This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/j_Se_UUpvXzgFBHV0DKpPTUboes.roa
File:                     j_Se_UUpvXzgFBHV0DKpPTUboes.roa (raw, json)
Hash identifier:          NyS6Ky7kfRsPmVEkp6PDfLDSTRMbr7bwze8MtEAMXCc=
Subject key identifier:   8F:F4:9E:FD:45:29:BD:7C:E0:14:11:D5:D0:32:A9:3D:35:1B:A1:EB
Certificate issuer:       /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial:       019B76EAE9443EA21D5643CA333A4B75307E
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/j_Se_UUpvXzgFBHV0DKpPTUboes.roa
Signing time:             Thu 01 Jan 2026 00:17:45 +0000
ROA not before:           Thu 01 Jan 2026 00:17:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51369
IP address blocks:        82.194.244.0/22 maxlen: 24
                          89.188.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:e9:44:3e:a2:1d:56:43:ca:33:3a:4b:75:30:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
        Validity
            Not Before: Jan  1 00:17:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8ff49efd4529bd7ce01411d5d032a93d351ba1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:43:49:66:c3:56:42:80:e7:fb:e0:d5:ab:
                    ca:bd:46:89:88:7c:5d:89:6c:b9:9c:33:ce:c2:0d:
                    b6:b9:6e:9b:43:e9:4d:bf:8a:45:dc:2d:ab:25:62:
                    5f:da:fa:ad:90:01:ff:cc:03:1b:ab:be:df:07:e0:
                    ca:ea:53:cb:97:10:8b:9d:08:5a:43:d6:69:d7:6c:
                    12:28:b7:33:45:6b:67:41:f5:34:d2:e2:61:10:c8:
                    8e:71:24:fa:68:48:52:fc:6f:42:cf:d1:57:a2:16:
                    f6:2a:59:b5:b2:7a:3a:fc:d7:76:5e:4b:df:f1:65:
                    23:76:f5:c0:1e:63:e6:03:93:5a:f2:ce:95:f4:54:
                    cf:6c:18:43:bd:ac:f3:98:68:dd:90:d3:e4:90:10:
                    c8:d3:db:33:4c:e2:91:5e:91:3e:6c:47:98:9a:15:
                    e4:21:c8:e8:a9:ac:eb:79:eb:89:65:9d:57:f2:51:
                    64:71:e5:51:40:06:39:c8:6d:c8:fc:4a:55:a1:f9:
                    b1:7e:52:be:99:ae:aa:22:da:05:49:49:e6:36:5e:
                    d3:32:68:bf:fb:f8:1e:1b:30:17:12:52:a1:29:56:
                    17:48:39:33:cc:5d:a1:c3:15:7d:5f:ec:41:77:9c:
                    57:a4:2c:f7:70:ea:96:d1:ae:15:ca:2d:26:17:f2:
                    32:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F4:9E:FD:45:29:BD:7C:E0:14:11:D5:D0:32:A9:3D:35:1B:A1:EB
            X509v3 Authority Key Identifier:
                keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/j_Se_UUpvXzgFBHV0DKpPTUboes.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.194.244.0/22
                  89.188.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:0a:f7:b6:1e:a7:50:31:35:ad:77:17:72:23:15:3d:d2:09:
         dc:c5:23:f4:57:00:1f:38:1a:d1:7d:1c:04:c8:b9:66:4b:e0:
         ea:3c:f0:99:d5:72:f0:ba:ba:a2:bb:56:19:23:6d:12:fd:7d:
         62:40:21:82:53:a7:2c:86:0b:4e:2a:3f:2a:9d:db:5e:bd:0f:
         6a:11:87:0b:f2:b9:57:d8:52:68:45:04:cc:73:e0:b7:45:e4:
         8e:fe:f8:b7:8c:d8:38:e1:f5:d6:39:54:d6:bf:25:a7:42:82:
         4b:29:4e:f8:a2:4c:cb:71:95:be:bd:8d:8f:96:6d:2b:5d:18:
         1c:b7:26:aa:c2:c1:6e:60:04:ae:ba:fb:2a:a8:bc:de:ed:32:
         16:8b:e5:b3:33:95:18:6a:d3:32:ae:bb:89:7b:b4:c4:0a:cd:
         79:5f:85:ac:8b:1d:d8:d8:90:53:ba:1a:57:47:74:b0:cd:ea:
         51:3e:af:1a:08:c5:4a:1d:a9:c0:9b:f9:9d:2f:1a:12:e5:6e:
         67:77:da:3f:2e:df:b4:43:85:fe:9c:df:da:59:d5:d8:d0:9c:
         d4:84:32:87:fb:bb:66:67:e2:90:52:1c:a4:e8:57:22:3d:93:
         4b:bc:c4:1a:d1:b2:11:7e:49:ab:5e:61:ce:04:d9:6b:90:2c:
         e6:e0:3f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:25:42 2026 by rpki-client