This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JM0J_nbX_2QuoHaHLLU7Zy90hu0.roa
File:                     JM0J_nbX_2QuoHaHLLU7Zy90hu0.roa (raw, json)
Hash identifier:          jDhOVwymSCRBPHhskUvCEJmt4UHhytGkbHYwvKJ8mqM=
Subject key identifier:   24:CD:09:FE:76:D7:FF:64:2E:A0:76:87:2C:B5:3B:67:2F:74:86:ED
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019B7D5D5E8DEC5B39984683A1D01264B2BE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JM0J_nbX_2QuoHaHLLU7Zy90hu0.roa
Signing time:             Fri 02 Jan 2026 06:20:29 +0000
ROA not before:           Fri 02 Jan 2026 06:20:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213244
IP address blocks:        2a0e:b107:d91::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5d:5e:8d:ec:5b:39:98:46:83:a1:d0:12:64:b2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 06:20:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=24cd09fe76d7ff642ea076872cb53b672f7486ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:72:c6:7e:02:c1:67:26:a9:e5:ff:a0:0a:
                    fe:d5:0c:74:d8:d0:84:c5:fd:70:fe:9a:94:c9:42:
                    09:f8:dc:37:70:eb:ec:4b:d2:bc:52:ab:56:c4:e6:
                    01:90:8c:0f:23:26:01:91:c1:ca:f4:81:b5:66:24:
                    4e:3b:27:59:48:a3:29:7d:46:19:eb:52:b2:6f:28:
                    fc:86:7a:c5:68:0e:a8:2f:70:80:32:67:a0:bf:21:
                    14:8b:39:d2:93:37:ff:10:fc:23:13:38:20:cf:2f:
                    be:ad:15:45:9d:78:8b:eb:37:92:7d:7a:65:7e:00:
                    00:07:fe:7a:e9:90:52:a1:5a:58:aa:7f:1c:c0:7a:
                    95:9f:b5:e1:a8:07:56:91:65:94:ee:dc:69:8e:03:
                    2c:44:c3:1a:b2:e0:b3:81:2a:6c:20:0a:bc:ea:11:
                    e7:94:22:b1:77:b2:6b:bb:a8:27:6d:7b:12:2e:d2:
                    88:53:8d:5d:21:e5:99:ef:29:79:ac:cf:b9:5c:5a:
                    8e:f3:96:3c:c0:3f:73:de:98:9c:ab:33:9e:5f:14:
                    3a:6c:63:fb:3c:e8:52:6e:53:7d:88:0b:37:ac:2d:
                    61:91:18:f4:2a:47:11:8f:00:c8:1d:18:d0:35:09:
                    27:62:af:ee:09:bc:a3:c9:35:08:a3:63:05:3e:cb:
                    c1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CD:09:FE:76:D7:FF:64:2E:A0:76:87:2C:B5:3B:67:2F:74:86:ED
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JM0J_nbX_2QuoHaHLLU7Zy90hu0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:d91::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:5b:3f:d5:6d:31:5c:07:c6:1b:81:02:61:de:10:2d:9f:ac:
         c4:5e:1a:11:38:de:10:2a:6a:ef:e7:a7:9c:4e:f5:b5:63:36:
         46:d3:d1:bc:f8:b7:b6:1b:7f:3d:2e:0a:d2:ca:94:84:83:da:
         38:da:41:89:45:07:bb:de:7d:85:39:3a:e8:c6:62:8d:c7:8b:
         04:9d:0c:44:6e:a1:72:2f:8e:ae:d1:0f:0f:d5:ca:82:b3:eb:
         5f:d5:9c:bf:aa:a3:b7:1e:cb:20:75:f7:08:7e:1e:57:d3:59:
         0b:f3:55:86:43:0b:00:66:e0:d9:1b:33:00:64:78:05:aa:ba:
         b7:e3:2e:f1:3e:32:b4:a9:8c:fc:b0:46:24:ea:79:62:ba:45:
         85:88:6b:60:49:78:a6:23:77:87:91:01:11:88:db:48:31:e3:
         1a:6e:8f:c0:87:96:b3:36:0e:fb:08:97:2d:52:42:88:2a:c0:
         11:9f:e1:e1:fd:68:79:b7:c3:0f:ab:08:14:5a:6b:12:e4:04:
         73:af:44:4f:c6:46:8a:b3:5c:20:ba:af:62:6d:cd:6b:09:66:
         59:7d:a3:c3:e4:6e:06:ea:53:3d:65:fe:ad:ee:b0:eb:b7:48:
         83:55:de:68:a4:04:9e:2b:18:7a:a5:82:a4:cc:84:c4:a6:9c:
         a5:c8:81:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 13:11:58 2026 by rpki-client