This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jdlJeeH4vPZzBLGKE_ZZIE71lzk.roa
File:                     jdlJeeH4vPZzBLGKE_ZZIE71lzk.roa (raw, json)
Hash identifier:          gZehYlDlKA2eaWajbV4UID9OYa/MzZBadYKKcs6PcvU=
Subject key identifier:   8D:D9:49:79:E1:F8:BC:F6:73:04:B1:8A:13:F6:59:20:4E:F5:97:39
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       019B797ED37E809B52BF710BDDC8C3550EBC
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jdlJeeH4vPZzBLGKE_ZZIE71lzk.roa
Signing time:             Thu 01 Jan 2026 12:18:33 +0000
ROA not before:           Thu 01 Jan 2026 12:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200923
IP address blocks:        93.186.74.0/23 maxlen: 23
                          93.186.76.0/24 maxlen: 24
                          93.186.78.0/24 maxlen: 24
                          188.255.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 08:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:d3:7e:80:9b:52:bf:71:0b:dd:c8:c3:55:0e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jan  1 12:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8dd94979e1f8bcf67304b18a13f659204ef59739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fc:e7:a0:01:0a:b7:28:58:bb:fc:2c:6f:17:
                    7c:9f:d5:ec:37:5b:46:94:73:96:ef:7a:aa:18:b3:
                    ed:16:7f:18:c0:21:47:a7:df:13:32:3b:ce:db:72:
                    68:a0:83:d2:4a:86:d1:6c:d0:a1:6f:98:0c:db:c4:
                    2f:42:b0:5c:51:f9:af:84:01:3f:60:a5:d8:bd:7f:
                    fc:ca:41:8b:43:af:a3:6c:ce:3a:52:23:f0:f1:93:
                    d2:3c:45:18:0d:6c:86:92:25:8e:cc:c9:1b:7f:9a:
                    86:cf:1f:a9:f1:56:78:ca:02:2f:09:56:03:bd:47:
                    fb:0c:14:d2:9c:b9:18:0a:6b:7b:62:76:9f:36:c1:
                    cb:7a:34:93:d7:1b:10:25:45:7c:c7:1a:b7:2c:75:
                    18:bb:c7:5c:9c:87:c8:03:02:21:e1:ef:55:f7:61:
                    a2:5c:31:af:3d:50:ca:83:d1:62:f4:ea:d3:4a:26:
                    39:84:de:79:0a:d0:3d:3c:1a:88:17:29:95:a8:d6:
                    c3:c4:f3:9a:cf:3a:4f:45:06:01:06:b5:45:60:49:
                    22:25:a9:9c:c9:79:6c:f9:ca:c5:6d:16:ce:7a:d0:
                    32:13:0e:36:64:51:cb:09:8d:5b:1e:12:92:29:22:
                    f8:1f:0d:98:17:0b:dc:26:b7:53:7e:0a:cb:b0:b7:
                    38:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D9:49:79:E1:F8:BC:F6:73:04:B1:8A:13:F6:59:20:4E:F5:97:39
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jdlJeeH4vPZzBLGKE_ZZIE71lzk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.186.74.0-93.186.76.255
                  93.186.78.0/24
                  188.255.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:59:06:ee:94:64:43:b5:12:43:50:19:ff:69:d7:61:c8:ef:
         33:d9:6c:c9:03:b5:5c:26:44:02:1e:a3:10:77:f0:10:65:b2:
         5f:b5:74:03:a5:ce:e7:79:94:41:70:59:2f:49:14:b4:70:90:
         c5:b3:36:f1:18:55:8b:8d:d2:c3:ae:36:ef:4e:28:e4:ca:60:
         53:7d:5e:bb:f1:e7:e7:26:f4:db:86:d8:04:b6:45:d2:42:b2:
         78:bb:cd:e4:11:b9:29:09:5d:49:cf:6b:9f:c1:54:2c:92:e6:
         65:25:d7:9e:04:90:0e:67:1a:2b:f4:5c:ba:8d:84:6e:e6:a5:
         5f:be:f3:82:b3:b4:2d:3c:7c:06:1f:ae:85:93:22:c1:96:8b:
         df:02:68:e5:c5:3c:c1:f6:e2:54:19:25:08:bf:c2:9c:73:47:
         75:00:2d:14:37:fc:e0:c9:56:99:63:ff:90:ed:d0:20:d6:ad:
         c6:5a:f4:26:82:1f:6d:a9:b5:7b:c6:6a:32:f7:b4:3c:57:58:
         0f:02:f9:43:19:9a:00:38:c7:01:d6:00:d1:6f:f4:35:82:33:
         5a:b0:7b:e7:83:93:86:54:19:a5:07:8c:d4:45:79:c9:df:40:
         7d:2f:b6:41:91:77:c9:12:09:b4:5b:1e:46:66:42:7c:f3:a6:
         8f:e1:34:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:54:06 2026 by rpki-client