This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/jgrgGJ7rf2LX0XINO9c30QdaUWA.roa
File:                     jgrgGJ7rf2LX0XINO9c30QdaUWA.roa (raw, json)
Hash identifier:          A76RxsC50O0v/gwBJ9yUpgGn/DjKbkzrJUvq58cmXPs=
Subject key identifier:   8E:0A:E0:18:9E:EB:7F:62:D7:D1:72:0D:3B:D7:37:D1:07:5A:51:60
Certificate issuer:       /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial:       019B775945A0BB15550C36C04E2B241728DE
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/jgrgGJ7rf2LX0XINO9c30QdaUWA.roa
Signing time:             Thu 01 Jan 2026 02:18:17 +0000
ROA not before:           Thu 01 Jan 2026 02:18:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201300
IP address blocks:        185.79.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:45:a0:bb:15:55:0c:36:c0:4e:2b:24:17:28:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
        Validity
            Not Before: Jan  1 02:18:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8e0ae0189eeb7f62d7d1720d3bd737d1075a5160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8e:c2:fd:51:28:a8:ea:5a:31:c1:64:fb:87:
                    d6:c2:28:a1:f1:e9:2b:05:17:c6:c7:b3:1b:6f:a9:
                    b2:64:bd:df:d6:de:ef:fc:fe:6e:d3:d3:21:2f:3d:
                    2f:4c:7d:ff:cf:7b:a0:16:15:0f:59:4c:8d:54:62:
                    4e:bf:47:ef:b6:3a:be:22:9d:16:99:ae:5d:e5:9b:
                    09:0e:83:05:6a:54:51:15:de:a1:a8:f9:0f:d0:30:
                    1c:2d:3e:ef:b8:df:be:8d:16:e1:0d:c4:5c:eb:cb:
                    c6:a9:1f:7e:a5:a7:0c:ab:6d:02:dd:2d:dc:40:1b:
                    85:30:57:d1:39:b1:91:73:9d:0e:47:fc:d3:90:c9:
                    aa:2f:22:06:1b:76:0f:dd:77:ea:4f:e3:47:63:f9:
                    ad:78:af:a2:91:d6:ec:d1:47:c3:f7:06:3f:7f:dd:
                    56:c1:3b:a8:d7:56:74:a8:00:da:63:2c:59:79:89:
                    53:e5:00:28:fd:36:06:5f:6a:5a:5e:bd:f8:b1:86:
                    ad:61:ae:fc:c4:96:ae:c0:12:1f:fa:d9:be:78:7b:
                    16:22:04:a4:39:6e:b5:c3:20:c7:0d:48:dd:24:d1:
                    c6:32:e5:70:c6:26:ef:cc:23:0e:e8:dd:5e:0c:45:
                    07:72:e8:71:ee:0e:56:23:02:8e:87:c4:54:4c:49:
                    0c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0A:E0:18:9E:EB:7F:62:D7:D1:72:0D:3B:D7:37:D1:07:5A:51:60
            X509v3 Authority Key Identifier:
                keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/jgrgGJ7rf2LX0XINO9c30QdaUWA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.79.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:04:bd:6c:bb:35:46:34:d7:30:a4:2c:6c:ce:80:3c:be:0c:
         81:44:95:64:85:b0:21:a7:a5:00:f8:0a:e7:b2:f9:e1:af:cd:
         45:9e:90:b5:7e:18:bd:a0:dd:ca:a7:0d:0a:9e:d1:65:a3:77:
         bd:f1:5e:e4:c3:75:fd:22:15:23:80:04:72:f1:4d:e1:71:ba:
         28:8c:f8:5e:8a:12:bb:2d:66:03:1a:93:93:60:9d:04:dc:df:
         f5:5b:9a:1c:56:63:cb:ce:a9:c5:26:84:9f:7c:0f:bf:16:d4:
         3c:27:e6:e2:30:48:8f:9a:b5:49:a8:cd:6a:f4:a4:a5:79:27:
         dd:09:0b:eb:04:70:2f:9a:97:ff:23:79:03:8f:3d:f7:78:c5:
         90:07:b4:3b:68:db:1d:31:6a:3c:99:d5:c1:bd:45:62:c5:28:
         b7:54:c4:0d:76:b0:04:09:8f:06:c9:c9:8c:df:3f:7d:6a:9d:
         62:cf:74:45:73:8e:e6:47:54:5a:5a:ab:d2:eb:56:2e:05:2f:
         3b:23:76:9f:a1:17:f5:27:09:f8:f9:f2:e8:75:b4:b2:06:41:
         e1:50:3a:5e:8e:2a:54:75:0c:d8:a7:0a:80:33:4d:32:68:29:
         a4:4c:27:49:9e:ea:26:10:a7:1a:73:ef:f1:06:88:43:6c:7b:
         1e:b6:27:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:09:38 2026 by rpki-client