This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/evJpn_uhP0CfvPL00DkyDflggJI.roa
File:                     evJpn_uhP0CfvPL00DkyDflggJI.roa (raw, json)
Hash identifier:          bV9kL+d96gYalZ7ome+Dj8zLnrOvtqAnogknD9DHj3E=
Subject key identifier:   7A:F2:69:9F:FB:A1:3F:40:9F:BC:F2:F4:D0:39:32:0D:F9:60:80:92
Certificate issuer:       /CN=e8d672fa60aee4c273a11507f49b584dc552c472
Certificate serial:       019B7F855943FBDEFABCC5C824EFA20C304D
Authority key identifier: E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/evJpn_uhP0CfvPL00DkyDflggJI.roa
Signing time:             Fri 02 Jan 2026 16:23:24 +0000
ROA not before:           Fri 02 Jan 2026 16:23:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35236
IP address blocks:        2001:67c:e2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:59:43:fb:de:fa:bc:c5:c8:24:ef:a2:0c:30:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d672fa60aee4c273a11507f49b584dc552c472
        Validity
            Not Before: Jan  2 16:23:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7af2699ffba13f409fbcf2f4d039320df9608092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:13:84:7c:28:11:19:ce:a9:1c:64:68:b2:
                    d7:6a:09:9c:8f:4d:d2:6a:b2:df:07:24:0d:da:ee:
                    4d:85:3d:55:8b:41:51:8a:e4:90:97:54:b5:8d:8d:
                    cd:87:fe:8b:39:84:14:e2:7b:6c:1b:4d:64:a2:90:
                    95:71:b6:13:29:26:b2:04:20:33:e1:74:f5:af:5e:
                    70:a4:29:dd:c2:e1:0b:8e:2e:64:90:9c:d1:8d:2b:
                    38:d5:87:3b:56:a7:9a:6a:cc:7c:8d:e2:11:3b:04:
                    85:a9:53:46:ae:8c:db:b1:d3:79:4c:7c:51:c1:d3:
                    48:16:cc:8a:92:83:c6:e1:f4:72:11:0a:92:3e:a1:
                    2e:35:59:42:7a:30:ac:a7:58:88:3b:05:b3:4d:e1:
                    1c:26:e6:af:f1:71:10:fd:d9:87:f1:2d:88:a9:f6:
                    0e:22:22:3d:f1:cc:bd:49:6f:6b:31:2c:78:5c:66:
                    18:93:b5:41:ac:f0:a2:38:67:c6:61:1a:1d:c4:b8:
                    3a:e0:3f:37:29:ef:2e:6b:28:7c:b2:5b:e5:1d:ed:
                    90:ca:6a:b3:86:65:95:75:42:bb:b6:de:2c:80:11:
                    8d:66:9a:db:8a:8a:65:e4:19:63:26:9e:56:b6:3c:
                    58:f5:ab:11:3a:ba:9b:38:19:cd:5e:83:29:9d:61:
                    18:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F2:69:9F:FB:A1:3F:40:9F:BC:F2:F4:D0:39:32:0D:F9:60:80:92
            X509v3 Authority Key Identifier:
                keyid:E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/evJpn_uhP0CfvPL00DkyDflggJI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:e2c::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:27:37:dd:79:29:cf:b5:c6:ce:9d:9c:16:26:a7:84:40:a2:
         5f:81:5b:e9:8b:02:33:5b:46:1c:9e:77:6b:ac:86:d1:67:0f:
         93:72:fb:50:3d:71:a7:80:0c:90:3a:89:02:11:ed:c4:2e:50:
         7d:43:e7:d9:0f:24:b1:5c:45:a9:1e:64:0b:98:9b:1b:ba:75:
         19:e3:b8:43:44:88:6c:5e:87:2c:0d:32:43:65:82:33:eb:3c:
         72:0f:3e:61:3c:8a:5f:81:72:07:65:00:72:6c:70:5e:e2:bd:
         df:db:65:28:39:c7:67:b7:a0:ee:62:ad:ed:21:17:81:63:40:
         03:4f:d6:50:98:75:37:fe:87:26:50:30:9d:df:3a:9f:66:d5:
         a4:45:cd:28:13:f5:8d:4f:73:90:fd:bb:35:43:84:94:94:97:
         c0:a2:c3:74:b6:c0:e7:f0:75:53:54:25:91:50:2e:51:c0:ef:
         ab:9c:79:04:42:66:a3:74:bb:f2:cb:5e:90:c9:f9:0b:c0:cc:
         59:1c:ad:0e:a5:b3:15:f4:58:9d:a8:58:01:bd:86:ec:52:22:
         cc:a7:68:6c:18:20:e3:00:d7:5e:c7:4f:49:1e:11:fa:22:c3:
         68:d6:85:d8:d9:7f:88:f4:99:ff:bc:96:92:89:53:69:66:e3:
         d2:81:e6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:31 2026 by rpki-client