This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/JvCqnDgnG_NMUFGCTVJgzecfD7c.roa
File:                     JvCqnDgnG_NMUFGCTVJgzecfD7c.roa (raw, json)
Hash identifier:          AcWZWGCS7jwVQ2QXY4DUEvQhQzrEr9Bgn3uL02QHLvA=
Subject key identifier:   26:F0:AA:9C:38:27:1B:F3:4C:50:51:82:4D:52:60:CD:E7:1F:0F:B7
Certificate issuer:       /CN=db282fd897317c2cadd7b13969f6f015c397e05d
Certificate serial:       019B7C7F63623B3E09A8CD10785D05D50418
Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/JvCqnDgnG_NMUFGCTVJgzecfD7c.roa
Signing time:             Fri 02 Jan 2026 02:18:01 +0000
ROA not before:           Fri 02 Jan 2026 02:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43260
IP address blocks:        185.9.36.0/24 maxlen: 24
                          185.9.37.0/24 maxlen: 24
                          185.9.38.0/24 maxlen: 24
                          185.9.39.0/24 maxlen: 24
                          185.244.144.0/24 maxlen: 24
                          185.244.145.0/24 maxlen: 24
                          185.244.146.0/24 maxlen: 24
                          185.244.147.0/24 maxlen: 24
                          217.70.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 08:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:63:62:3b:3e:09:a8:cd:10:78:5d:05:d5:04:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d
        Validity
            Not Before: Jan  2 02:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=26f0aa9c38271bf34c5051824d5260cde71f0fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:cf:da:f9:c8:ae:0b:3b:71:84:5b:56:41:
                    25:6f:85:74:52:f2:d2:bb:2a:70:09:82:b8:33:85:
                    5d:71:63:c1:01:ba:66:11:8b:ce:69:63:5f:b1:e4:
                    b2:6e:32:f9:dd:b5:ad:34:b7:1d:b8:d8:70:c5:95:
                    b7:18:21:1a:8e:b6:1e:a3:a8:e8:7f:63:1e:8f:0a:
                    62:ce:9f:dc:d6:b0:2f:7f:19:89:a1:79:86:a9:25:
                    65:17:2f:7b:97:b5:fb:84:64:06:cf:04:de:5f:85:
                    ae:b2:86:2a:75:6a:d3:0a:f0:e6:32:c7:20:dc:3a:
                    8c:5e:12:b3:46:bf:e6:f4:97:7f:07:2b:90:b3:96:
                    8c:ef:02:0b:c4:44:a6:40:7e:df:a4:d8:45:04:9d:
                    a8:43:25:5c:2e:27:e0:e0:22:d8:a1:ef:53:19:a2:
                    2a:f3:b5:a9:8e:07:db:5a:c3:a0:b5:b8:15:69:3e:
                    8e:43:4c:02:f8:59:ec:7c:5f:e0:8c:aa:ce:4a:f2:
                    9a:6a:af:0a:2c:f5:88:3d:b7:6d:9c:e4:37:bd:3b:
                    94:8e:15:4d:e2:bc:69:de:da:57:db:bc:3b:66:db:
                    2c:1e:b6:c7:08:62:a3:51:ba:30:cf:bc:df:a0:89:
                    4d:7c:63:5f:10:cc:aa:a4:73:78:61:ff:f2:f5:29:
                    01:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F0:AA:9C:38:27:1B:F3:4C:50:51:82:4D:52:60:CD:E7:1F:0F:B7
            X509v3 Authority Key Identifier:
                keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/JvCqnDgnG_NMUFGCTVJgzecfD7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.9.36.0/22
                  185.244.144.0/22
                  217.70.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:76:b5:d8:3a:dd:b0:38:a4:bc:54:ce:21:1a:55:d3:10:d4:
         9c:e4:53:22:4e:44:95:6e:dd:b1:b8:7d:09:c6:fa:1b:22:a0:
         25:12:e4:cf:47:26:b4:d4:5b:be:b2:bf:27:dd:02:b6:26:a3:
         2a:4f:68:bd:5c:f3:26:69:7e:0d:2f:b4:89:07:dc:e8:91:ed:
         fc:64:a1:a6:25:f1:7d:dc:cb:79:e0:50:5e:2b:d6:92:39:54:
         93:03:45:aa:54:16:4b:7d:94:d4:42:e9:6d:84:be:da:10:ac:
         97:06:41:00:19:a4:29:a7:84:bb:31:2f:eb:b4:d9:48:b2:ce:
         a0:69:a1:ed:b5:ee:55:83:f8:4d:52:21:6c:24:be:e0:e9:72:
         78:ac:6d:a3:d5:eb:cc:33:d4:20:86:74:a1:0b:61:60:7a:8d:
         79:be:05:e6:bf:2d:7e:27:5b:50:67:27:84:0a:4d:6c:32:58:
         15:cc:ee:ef:ba:50:90:4f:0f:55:cd:96:e3:d9:6f:82:ca:a3:
         f2:4b:dd:a8:5d:44:b6:c5:52:99:39:05:3a:f2:8c:4e:1a:35:
         13:4c:6a:25:1e:ff:26:aa:23:db:27:b1:cf:2d:d2:cc:97:8d:
         1c:5d:ad:3d:74:87:a0:ac:fb:ab:fc:e9:f6:c4:14:a6:2b:fb:
         11:40:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:52:06 2026 by rpki-client