This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/jCuo6545oiKxunzEzdjn4KWAwKk.roa
File:                     jCuo6545oiKxunzEzdjn4KWAwKk.roa (raw, json)
Hash identifier:          feub2xmiSI1LpIG2NYiyuel10Qun7eDdOaL8sGSW3Wo=
Subject key identifier:   8C:2B:A8:EB:9E:39:A2:22:B1:BA:7C:C4:CD:D8:E7:E0:A5:80:C0:A9
Certificate issuer:       /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial:       019A9CBC4E8072A15A4D70B42E7DCC8569D6
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/jCuo6545oiKxunzEzdjn4KWAwKk.roa
Signing time:             Wed 19 Nov 2025 15:29:37 +0000
ROA not before:           Wed 19 Nov 2025 15:29:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9304
IP address blocks:        85.8.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Dec 2025 21:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:9c:bc:4e:80:72:a1:5a:4d:70:b4:2e:7d:cc:85:69:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
        Validity
            Not Before: Nov 19 15:29:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8c2ba8eb9e39a222b1ba7cc4cdd8e7e0a580c0a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c5:37:f0:cc:75:55:d4:1f:27:61:b1:15:6e:
                    e9:33:3a:a7:fb:e6:17:45:4a:90:70:ed:d6:cb:a6:
                    20:1d:5c:d3:7d:e5:b9:f0:60:da:f2:d6:c6:85:2f:
                    76:d9:e2:a6:5c:10:d3:8b:b4:d8:27:c0:70:78:ff:
                    09:e5:13:2d:39:cb:6a:e6:7f:f9:c5:4d:29:1f:27:
                    4a:70:1b:88:b6:af:db:2e:39:a1:fb:09:26:44:ef:
                    bb:f9:2f:7d:1d:88:d6:8c:3c:1c:7f:7d:69:51:81:
                    17:fa:b1:83:2b:08:13:75:cf:cd:78:a6:1a:1c:69:
                    69:62:28:7e:54:cc:4a:1a:1d:4a:37:51:8f:33:dd:
                    78:b2:0f:93:7e:21:7a:cc:fc:77:21:5e:0d:71:fd:
                    83:3f:f6:84:5b:08:b3:49:a5:7e:de:40:cf:24:17:
                    a9:ee:ce:5f:21:16:f1:cd:c4:f2:f2:df:e8:79:d5:
                    b0:73:cc:12:6d:42:a8:8a:65:ed:bd:fb:44:e5:3f:
                    4c:93:f8:82:95:4e:02:90:60:86:9f:21:8f:4e:02:
                    e3:18:36:fe:76:f1:28:67:38:99:62:33:d8:f5:f9:
                    ae:eb:6d:fa:2c:aa:96:46:5c:c4:db:71:b0:f9:b4:
                    9f:07:e1:46:cd:e0:a1:5e:65:89:95:23:36:d6:7d:
                    80:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2B:A8:EB:9E:39:A2:22:B1:BA:7C:C4:CD:D8:E7:E0:A5:80:C0:A9
            X509v3 Authority Key Identifier:
                keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/jCuo6545oiKxunzEzdjn4KWAwKk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.8.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:1b:8b:dd:8e:1b:07:77:1c:28:65:f8:af:f4:4d:30:ca:54:
         3d:7c:fe:23:4e:e1:73:90:f0:dc:21:d3:00:e8:e8:86:8d:b0:
         e6:1a:25:0b:ab:9a:f8:31:67:5a:65:59:67:9a:80:2c:8d:33:
         2a:56:36:1b:1e:42:7e:73:35:4a:4e:12:d6:b5:b2:9b:25:54:
         4e:f6:e4:31:fe:ce:a3:ea:df:76:84:f0:33:f2:f4:58:65:ff:
         2b:d3:2f:63:3a:5a:82:42:c9:56:75:8b:82:08:96:d5:c6:a4:
         83:be:2a:ab:01:34:07:40:e4:c7:a7:8f:73:1e:62:c5:f3:e3:
         1e:80:54:a8:4d:94:f1:ad:d2:fc:0f:a7:21:69:6e:db:3d:50:
         38:2d:f0:e1:44:84:01:fa:c7:d4:5d:78:7f:e8:2c:39:33:56:
         56:ae:e4:00:1d:2a:66:ac:2b:c2:65:d4:51:68:88:99:7d:5a:
         0d:11:38:f1:d6:d1:ad:0f:7b:b9:d0:fd:d1:29:56:26:1d:c9:
         bc:ad:d2:5e:f7:79:54:d9:8f:07:6b:57:8c:57:f0:04:04:45:
         69:60:a0:80:6b:e0:34:3a:5f:6c:48:d2:42:db:26:28:1b:3b:
         ed:38:34:b2:19:91:9f:a4:61:75:dd:32:55:5b:a9:f5:93:30:
         01:45:be:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 04:21:37 2025 by rpki-client