This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/j1JDL1NRbmDxXB8ccW_ghKg7WSw.roa
File:                     j1JDL1NRbmDxXB8ccW_ghKg7WSw.roa (raw, json)
Hash identifier:          j1who2P7dA+z1wAH/SO7xSlnqBCmbnDiBNhev3xgB9A=
Subject key identifier:   8F:52:43:2F:53:51:6E:60:F1:5C:1F:1C:71:6F:E0:84:A8:3B:59:2C
Certificate issuer:       /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Certificate serial:       019B7F13B4A5BE185ACA5BB148E1C2D4036D
Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/j1JDL1NRbmDxXB8ccW_ghKg7WSw.roa
Signing time:             Fri 02 Jan 2026 14:19:16 +0000
ROA not before:           Fri 02 Jan 2026 14:19:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31192
IP address blocks:        193.26.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:13:b4:a5:be:18:5a:ca:5b:b1:48:e1:c2:d4:03:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
        Validity
            Not Before: Jan  2 14:19:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8f52432f53516e60f15c1f1c716fe084a83b592c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:03:df:4c:17:47:62:18:25:ba:24:94:70:
                    55:27:d6:f8:99:10:bd:d3:8c:9d:cf:b6:de:5e:44:
                    82:38:80:7f:56:31:91:65:90:4e:bd:2b:6b:c0:e0:
                    6c:1a:17:00:ce:d9:0c:a8:9d:e4:6a:4e:54:7b:54:
                    26:25:8b:da:66:15:ec:02:cf:cf:b7:e7:c7:00:b7:
                    1f:be:8b:90:35:cb:28:14:e9:f8:d3:51:a0:91:47:
                    e1:ee:07:e6:6a:7f:5e:b7:d2:2f:58:30:f4:d5:76:
                    36:ba:5b:c9:10:cf:fa:07:07:d2:81:03:ac:46:29:
                    b6:17:cf:2d:99:3a:9e:8f:07:0a:1d:64:21:53:ab:
                    6e:8f:fc:74:90:49:be:5d:5d:00:ba:d1:d9:2d:53:
                    50:d5:bb:4a:0d:7a:55:04:0e:c3:5f:92:a4:a4:52:
                    8b:e7:64:cc:d0:66:80:27:c1:e4:28:a3:f5:91:6b:
                    30:19:73:83:91:a0:db:09:20:ba:cc:36:88:5b:23:
                    92:c7:39:7f:68:96:65:55:59:cd:e3:b7:61:64:eb:
                    65:e4:a4:d6:aa:fb:06:5e:62:c4:ad:f1:57:4f:3c:
                    96:06:2c:a8:93:99:c0:b3:97:72:a6:cd:08:76:0c:
                    59:c4:85:53:27:56:48:9c:54:68:33:6d:cb:4a:01:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:52:43:2F:53:51:6E:60:F1:5C:1F:1C:71:6F:E0:84:A8:3B:59:2C
            X509v3 Authority Key Identifier:
                keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/j1JDL1NRbmDxXB8ccW_ghKg7WSw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.26.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:6f:cc:9d:90:e3:72:a3:1c:4d:23:72:a0:c8:38:1c:eb:e8:
         fb:18:9d:05:aa:64:4a:7b:8f:0f:34:c9:df:ba:66:bb:2a:cd:
         10:81:47:f1:87:c7:b3:b0:da:77:3e:1c:a2:a9:4c:47:ff:73:
         42:22:e4:9c:4c:59:f8:a8:9a:40:e0:75:db:c8:3f:bd:a0:3c:
         20:9d:0c:f1:f4:e7:1a:99:25:8c:85:5b:eb:6c:d3:b4:1b:19:
         c1:69:30:9a:17:b9:a1:a6:14:80:4a:cb:12:05:2f:73:e1:0a:
         65:40:80:2a:1f:3d:c7:76:a2:1a:38:9b:d1:31:96:ab:9b:22:
         a6:8f:ef:c5:36:4a:65:6c:2f:f0:4c:c7:f0:27:80:2c:4a:fd:
         ef:15:e1:b9:e3:69:68:b9:34:76:14:77:85:a7:ff:16:78:06:
         25:54:bf:ff:2b:3f:7f:c1:2a:12:62:80:89:46:4e:c1:ea:07:
         20:f0:3c:b6:bb:4f:5b:39:9f:fb:b1:56:5a:b2:4c:66:65:96:
         c9:46:e4:a7:c1:ed:04:59:d4:d7:c4:ee:a3:16:95:14:82:88:
         4f:90:fd:4f:1b:0d:31:16:f9:62:6e:54:ac:bc:b6:6a:d1:94:
         4e:59:1c:a0:5a:8b:c1:2b:5c:9b:c1:3d:31:32:ee:19:4e:52:
         0e:bf:98:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/E7SlvhhayluxSOHC1ANtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MjZkOTBkZWIxMDE2Mjg5ZGMwZWY4YzQ0YjUzNGU5ZmIy
NzFiNWIwHhcNMjYwMTAyMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjUyNDMyZjUzNTE2ZTYwZjE1YzFmMWM3MTZmZTA4NGE4M2I1OTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstED30wXR2IYJboklHBVJ9b4mRC9
04ydz7beXkSCOIB/VjGRZZBOvStrwOBsGhcAztkMqJ3kak5Ue1QmJYvaZhXsAs/P
t+fHALcfvouQNcsoFOn401GgkUfh7gfman9et9IvWDD01XY2ulvJEM/6BwfSgQOs
Rim2F88tmTqejwcKHWQhU6tuj/x0kEm+XV0AutHZLVNQ1btKDXpVBA7DX5KkpFKL
52TM0GaAJ8HkKKP1kWswGXODkaDbCSC6zDaIWyOSxzl/aJZlVVnN47dhZOtl5KTW
qvsGXmLErfFXTzyWBiyok5nAs5dyps0IdgxZxIVTJ1ZInFRoM23LSgHd4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI9SQy9TUW5g8VwfHHFv4ISoO1ksMB8GA1UdIwQY
MBaAFJgm2Q3rEBYoncDvjES1NOn7JxtbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NTM4NDktYmUyZS00MzJmLTg3YTYt
YTY0ZGFkNjdiNzM1LzEvajFKREwxTlJibUR4WEI4Y2NXX2doS2c3V1N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84NTM4NDktYmUyZS00MzJmLTg3YTYtYTY0ZGFkNjdiNzM1
LzEvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRqHMA0G
CSqGSIb3DQEBCwUAA4IBAQAyb8ydkONyoxxNI3KgyDgc6+j7GJ0FqmRKe48PNMnf
uma7Ks0QgUfxh8ezsNp3PhyiqUxH/3NCIuScTFn4qJpA4HXbyD+9oDwgnQzx9Oca
mSWMhVvrbNO0GxnBaTCaF7mhphSASssSBS9z4QplQIAqHz3HdqIaOJvRMZarmyKm
j+/FNkplbC/wTMfwJ4AsSv3vFeG542louTR2FHeFp/8WeAYlVL//Kz9/wSoSYoCJ
Rk7B6gcg8Dy2u09bOZ/7sVZaskxmZZbJRuSnwe0EWdTXxO6jFpUUgohPkP1PGw0x
FvliblSsvLZq0ZROWRygWovBK1ybwT0xMu4ZTlIOv5ib
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:03:29 2026 by rpki-client