This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/JPfoJXm_mqNYx2eLoY-8aQk43JI.roa
File:                     JPfoJXm_mqNYx2eLoY-8aQk43JI.roa (raw, json)
Hash identifier:          60bOqqx8tDTM630vxTBXKNLIi5QJRiiJ1Zd2UZ7x0Qo=
Subject key identifier:   24:F7:E8:25:79:BF:9A:A3:58:C7:67:8B:A1:8F:BC:69:09:38:DC:92
Certificate issuer:       /CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
Certificate serial:       019B7D5C137552DA3F120E6B0AF06632FF9D
Authority key identifier: 36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/JPfoJXm_mqNYx2eLoY-8aQk43JI.roa
Signing time:             Fri 02 Jan 2026 06:19:04 +0000
ROA not before:           Fri 02 Jan 2026 06:19:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25460
IP address blocks:        88.214.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:13:75:52:da:3f:12:0e:6b:0a:f0:66:32:ff:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
        Validity
            Not Before: Jan  2 06:19:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=24f7e82579bf9aa358c7678ba18fbc690938dc92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:02:34:ab:41:82:11:f3:c3:27:ee:15:8e:
                    32:fb:fb:dc:a8:11:5a:07:d3:43:13:e3:88:97:e8:
                    2a:44:dc:7f:f2:5f:7d:8e:e0:19:52:5f:9d:b0:cd:
                    c1:7e:80:9e:23:8f:d1:70:57:f1:17:dc:c7:96:14:
                    65:55:8b:1b:3e:6e:e2:a3:a5:f5:16:db:db:fd:4d:
                    d9:c8:19:92:2d:eb:21:db:59:e3:09:e0:5c:3e:0f:
                    c3:a0:95:98:3c:31:5d:fd:e9:48:44:f1:14:bd:55:
                    08:8c:70:35:a8:30:d2:51:81:6e:f9:11:7c:6d:da:
                    64:86:e2:2a:be:ee:d1:5b:f9:81:07:26:78:cb:51:
                    b9:4e:09:3e:26:ba:b8:54:3b:4b:e2:39:f1:ed:72:
                    07:df:70:5d:30:d7:40:2a:6f:33:66:1e:f7:e4:2d:
                    35:6a:7b:c4:1d:08:4f:ac:b0:92:16:2f:7b:c5:51:
                    e9:5b:d5:d9:50:2e:fe:09:7e:82:cb:55:51:e6:9e:
                    02:88:28:05:a9:5e:d1:a4:42:1e:32:0a:10:f1:b8:
                    8d:87:45:a4:5b:89:8d:4d:1b:68:ba:a9:a1:d0:8d:
                    68:ce:b0:b4:db:d1:96:0b:94:0f:1a:83:95:b3:36:
                    be:b7:a0:ad:3a:e6:23:ba:b1:de:dd:b7:b6:98:64:
                    e8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F7:E8:25:79:BF:9A:A3:58:C7:67:8B:A1:8F:BC:69:09:38:DC:92
            X509v3 Authority Key Identifier:
                keyid:36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/JPfoJXm_mqNYx2eLoY-8aQk43JI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.214.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:41:7b:79:44:09:1f:a3:a1:1e:14:ff:50:fa:00:ac:4b:1c:
         07:b2:1d:ee:f4:de:5c:3a:4d:50:f1:78:60:61:a4:a7:34:f1:
         9a:7a:0b:fd:18:5b:d5:37:91:fb:ff:d2:03:bf:a7:77:46:04:
         1e:a2:4b:44:e2:db:26:58:4f:45:b9:af:e6:c4:f0:8f:0d:58:
         82:6e:28:f4:e9:ca:e3:52:e9:e5:eb:d2:be:d7:ab:93:e2:9e:
         21:73:e4:9e:d9:7b:8a:cf:ca:ff:32:e8:34:d2:80:4a:f9:f8:
         4f:87:3b:5f:72:bb:bd:e0:25:96:eb:e1:38:87:ce:8a:31:56:
         00:50:c2:a4:f3:7d:9e:b3:5b:7b:26:49:d1:f4:30:f1:88:39:
         46:97:5d:b3:6a:5b:a2:1e:27:94:04:70:5d:6a:28:20:b4:f5:
         07:b0:ed:1b:2b:19:10:bd:43:8c:4b:f6:49:d9:d5:a1:59:75:
         c1:bd:6d:83:0e:c2:e5:d3:2f:48:b1:47:7a:14:7f:ab:54:68:
         c9:9b:83:ec:83:48:c6:ca:04:08:09:7f:e1:20:20:8c:3b:b0:
         af:13:8e:b9:b1:f3:1a:27:3f:ec:05:37:8f:42:06:12:56:22:
         18:36:64:70:f8:4f:71:4d:77:08:f3:7a:8d:07:48:ed:45:3b:
         6a:4e:1d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:55 2026 by rpki-client