This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/J0QypuanqzzQ31mj2tHTtIs1HIQ.roa
File:                     J0QypuanqzzQ31mj2tHTtIs1HIQ.roa (raw, json)
Hash identifier:          nWILPmUDpR0YDcdJbo6YDlboQE8Koi0QnyeiT/i1zJQ=
Subject key identifier:   27:44:32:A6:E6:A7:AB:3C:D0:DF:59:A3:DA:D1:D3:B4:8B:35:1C:84
Certificate issuer:       /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial:       019B7F85700A77D875476A0F63403FEA998C
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/J0QypuanqzzQ31mj2tHTtIs1HIQ.roa
Signing time:             Fri 02 Jan 2026 16:23:29 +0000
ROA not before:           Fri 02 Jan 2026 16:23:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50427
IP address blocks:        176.116.184.0/21 maxlen: 21
                          176.116.184.0/22 maxlen: 22
                          176.116.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:70:0a:77:d8:75:47:6a:0f:63:40:3f:ea:99:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
        Validity
            Not Before: Jan  2 16:23:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=274432a6e6a7ab3cd0df59a3dad1d3b48b351c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5a:81:67:a1:e2:37:87:06:7d:c5:d8:23:1c:
                    24:cd:4a:37:85:11:72:9f:26:a5:7a:8c:7c:4d:18:
                    bd:39:53:e1:25:ac:eb:96:39:84:4b:65:52:ff:f9:
                    9a:33:45:f4:6e:29:16:00:a8:7d:eb:74:c5:2b:09:
                    5e:04:04:7e:41:4a:88:20:c2:4f:97:df:94:c0:0d:
                    8e:7f:00:51:b9:b7:6b:c7:56:cf:c9:56:2d:16:0a:
                    da:ce:1f:e6:cb:27:ae:cf:36:2c:ae:dc:a5:94:f2:
                    c6:f6:39:e2:93:bc:f4:dc:98:a4:37:d2:d1:6d:5e:
                    6c:bf:26:c9:2d:bd:66:57:b8:f8:32:69:71:25:de:
                    bb:a3:02:e2:74:b4:46:0b:dd:99:32:67:1a:62:a6:
                    f1:e6:ad:d8:2a:c2:95:87:f1:d0:2d:1c:3f:c6:a5:
                    3b:b6:8f:be:12:db:f7:28:6c:52:5d:3e:1f:51:f9:
                    3c:ea:6a:a6:7f:01:7c:84:58:f1:23:4a:6e:57:f4:
                    60:c2:35:f7:fe:9f:12:b8:15:49:17:e9:3f:39:d9:
                    d0:10:64:93:71:c4:47:7a:cc:3f:5c:46:4c:fe:ca:
                    41:d7:e9:23:57:42:82:85:7b:d3:b8:84:9e:4a:67:
                    7c:b7:87:32:45:de:3d:94:a6:b7:a8:c7:97:34:52:
                    08:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:44:32:A6:E6:A7:AB:3C:D0:DF:59:A3:DA:D1:D3:B4:8B:35:1C:84
            X509v3 Authority Key Identifier:
                keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/J0QypuanqzzQ31mj2tHTtIs1HIQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:d1:fd:a4:61:99:32:30:10:a5:81:d2:00:70:81:76:ec:d8:
         be:cf:0c:3d:1c:29:95:fc:7b:d7:b6:f1:bc:2d:06:96:30:30:
         d8:0f:6e:7c:43:49:81:df:57:46:00:22:5e:f8:24:7e:94:90:
         dd:2f:9e:eb:8f:25:a6:8f:2e:93:47:11:26:a7:d0:c7:9f:71:
         61:82:aa:ae:ef:5e:1e:21:9f:ba:15:2b:73:55:d1:a0:cb:a6:
         7d:4c:b7:fa:80:ea:86:f0:a9:b3:22:91:77:54:90:e3:9d:68:
         23:9f:69:09:e7:63:5e:9d:33:75:ac:e2:9d:06:72:05:4f:6c:
         ac:aa:10:84:d9:cd:26:da:4e:14:d6:f1:90:3b:c7:b4:2d:ba:
         35:64:d8:02:d6:a4:b5:ff:a5:11:6f:b3:eb:0e:3f:8d:3f:cd:
         56:bd:49:ca:c9:ac:6a:84:db:64:4f:f8:ce:7c:d9:5e:90:ac:
         c5:b0:c8:99:70:69:ee:05:f3:29:b1:5e:9b:1a:55:93:6b:d2:
         9d:ba:9c:9f:fd:8e:fb:a2:d4:5e:df:d8:5b:36:46:d6:41:f8:
         48:a9:ba:16:6a:47:28:9b:6d:6d:ce:06:33:db:7d:ae:3f:f7:
         75:6a:ac:84:24:4e:27:62:9e:db:d9:ca:7a:02:f9:d5:a8:b1:
         67:68:bc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:31:44 2026 by rpki-client