This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/KAMejuRA6SeFAjQoLQXU7zLjWr8.roa
File:                     KAMejuRA6SeFAjQoLQXU7zLjWr8.roa (raw, json)
Hash identifier:          LnxIlTyZE7AtMc2QM8/mi8gslLYiHvYgSbLU2cG39As=
Subject key identifier:   28:03:1E:8E:E4:40:E9:27:85:02:34:28:2D:05:D4:EF:32:E3:5A:BF
Certificate issuer:       /CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Certificate serial:       019B7BA3D4E2D8D6FF7A1A0DED712B31A979
Authority key identifier: 8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/KAMejuRA6SeFAjQoLQXU7zLjWr8.roa
Signing time:             Thu 01 Jan 2026 22:18:13 +0000
ROA not before:           Thu 01 Jan 2026 22:18:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60039
IP address blocks:        185.60.236.0/24 maxlen: 24
                          185.98.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:d4:e2:d8:d6:ff:7a:1a:0d:ed:71:2b:31:a9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
        Validity
            Not Before: Jan  1 22:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=28031e8ee440e927850234282d05d4ef32e35abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:29:70:31:8f:bd:53:27:87:18:3a:b0:5d:
                    1e:47:17:5d:81:70:2c:63:62:19:6b:63:28:f9:54:
                    b4:31:35:42:63:20:98:14:c6:43:83:53:62:7c:60:
                    74:24:be:a6:7f:39:7c:ec:cc:0e:9a:a6:63:84:c2:
                    d5:be:a9:f7:79:66:e8:d9:5f:2a:81:fe:29:e1:c3:
                    ad:3e:aa:67:f0:a8:04:10:55:ec:9c:4e:d9:7d:ab:
                    ee:65:f2:f7:26:35:a4:33:aa:80:b3:91:53:07:9b:
                    1c:58:04:34:2d:a6:cd:ba:3c:a0:7a:c7:5b:fd:22:
                    9d:6e:cb:60:43:55:7c:8d:83:d8:a1:aa:e0:41:f5:
                    7c:41:49:62:dc:c0:2b:a6:ff:88:e3:85:3f:52:27:
                    1c:b2:7e:47:7e:5c:e9:a6:b5:de:49:1f:d1:b3:2d:
                    06:91:75:8a:6b:5d:70:43:0b:87:3e:fc:89:c2:d6:
                    2e:71:b3:08:6a:78:20:88:44:96:33:a0:e2:40:2b:
                    b0:60:94:c9:91:4d:b2:5b:eb:17:ea:a7:53:e9:d0:
                    2f:e3:3b:af:26:11:70:a0:18:c9:03:f7:1c:cc:81:
                    33:2a:c6:71:a1:ed:2d:fe:59:b7:78:9d:9d:08:13:
                    39:a7:d4:71:29:e6:d1:39:71:af:cd:fe:7b:36:d6:
                    73:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:03:1E:8E:E4:40:E9:27:85:02:34:28:2D:05:D4:EF:32:E3:5A:BF
            X509v3 Authority Key Identifier:
                keyid:8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/KAMejuRA6SeFAjQoLQXU7zLjWr8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.60.236.0/24
