This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Jowd2OFyjmNwGEovq7ohlJcjjwQ.roa
File:                     Jowd2OFyjmNwGEovq7ohlJcjjwQ.roa (raw, json)
Hash identifier:          3ujx5fVsergV9dNdtt4OygJmfNgMhucjtkjcDSIoJAc=
Subject key identifier:   26:8C:1D:D8:E1:72:8E:63:70:18:4A:2F:AB:BA:21:94:97:23:8F:04
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       019BC60B7873F2BD62B3D3A24CD153AB1958
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Jowd2OFyjmNwGEovq7ohlJcjjwQ.roa
Signing time:             Fri 16 Jan 2026 09:03:19 +0000
ROA not before:           Fri 16 Jan 2026 09:03:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9009
IP address blocks:        31.40.192.0/24 maxlen: 24
                          45.154.120.0/22 maxlen: 24
                          77.83.48.0/23 maxlen: 24
                          77.83.48.0/24 maxlen: 24
                          77.83.49.0/24 maxlen: 24
                          85.31.52.0/24 maxlen: 24
                          86.62.53.0/24 maxlen: 24
                          86.62.54.0/24 maxlen: 24
                          88.218.81.0/24 maxlen: 24
                          88.218.82.0/23 maxlen: 24
                          91.245.238.0/24 maxlen: 24
                          95.214.244.0/22 maxlen: 24
                          193.9.56.0/24 maxlen: 24
                          193.31.124.0/23 maxlen: 24
                          193.47.36.0/22 maxlen: 24
                          193.56.22.0/24 maxlen: 24
                          193.160.74.0/24 maxlen: 24
                          193.160.75.0/24 maxlen: 24
                          194.124.41.0/24 maxlen: 24
                          213.109.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c6:0b:78:73:f2:bd:62:b3:d3:a2:4c:d1:53:ab:19:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Jan 16 09:03:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=268c1dd8e1728e6370184a2fabba219497238f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:cc:2c:54:89:c3:26:39:2c:b3:be:32:fd:
                    a5:64:76:f7:11:cb:49:1f:39:5c:94:f5:08:49:7a:
                    72:b2:0f:a4:72:d7:ee:13:7a:93:b9:fc:ae:d9:4c:
                    0a:d9:a8:ad:2d:e3:68:a1:51:81:3e:78:e6:2f:d5:
                    80:02:3c:c1:92:6d:28:4a:6d:a5:ac:64:bc:ea:bf:
                    bd:57:f2:29:95:4f:f1:ff:18:2c:6b:5e:5b:2f:b0:
                    8b:ed:33:4f:02:c8:8f:67:9c:c0:7a:86:c5:40:b8:
                    11:23:27:d6:e7:16:80:5c:ee:b6:33:11:41:72:22:
                    9b:df:6d:ca:da:cb:a6:ea:5a:42:6c:87:1a:a2:cb:
                    08:17:a5:20:ae:0e:db:cf:6f:48:2f:fe:7b:bc:a7:
                    72:b3:bc:59:dc:65:b2:b8:b4:e0:f0:ed:ce:2d:ac:
                    d8:a1:d9:f6:50:3d:86:0a:4b:05:a6:a7:d8:07:94:
                    0c:bb:ff:e1:bf:ca:eb:47:dc:c4:ca:82:ec:c6:b3:
                    8e:ef:3e:a2:85:61:ef:dc:1a:d0:ed:e6:3a:d0:63:
                    59:da:f9:1c:62:e2:d5:af:1d:14:66:92:29:01:0e:
                    49:3b:06:3d:db:67:98:32:d3:e6:b1:b8:af:0a:9d:
                    b2:5a:ae:35:73:ae:c2:c0:fa:ad:b3:64:a8:bb:e6:
                    78:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8C:1D:D8:E1:72:8E:63:70:18:4A:2F:AB:BA:21:94:97:23:8F:04
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Jowd2OFyjmNwGEovq7ohlJcjjwQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.40.192.0/24
                  45.154.120.0/22
                  77.83.48.0/23
                  85.31.52.0/24
                  86.62.53.0-86.62.54.255
                  88.218.81.0-88.218.83.255
                  91.245.238.0/24
                  95.214.244.0/22
                  193.9.56.0/24
                  193.31.124.0/23
                  193.47.36.0/22
                  193.56.22.0/24
                  193.160.74.0/23
                  194.124.41.0/24
                  213.109.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:61:d9:08:b2:25:c9:83:24:e0:6d:12:d7:1d:23:a5:cf:1d:
         16:90:2a:ff:e3:c1:77:97:a2:87:e6:5e:5b:a7:51:81:12:51:
         de:d8:ee:18:cc:d0:5a:52:5e:d3:97:f1:55:89:15:20:d1:8b:
         c7:4e:1d:2d:66:e0:82:da:61:24:50:4e:62:00:20:38:ca:f9:
         80:27:d4:24:4e:e0:50:ed:85:fe:fb:45:44:1e:27:06:00:68:
         67:72:eb:04:72:49:8d:d0:26:37:f7:02:99:a0:9e:a3:a2:0f:
         c3:76:af:7d:99:d0:61:8d:48:b3:2e:ab:e7:f1:67:3c:83:7d:
         23:e2:a2:87:61:44:ff:97:9e:c3:b7:d2:25:fe:60:f2:15:92:
         94:66:55:93:5d:25:e9:7b:b6:7a:b0:49:c2:5e:09:e7:fa:32:
         dc:50:aa:c5:1d:2b:13:dd:8f:51:39:02:91:e6:83:6e:0d:67:
         77:eb:98:50:8f:e6:14:d5:96:6d:15:d0:61:e2:b5:14:9c:f3:
         39:73:8b:e0:95:97:61:9a:18:d6:ea:67:ee:82:57:95:70:47:
         fe:f0:41:2a:ff:10:35:c1:87:86:ae:1f:71:d8:87:3e:4a:ce:
         22:a6:c5:c7:c9:ce:8b:07:5a:51:5a:87:d6:82:d7:b5:79:89:
         d7:09:d6:c2
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAZvGC3hz8r1is9OiTNFTqxlYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjYwMTE2MDkwMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjhjMWRkOGUxNzI4ZTYzNzAxODRhMmZhYmJhMjE5NDk3MjM4ZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW7MLFSJwyY5LLO+Mv2lZHb3EctJ
HzlclPUISXpysg+kctfuE3qTufyu2UwK2aitLeNooVGBPnjmL9WAAjzBkm0oSm2l
rGS86r+9V/IplU/x/xgsa15bL7CL7TNPAsiPZ5zAeobFQLgRIyfW5xaAXO62MxFB
ciKb323K2sum6lpCbIcaossIF6Ugrg7bz29IL/57vKdys7xZ3GWyuLTg8O3OLazY
odn2UD2GCksFpqfYB5QMu//hv8rrR9zEyoLsxrOO7z6ihWHv3BrQ7eY60GNZ2vkc
YuLVrx0UZpIpAQ5JOwY922eYMtPmsbivCp2yWq41c67CwPqts2Sou+Z4VQIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFCaMHdjhco5jcBhKL6u6IZSXI48EMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvSm93ZDJPRnlqbU53R0VvdnE3b2hsSmNqandRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAB8owAME
Ai2aeAMEAU1TMAMEAFUfNDAMAwQAVj41AwQAVj42MAwDBABY2lEDBAJY2lADBABb
9e4DBAJf1vQDBADBCTgDBAHBH3wDBALBLyQDBADBOBYDBAHBoEoDBADCfCkDBALV
bbwwDQYJKoZIhvcNAQELBQADggEBAEJh2QiyJcmDJOBtEtcdI6XPHRaQKv/jwXeX
oofmXlunUYESUd7Y7hjM0FpSXtOX8VWJFSDRi8dOHS1m4ILaYSRQTmIAIDjK+YAn
1CRO4FDthf77RUQeJwYAaGdy6wRySY3QJjf3ApmgnqOiD8N2r32Z0GGNSLMuq+fx
ZzyDfSPioodhRP+XnsO30iX+YPIVkpRmVZNdJel7tnqwScJeCef6MtxQqsUdKxPd
j1E5ApHmg24NZ3frmFCP5hTVlm0V0GHitRSc8zlzi+CVl2GaGNbqZ+6CV5VwR/7w
QSr/EDXBh4auH3HYhz5KziKmxcfJzosHWlFah9aC17V5idcJ1sI=
-----END CERTIFICATE-----
Generated at Sun Jan 18 08:53:40 2026 by rpki-client