This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/jJlQZpZevpI7sI0qTXUB9jMuUv0.roa
File:                     jJlQZpZevpI7sI0qTXUB9jMuUv0.roa (raw, json)
Hash identifier:          sIoAPPkOgjZo6KC8AV3+ukTiCzKXpwR8qem4+cLmkos=
Subject key identifier:   8C:99:50:66:96:5E:BE:92:3B:B0:8D:2A:4D:75:01:F6:33:2E:52:FD
Certificate issuer:       /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial:       019C2E1B64BD91F7194503DD64362BA150BA
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/jJlQZpZevpI7sI0qTXUB9jMuUv0.roa
Signing time:             Thu 05 Feb 2026 14:01:13 +0000
ROA not before:           Thu 05 Feb 2026 14:01:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48678
IP address blocks:        185.229.15.0/24 maxlen: 24
                          185.231.110.0/24 maxlen: 24
                          194.26.114.0/24 maxlen: 24
                          194.26.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2e:1b:64:bd:91:f7:19:45:03:dd:64:36:2b:a1:50:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
        Validity
            Not Before: Feb  5 14:01:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8c995066965ebe923bb08d2a4d7501f6332e52fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:38:d3:16:e1:c2:04:25:fb:b9:d2:d8:99:c4:
                    5c:1d:ce:45:bc:45:93:2b:c9:10:d6:f8:c3:c5:0a:
                    9c:ee:5f:fb:86:f8:4e:82:5c:f5:97:07:1e:fc:83:
                    92:1c:2e:be:1f:ce:8f:1b:a4:e1:6a:64:be:f2:5d:
                    34:2d:73:e5:6b:b4:b3:d5:98:f5:8c:e4:64:20:25:
                    5d:79:a0:be:db:ef:a0:a5:5d:77:1e:cd:97:58:b8:
                    30:9c:a9:05:80:09:42:31:bd:93:4f:b7:ab:d9:0e:
                    df:1b:89:73:02:90:53:2a:6d:e6:a6:fe:95:b7:30:
                    6b:b0:00:8a:58:df:b3:78:c2:ca:f0:1a:a8:b4:10:
                    31:d8:ea:30:f8:8e:01:8b:af:1a:a4:04:bf:89:c0:
                    20:8e:9e:82:80:db:f5:58:3d:b6:9e:29:10:31:92:
                    f0:ec:f7:21:6e:d8:ad:39:04:db:88:01:c6:e7:07:
                    6d:89:bb:88:93:eb:de:78:3e:c0:e7:b9:0d:4e:62:
                    32:ab:7b:b3:31:19:09:23:3b:58:bc:1d:28:7e:63:
                    4b:62:9e:9f:c5:a3:2e:64:c9:6b:62:0b:7a:36:2a:
                    03:81:88:e8:11:26:b7:c5:0d:ba:bc:b1:ea:3f:63:
                    f1:df:b2:17:a7:91:6d:fc:37:d4:16:87:f6:8c:5c:
                    e4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:99:50:66:96:5E:BE:92:3B:B0:8D:2A:4D:75:01:F6:33:2E:52:FD
            X509v3 Authority Key Identifier:
                keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/jJlQZpZevpI7sI0qTXUB9jMuUv0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.15.0/24
                  185.231.110.0/24
                  194.26.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:fd:8b:58:72:cc:65:71:ff:7a:0d:ad:d6:fb:62:7f:e7:bf:
         13:4b:13:a9:91:33:eb:9b:8c:c9:bb:4c:b4:0b:d7:9f:6b:54:
         5e:d4:2b:92:f2:69:66:15:c0:7c:c5:fe:ef:a8:fc:af:0a:5f:
         8c:9c:08:21:39:64:17:40:90:f1:8d:ea:76:e0:31:95:d1:cf:
         05:13:21:d6:ad:ad:43:29:ac:57:49:04:63:a8:89:58:68:f3:
         97:1c:1f:9f:bf:8e:6e:f1:6c:a6:eb:d2:09:e0:d5:37:93:13:
         66:78:ea:ba:cd:ac:7c:51:3e:ae:a9:b6:fc:4e:6b:08:63:52:
         81:d3:05:ca:e1:1d:85:dc:09:6b:83:30:c6:22:39:62:35:13:
         c3:c1:6e:f1:8a:d1:6a:13:2a:82:af:d7:e2:0d:a5:10:e3:5a:
         b8:9f:3c:7a:d6:71:66:b9:8a:a7:b8:4d:a6:64:6b:b8:d8:8e:
         ae:a2:b0:72:d6:5e:25:49:c3:7f:03:63:0a:ca:27:31:54:d5:
         3d:34:e4:0a:ff:f0:bd:de:78:9f:cd:03:64:24:8d:1e:d3:6e:
         d6:f0:18:16:ef:c2:21:e8:bb:8c:c2:78:bc:88:16:48:b5:c5:
         2c:dd:23:de:bc:66:74:35:bb:c6:04:51:e8:7a:0b:07:93:29:
         6d:e2:2c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:48:06 2026 by rpki-client