                  185.98.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:31:46:df:14:94:f6:92:e4:47:49:1f:3e:82:94:cf:dd:74:
         72:8b:0a:c7:bf:2d:3a:7e:b4:09:24:a7:8a:65:45:5a:b7:cc:
         ba:9a:c2:c0:8c:ef:e5:30:1c:65:20:c4:50:8d:a9:c7:36:a9:
         8e:cf:97:18:aa:31:19:df:9a:3f:0b:8b:cb:43:e2:c1:0b:79:
         bb:bc:de:19:6b:50:02:59:7b:93:b3:3f:d3:6b:04:15:8e:85:
         fb:4c:1c:f4:1f:d6:65:d2:9f:07:5a:a6:35:b3:51:70:38:c9:
         6b:14:60:a5:7d:e7:27:00:ac:a7:df:29:7e:c7:85:3c:a8:e1:
         a8:1c:33:0a:f0:dc:5d:f3:b2:44:ea:85:83:5b:70:af:3e:4c:
         a0:c9:34:69:2b:4b:2b:27:40:fd:06:ee:b4:6a:90:9a:ff:10:
         cf:58:30:36:72:d2:88:62:40:50:ba:01:cc:5c:e1:aa:b7:cf:
         7e:a1:b4:98:b8:a7:dd:46:b5:ed:68:62:aa:c4:7e:f6:3d:ba:
         d6:90:15:54:14:47:60:3b:19:c3:69:08:4c:76:76:dc:76:b4:
         54:71:34:b3:5b:34:18:e8:ac:84:d6:e9:ad:3a:e3:8d:84:da:
         3a:28:91:c3:bc:72:21:c1:f6:2a:d3:56:ed:19:e9:7a:21:5e:
         61:c9:cc:4a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt7o9Ti2Nb/ehoN7XErMal5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYWNjN2YzYjIxOGM0OTJkODhkYmViYzljZGNiOWEyZDJk
MzBlZDEwHhcNMjYwMTAxMjIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODAzMWU4ZWU0NDBlOTI3ODUwMjM0MjgyZDA1ZDRlZjMyZTM1YWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte4pcDGPvVMnhxg6sF0eRxddgXAs
Y2IZa2Mo+VS0MTVCYyCYFMZDg1NifGB0JL6mfzl87MwOmqZjhMLVvqn3eWbo2V8q
gf4p4cOtPqpn8KgEEFXsnE7ZfavuZfL3JjWkM6qAs5FTB5scWAQ0LabNujygesdb
/SKdbstgQ1V8jYPYoargQfV8QUli3MArpv+I44U/Uiccsn5HflzpprXeSR/Rsy0G
kXWKa11wQwuHPvyJwtYucbMIanggiESWM6DiQCuwYJTJkU2yW+sX6qdT6dAv4zuv
JhFwoBjJA/cczIEzKsZxoe0t/lm3eJ2dCBM5p9RxKebROXGvzf57NtZznwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCgDHo7kQOknhQI0KC0F1O8y41q/MB8GA1UdIwQY
MBaAFI6sx/OyGMSS2I2+vJzcuaLS0w7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanF6SDg3SVl4SkxZamI2OG5OeTVvdExURHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iZDQyZWEtZWJiNi00NDQ1LWJkMjAt
Nzc1ZGE2YWEzMTIzLzEvS0FNZWp1UkE2U2VGQWpRb0xRWFU3ekxqV3I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iZDQyZWEtZWJiNi00NDQ1LWJkMjAtNzc1ZGE2YWEzMTIz
LzEvanF6SDg3SVl4SkxZamI2OG5OeTVvdExURHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuTzsAwQA
uWJoMA0GCSqGSIb3DQEBCwUAA4IBAQAzMUbfFJT2kuRHSR8+gpTP3XRyiwrHvy06
frQJJKeKZUVat8y6msLAjO/lMBxlIMRQjanHNqmOz5cYqjEZ35o/C4vLQ+LBC3m7
vN4Za1ACWXuTsz/TawQVjoX7TBz0H9Zl0p8HWqY1s1FwOMlrFGClfecnAKyn3yl+
x4U8qOGoHDMK8Nxd87JE6oWDW3CvPkygyTRpK0srJ0D9Bu60apCa/xDPWDA2ctKI
YkBQugHMXOGqt89+obSYuKfdRrXtaGKqxH72PbrWkBVUFEdgOxnDaQhMdnbcdrRU
cTSzWzQY6KyE1umtOuONhNo6KJHDvHIhwfYq01btGel6IV5hycxK
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:03 2026 by rpki-client