This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/Jp1OMn26Xbl5QB8cFqtJzyjK7b8.roa
File:                     Jp1OMn26Xbl5QB8cFqtJzyjK7b8.roa (raw, json)
Hash identifier:          YCd6cvHJBCdabpC8lbHyTL8mL5CdagCiCJRtT8E/huA=
Subject key identifier:   26:9D:4E:32:7D:BA:5D:B9:79:40:1F:1C:16:AB:49:CF:28:CA:ED:BF
Certificate issuer:       /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial:       019B76EAB5136F633A5412994D74E739006C
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/Jp1OMn26Xbl5QB8cFqtJzyjK7b8.roa
Signing time:             Thu 01 Jan 2026 00:17:31 +0000
ROA not before:           Thu 01 Jan 2026 00:17:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201897
IP address blocks:        185.59.252.0/22 maxlen: 22
                          185.59.254.0/24 maxlen: 24
                          185.59.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:b5:13:6f:63:3a:54:12:99:4d:74:e7:39:00:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
        Validity
            Not Before: Jan  1 00:17:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=269d4e327dba5db979401f1c16ab49cf28caedbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b2:6f:90:c7:a6:4e:16:04:0e:90:81:c1:9d:
                    9e:59:d6:4d:52:35:d0:0f:0b:e7:27:2c:d7:0f:0d:
                    d5:67:cf:24:c4:be:f2:af:be:37:3f:1d:64:3e:6b:
                    2c:27:fa:44:f2:e3:2b:0a:c8:a1:dd:62:77:c2:62:
                    78:ef:ea:5f:f1:f2:68:93:1c:87:c4:6d:e4:76:6c:
                    59:a8:76:ff:d9:9e:58:11:71:9a:e4:bf:b1:96:35:
                    05:ce:79:1e:48:46:29:e8:01:c8:1b:46:0e:4a:68:
                    93:93:1a:c0:d3:3b:12:a7:7e:52:2d:d5:3d:ef:7c:
                    9c:84:ee:df:26:be:9c:67:d1:e3:97:f6:4e:ee:00:
                    a7:63:ae:8f:af:5e:0b:e2:c6:cc:9c:97:ee:be:ab:
                    0c:56:e9:e9:15:55:2d:66:9c:29:43:8a:9f:58:0b:
                    5e:86:15:04:fc:71:21:2a:93:02:0b:a4:81:7b:80:
                    e4:4d:5c:5f:4d:22:ae:64:9a:f8:b0:19:51:4e:c9:
                    af:26:0f:0a:7c:a4:67:7e:d8:ad:09:82:8c:b4:23:
                    93:4f:d2:73:c0:d3:a1:e7:a4:e3:ad:1a:a9:62:1c:
                    b7:ee:d3:12:07:16:6f:34:5f:40:81:4a:0d:f9:0c:
                    ab:57:b3:3c:81:b7:15:c9:e5:42:f6:44:0e:8f:fa:
                    6b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9D:4E:32:7D:BA:5D:B9:79:40:1F:1C:16:AB:49:CF:28:CA:ED:BF
            X509v3 Authority Key Identifier:
                keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/Jp1OMn26Xbl5QB8cFqtJzyjK7b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.59.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:f5:7b:8e:51:84:31:b8:be:2f:90:0e:66:7b:2e:bb:c9:00:
         34:65:71:6a:69:2a:3a:4f:56:fb:90:ca:c2:46:c0:9d:a1:7b:
         24:f8:d8:82:dd:13:9b:ae:93:91:1a:68:89:fe:92:59:5e:39:
         b5:4f:54:4e:46:42:6c:08:64:82:5c:c1:a2:bb:6e:ee:65:49:
         e3:17:c8:06:dd:85:48:14:40:6c:61:a7:9b:01:a8:35:8a:80:
         8a:f6:ff:8f:b1:51:28:76:7c:56:d8:67:4e:4d:22:45:1c:ff:
         b4:09:1e:4b:ef:27:73:c1:bf:37:9b:6a:c7:6c:74:1e:8d:a8:
         e6:53:c8:ff:3e:8e:c5:3c:f1:fd:88:26:4f:af:08:68:a4:b8:
         20:48:41:46:4b:97:eb:e2:d4:9d:f2:02:e2:85:06:0a:7b:01:
         d7:9e:51:f7:b0:2d:90:f0:0d:76:b2:07:25:3c:b1:53:d6:e4:
         43:38:7a:e5:5f:68:92:4a:96:4c:b8:43:06:9b:48:a5:bb:2e:
         a6:3a:fc:95:66:3f:ae:05:d0:e9:55:c5:19:e7:d4:39:a5:51:
         be:48:e3:90:18:1e:81:01:42:36:17:4a:22:20:5c:d3:85:3c:
         06:b5:23:e8:3d:39:d3:91:e0:58:d9:bd:13:e1:82:dd:87:f0:
         19:a5:44:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt26rUTb2M6VBKZTXTnOQBsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTMzODQ4MDIxZDM4ODg4NjBkYWRmNzE4ODA5NGQ3OTJh
ZjZhZTYwHhcNMjYwMTAxMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjlkNGUzMjdkYmE1ZGI5Nzk0MDFmMWMxNmFiNDljZjI4Y2FlZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LJvkMemThYEDpCBwZ2eWdZNUjXQ
DwvnJyzXDw3VZ88kxL7yr743Px1kPmssJ/pE8uMrCsih3WJ3wmJ47+pf8fJokxyH
xG3kdmxZqHb/2Z5YEXGa5L+xljUFznkeSEYp6AHIG0YOSmiTkxrA0zsSp35SLdU9
73ychO7fJr6cZ9Hjl/ZO7gCnY66Pr14L4sbMnJfuvqsMVunpFVUtZpwpQ4qfWAte
hhUE/HEhKpMCC6SBe4DkTVxfTSKuZJr4sBlRTsmvJg8KfKRnftitCYKMtCOTT9Jz
wNOh56TjrRqpYhy37tMSBxZvNF9AgUoN+QyrV7M8gbcVyeVC9kQOj/prkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCadTjJ9ul25eUAfHBarSc8oyu2/MB8GA1UdIwQY
MBaAFACTOEgCHTiIhg2t9xiAlNeSr2rmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84Njc2MmItYWE2MS00ODRhLWIxNTkt
OTdmMzliYjEzMzJkLzEvSnAxT01uMjZYYmw1UUI4Y0ZxdEp6eWpLN2I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84Njc2MmItYWE2MS00ODRhLWIxNTktOTdmMzliYjEzMzJk
LzEvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTv8MA0G
CSqGSIb3DQEBCwUAA4IBAQA09XuOUYQxuL4vkA5mey67yQA0ZXFqaSo6T1b7kMrC
RsCdoXsk+NiC3RObrpORGmiJ/pJZXjm1T1RORkJsCGSCXMGiu27uZUnjF8gG3YVI
FEBsYaebAag1ioCK9v+PsVEodnxW2GdOTSJFHP+0CR5L7ydzwb83m2rHbHQejajm
U8j/Po7FPPH9iCZPrwhopLggSEFGS5fr4tSd8gLihQYKewHXnlH3sC2Q8A12sgcl
PLFT1uRDOHrlX2iSSpZMuEMGm0iluy6mOvyVZj+uBdDpVcUZ59Q5pVG+SOOQGB6B
AUI2F0oiIFzThTwGtSPoPTnTkeBY2b0T4YLdh/AZpUSW
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:46:20 2026 by rpki-client