This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/JyOt5cnB4v3T3UZPKw92X0tNe54.roa
File:                     JyOt5cnB4v3T3UZPKw92X0tNe54.roa (raw, json)
Hash identifier:          MUq1toHmKuuf364qjeKbDPNwnyp28heyE703+cnlITE=
Subject key identifier:   27:23:AD:E5:C9:C1:E2:FD:D3:DD:46:4F:2B:0F:76:5F:4B:4D:7B:9E
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       019B7C13609D453B4824FC39A4F2479506FE
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/JyOt5cnB4v3T3UZPKw92X0tNe54.roa
Signing time:             Fri 02 Jan 2026 00:20:03 +0000
ROA not before:           Fri 02 Jan 2026 00:20:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210558
IP address blocks:        45.88.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:60:9d:45:3b:48:24:fc:39:a4:f2:47:95:06:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: Jan  2 00:20:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2723ade5c9c1e2fdd3dd464f2b0f765f4b4d7b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9d:56:a6:57:24:9a:9a:da:c8:ab:e9:92:75:
                    f4:68:d5:d5:75:2c:fd:da:db:c9:ef:df:49:92:ab:
                    d4:2f:94:a2:13:4b:c5:94:e5:3f:9e:81:9d:51:e0:
                    cb:63:5e:63:10:bf:d9:15:06:82:92:a8:2f:5d:fe:
                    a0:57:8d:16:5f:0e:e0:47:dd:fd:f7:24:16:89:47:
                    69:8a:48:f6:b9:ce:82:c4:a1:53:e6:d1:55:21:0d:
                    65:c5:21:63:27:19:c9:78:96:d9:1d:da:d6:57:41:
                    2b:51:c8:38:cb:a2:7d:cc:c6:0b:44:1b:f2:fb:42:
                    f3:74:85:48:68:5e:cb:52:e2:6c:45:94:18:97:fb:
                    c6:21:00:a9:38:ca:ee:0e:ed:a0:61:1b:2d:3c:3b:
                    af:79:3e:65:a7:d7:83:16:83:66:79:49:79:51:ba:
                    0e:b8:87:76:41:55:2e:ac:72:54:e9:b3:32:8e:73:
                    95:e9:19:03:11:d2:10:92:bc:4f:3f:71:96:a8:ba:
                    52:7b:67:5b:36:27:f4:05:bd:63:13:5e:cc:03:65:
                    e4:8b:b2:a7:3a:66:1b:2c:1c:a0:5b:e2:ee:46:4b:
                    46:34:81:cb:57:d2:99:90:cd:53:e4:77:8c:a3:32:
                    bf:ab:d2:80:33:d4:c9:db:af:db:74:4c:ab:aa:dc:
                    72:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:23:AD:E5:C9:C1:E2:FD:D3:DD:46:4F:2B:0F:76:5F:4B:4D:7B:9E
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/JyOt5cnB4v3T3UZPKw92X0tNe54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:78:f9:61:8d:00:0e:ba:93:1b:4d:a6:fc:a2:49:15:47:cc:
         10:8c:9e:8f:a0:79:ad:5f:8c:92:38:11:68:d8:a5:ee:c1:4f:
         5d:ac:7c:9f:40:65:b8:4f:e0:12:94:eb:0c:1b:42:51:b3:6d:
         8d:2e:f5:9a:ca:97:c3:b8:4c:eb:95:d9:70:38:4a:01:e1:76:
         91:e1:70:c7:62:f6:59:aa:0b:5a:82:5b:71:31:47:af:8d:ae:
         8c:1f:71:9d:7d:29:a2:4a:03:77:7c:61:a4:1e:60:03:6e:cd:
         c5:00:46:56:49:3e:1b:e8:d7:6d:ee:27:21:d3:a9:d9:be:ce:
         2e:4e:e9:24:ea:7a:42:7e:bc:48:64:77:50:55:af:5b:2c:38:
         e1:76:7e:ba:b0:50:1a:cf:97:4a:f3:3e:bf:90:71:f0:8a:f4:
         23:82:61:56:01:38:c0:ca:74:42:24:79:23:e6:d8:92:7e:7e:
         98:e6:44:37:23:cc:12:54:33:a7:0d:4b:30:c1:5d:39:50:66:
         a2:48:02:3e:5f:43:d1:10:2d:25:63:88:a7:8f:8d:61:1b:e4:
         63:54:e8:be:2f:ea:80:39:a0:88:cb:0e:62:f8:3e:40:b7:bc:
         a5:e9:92:21:c9:88:0c:94:49:f8:22:3a:a3:ae:5f:78:15:27:
         28:74:f3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:04:56 2026 by rpki-client