This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/JjIMrvVuKdrMt7Dh9L4byjfOnew.roa
File:                     JjIMrvVuKdrMt7Dh9L4byjfOnew.roa (raw, json)
Hash identifier:          ZrZ5z4Qgu4QNS9KSQ9fIhwk5Z3MXkjPYh6C1NAf0JJc=
Subject key identifier:   26:32:0C:AE:F5:6E:29:DA:CC:B7:B0:E1:F4:BE:1B:CA:37:CE:9D:EC
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       019B7C13276FF38C8C2118A8F0C7729967C3
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/JjIMrvVuKdrMt7Dh9L4byjfOnew.roa
Signing time:             Fri 02 Jan 2026 00:19:48 +0000
ROA not before:           Fri 02 Jan 2026 00:19:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     52356
IP address blocks:        181.41.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:27:6f:f3:8c:8c:21:18:a8:f0:c7:72:99:67:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  2 00:19:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=26320caef56e29daccb7b0e1f4be1bca37ce9dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ba:73:b5:af:63:11:66:d7:fa:1d:c3:7a:26:
                    37:e7:f8:47:b5:03:49:d0:58:d7:07:fb:89:7a:8a:
                    5b:f3:ff:2e:69:15:09:15:7f:32:9b:d7:a4:77:53:
                    e2:42:e1:7f:07:76:af:93:b5:15:ed:90:44:0d:9f:
                    74:1f:94:c7:2a:11:82:2b:13:0f:a4:d0:5a:8c:91:
                    d4:b4:9c:e6:b5:f8:76:cd:78:bd:45:ab:17:c2:29:
                    ac:65:7e:34:91:b5:7b:51:f0:2f:b6:a0:fe:20:c1:
                    7d:c0:55:84:9e:ca:af:c0:32:f1:67:5e:5f:b3:24:
                    cc:58:9f:9c:5a:30:78:2e:d6:e2:88:5d:04:ea:2b:
                    fc:b8:40:87:32:97:1d:10:ad:c0:37:4c:96:f1:99:
                    52:69:43:84:51:1c:11:56:fb:f4:3e:4a:1b:aa:2e:
                    a4:d8:40:60:94:7b:ca:02:d1:21:8a:8b:06:32:59:
                    d0:3a:96:6a:47:ed:f4:00:9c:a8:de:0a:9e:09:00:
                    29:bc:7f:8b:64:ca:3b:7f:96:ae:00:ad:72:23:bd:
                    21:91:fe:a6:de:45:12:09:2f:4b:e6:5e:45:81:c5:
                    d2:1d:3e:c8:fb:4a:c8:a0:99:82:e7:ec:ef:74:d7:
                    48:1a:38:55:5e:99:4b:24:aa:46:1b:7e:5a:e9:43:
                    41:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:32:0C:AE:F5:6E:29:DA:CC:B7:B0:E1:F4:BE:1B:CA:37:CE:9D:EC
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/JjIMrvVuKdrMt7Dh9L4byjfOnew.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:b3:8b:5e:af:93:55:5e:59:c0:46:3c:24:c1:2c:d0:85:c3:
         7b:50:08:f9:84:c3:b2:36:65:e3:34:6f:3d:df:fa:ea:f6:57:
         77:93:f3:58:4f:88:4c:73:f9:8e:43:1c:bb:30:f2:c4:13:a3:
         b7:81:b1:22:f3:8e:15:9f:6d:b3:89:f1:3d:68:94:4c:05:cb:
         06:ab:b3:e6:e5:09:79:09:ff:06:4c:15:5e:94:46:b0:6c:76:
         37:f1:70:0f:4d:ea:d1:a3:64:5a:51:66:f7:57:3a:1d:11:8c:
         42:f9:b5:83:db:11:da:17:94:df:4a:6a:e7:26:d7:3c:19:be:
         81:06:49:a3:19:54:c4:ff:c3:d4:79:56:03:89:12:e5:c7:dd:
         82:89:a9:f2:09:db:48:4c:0c:59:20:9c:ac:df:9b:21:17:18:
         07:70:e5:b3:03:f3:e3:88:58:ae:95:a1:27:68:ee:09:ee:f5:
         ff:34:30:15:bb:b7:67:09:b6:cd:97:41:7b:d4:70:dd:82:93:
         96:54:d7:be:74:44:24:81:05:54:f4:52:f9:ab:bc:a0:86:b0:
         e4:00:3d:5c:47:d8:9e:da:41:93:b2:aa:84:52:9e:5d:90:88:
         b0:37:5d:3f:c8:dd:1b:2b:de:b1:07:55:b8:65:bb:bc:3b:85:
         57:69:89:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:37:19 2026 by rpki-client