This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/J8FCtrgBkWVKDExtzrqO2O610GY.roa
File:                     J8FCtrgBkWVKDExtzrqO2O610GY.roa (raw, json)
Hash identifier:          lsGUe0J1f96Vp0UvOZFbLcl73ARRf2qtpySBX5Tve58=
Subject key identifier:   27:C1:42:B6:B8:01:91:65:4A:0C:4C:6D:CE:BA:8E:D8:EE:B5:D0:66
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       019B7E38A6A706568775D5B6004DBD5264DC
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/J8FCtrgBkWVKDExtzrqO2O610GY.roa
Signing time:             Fri 02 Jan 2026 10:20:00 +0000
ROA not before:           Fri 02 Jan 2026 10:20:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     21219
IP address blocks:        195.178.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:a6:a7:06:56:87:75:d5:b6:00:4d:bd:52:64:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jan  2 10:20:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=27c142b6b80191654a0c4c6dceba8ed8eeb5d066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:fe:c1:bb:b1:46:12:f3:78:8d:ee:68:6b:
                    47:58:51:d4:f7:d1:1f:e3:e4:df:8d:da:d1:52:fd:
                    e8:77:c7:bd:e9:c0:cd:c0:82:04:a8:b2:18:60:d1:
                    14:b1:e7:76:40:1c:84:1c:8a:9b:b1:04:c1:8f:09:
                    c1:5a:74:05:45:16:e0:bd:1c:2d:8f:1b:21:ca:fc:
                    17:66:77:a9:ca:94:a6:ce:a1:fe:3a:60:0e:33:bc:
                    20:e7:51:9e:8e:46:f4:7e:bd:a1:11:fe:d1:b9:53:
                    2b:a2:86:78:b9:76:14:ae:6b:fa:66:ce:21:cf:20:
                    7b:e4:53:d7:96:db:96:cb:c5:91:e9:f3:a3:bd:e5:
                    cc:1d:e9:ea:5d:3a:28:19:3b:d3:e6:7c:cd:ee:e2:
                    76:fe:97:1e:e8:64:e8:05:85:c3:02:5a:93:e7:c5:
                    4d:77:dd:d0:6e:04:b5:2e:c9:67:ee:cc:70:80:ad:
                    ae:0f:b6:85:55:62:ec:f0:91:4f:8a:00:a2:4c:8a:
                    8d:4d:dc:24:c3:f7:e8:f2:c3:96:b2:ba:c2:0c:d3:
                    92:41:be:60:b5:dd:15:e6:62:65:cf:56:b0:83:fc:
                    86:c2:be:7e:48:ef:65:21:88:91:b5:26:e1:d7:80:
                    bd:a4:04:61:c9:25:97:37:e5:2e:de:f1:37:64:c5:
                    62:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C1:42:B6:B8:01:91:65:4A:0C:4C:6D:CE:BA:8E:D8:EE:B5:D0:66
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/J8FCtrgBkWVKDExtzrqO2O610GY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:06:77:80:c4:64:04:68:72:00:0f:45:e2:d8:22:0c:fa:bb:
         2b:95:a7:9f:bb:d2:87:6b:f2:88:c3:4c:b0:e4:49:c0:b2:f0:
         e8:90:c7:e6:76:78:03:c5:3a:7b:ed:05:53:b4:63:97:01:07:
         da:6e:01:e0:87:fd:c2:14:c5:1d:f0:b2:2e:07:e8:5b:a4:52:
         9a:20:02:a2:56:ea:af:e3:5d:f4:ca:7c:ae:00:3b:19:08:e1:
         fe:68:29:32:6c:14:7b:38:bf:6e:1e:98:fe:5b:dc:78:50:48:
         d7:23:34:63:f1:9c:57:48:5c:f9:42:87:fe:16:72:00:f9:05:
         c4:ed:cf:30:32:7d:49:c0:80:37:7a:de:2e:71:33:89:ec:74:
         fa:b7:86:d6:7f:a1:4d:de:78:be:1b:82:9f:12:37:10:62:4a:
         23:cb:fb:a7:7f:33:6d:27:5f:de:f4:12:ab:56:a9:61:50:39:
         bd:7c:60:ba:af:7a:dd:92:2e:cc:7c:53:0d:f7:84:ef:20:8a:
         49:c2:e0:54:c9:be:19:6a:b7:9d:fc:dc:61:d8:54:8f:0a:49:
         cb:3a:c1:67:4c:53:ad:59:1f:d7:e3:31:65:f0:0f:6c:59:9b:
         18:97:cf:a6:ae:8c:c3:90:d6:e5:a1:fa:16:99:e7:94:b6:38:
         0d:28:38:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:58:13 2026 by rpki-client