwtfCD5ZdIggIAU78C+Ketk53I8=
Subject key identifier:   27:78:83:E1:50:D9:F3:E6:97:79:E4:A1:88:75:D2:3C:C1:03:F9:15
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       019BFF3D2579C185FBF58C4FA5A52F8593C7
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/J3iD4VDZ8-aXeeShiHXSPMED-RU.roa
Signing time:             Tue 27 Jan 2026 11:35:55 +0000
ROA not before:           Tue 27 Jan 2026 11:35:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16276
IP address blocks:        89.21.84.0/24 maxlen: 24
                          89.251.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 20:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ff:3d:25:79:c1:85:fb:f5:8c:4f:a5:a5:2f:85:93:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: Jan 27 11:35:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=277883e150d9f3e69779e4a18875d23cc103f915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:86:71:8c:9f:23:69:55:c8:8a:61:6e:13:43:
                    b3:e7:62:e2:34:83:94:f9:23:0e:55:0e:5b:4b:20:
                    72:5e:e0:a3:c8:92:61:aa:90:39:56:50:08:28:e8:
                    b5:e3:eb:04:ec:c7:b1:fc:6f:ce:3a:25:04:ba:e6:
                    9a:58:3d:2e:65:e0:62:e3:00:77:de:59:6f:63:87:
                    30:c7:cb:50:a1:09:10:de:84:9f:fe:54:25:e5:b6:
                    52:7e:92:f1:0f:0d:a7:24:6a:8a:2e:29:ee:9d:fd:
                    97:2e:a5:9d:9f:0b:14:6f:84:e4:8a:c9:35:eb:76:
                    59:48:2c:cc:25:72:74:3c:54:45:77:09:42:6f:97:
                    39:4d:66:1b:88:9c:6c:c0:6c:ac:3c:4f:72:fc:7c:
                    da:ed:d4:e2:e9:ad:21:b4:e2:d8:24:1e:33:d5:78:
                    99:02:7d:71:d7:26:3e:2b:e8:8f:f6:31:cf:bc:65:
                    39:00:55:d3:b8:59:17:aa:b5:a2:76:e5:35:d5:b1:
                    f0:11:69:02:ea:d0:b1:8d:61:44:a2:65:09:2e:ac:
                    6a:51:c1:23:d3:f1:89:dc:92:03:82:ca:63:62:e0:
                    ca:c0:98:d4:53:6a:e1:22:f3:56:17:31:7e:f2:e2:
                    88:2b:1b:dd:4b:23:11:7e:6d:6f:e9:df:33:b9:12:
                    78:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:78:83:E1:50:D9:F3:E6:97:79:E4:A1:88:75:D2:3C:C1:03:F9:15
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/J3iD4VDZ8-aXeeShiHXSPMED-RU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.21.84.0/24
                  89.251.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:c0:cc:e7:24:0a:68:f5:76:73:64:28:28:33:fb:22:f2:c3:
         03:d8:7d:db:a7:e1:49:52:b9:31:6d:27:e1:98:31:20:14:0e:
         a2:a4:96:fb:96:c9:7c:5a:3c:9b:a5:7e:aa:94:4b:83:ed:8e:
         93:8d:08:13:76:a8:50:a4:87:4b:ba:b4:a2:19:a9:bf:b8:f7:
         a2:3a:38:d0:5f:c6:68:8d:c2:da:bf:7d:84:1e:8d:b8:f1:b4:
         fb:2a:e9:d7:79:62:4c:e4:14:dc:35:f7:d2:a4:68:bd:e3:ed:
         5d:0c:78:21:3e:50:da:e6:84:ee:22:cb:82:0e:2f:50:bc:06:
         9f:be:26:0d:02:93:90:83:b3:f5:ea:51:d7:96:73:32:d8:fc:
         33:c9:ec:4e:b3:e2:85:49:82:d6:1c:28:61:4e:40:4d:93:35:
         e5:a3:16:d8:f8:c0:0f:57:ab:3f:a5:c2:39:1e:1f:2c:42:0c:
         63:79:db:98:37:b0:0a:df:f8:49:c8:e6:0b:12:32:3f:ea:2b:
         6a:63:10:44:f0:11:7c:08:8c:e6:f1:0d:95:d8:cf:a1:f5:c8:
         9b:2b:80:71:cb:c7:24:d0:45:ec:c8:cd:49:1e:af:95:a5:66:
         84:c0:09:e6:62:4d:9a:8f:b4:a6:75:0a:aa:f5:e1:54:2f:73:
         97:c3:9d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 04:53:51 2026 by rpki-client