This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/Jn3W6ZaHvgjC2yeedSwwKl0HFXo.roa
File:                     Jn3W6ZaHvgjC2yeedSwwKl0HFXo.roa (raw, json)
Hash identifier:          1wPebkRNXxJb4zmu3Rzh3U8d+lR0H05oikgxI60SflE=
Subject key identifier:   26:7D:D6:E9:96:87:BE:08:C2:DB:27:9E:75:2C:30:2A:5D:07:15:7A
Certificate issuer:       /CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a
Certificate serial:       019B77588D128005AE6BD669F632062CE665
Authority key identifier: A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/Jn3W6ZaHvgjC2yeedSwwKl0HFXo.roa
Signing time:             Thu 01 Jan 2026 02:17:30 +0000
ROA not before:           Thu 01 Jan 2026 02:17:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197487
IP address blocks:        176.113.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:8d:12:80:05:ae:6b:d6:69:f6:32:06:2c:e6:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a
        Validity
            Not Before: Jan  1 02:17:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=267dd6e99687be08c2db279e752c302a5d07157a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3d:94:95:a5:ab:e2:6f:34:6e:c7:eb:aa:81:
                    06:3f:61:52:df:0a:6a:e8:8c:e6:ee:07:6f:01:e7:
                    e5:c4:df:3f:e9:4f:ff:f0:92:48:04:b8:1e:54:18:
                    1e:26:d7:29:99:33:ed:e0:f0:48:ad:04:53:86:f8:
                    08:f0:ca:61:ea:e8:97:15:9c:ed:ae:7c:dc:32:83:
                    c4:02:f7:05:89:85:f1:a3:1b:40:ba:ff:75:f0:da:
                    63:d2:0b:a4:35:6c:c9:d1:5c:e0:14:83:17:0e:56:
                    db:bc:b1:c4:4d:2a:5f:01:e4:2b:e1:d3:81:3c:40:
                    1e:3a:27:f4:8b:3f:ad:2a:42:c7:b8:b3:fe:82:79:
                    18:56:7a:31:66:f6:b0:b4:28:2f:90:d4:ff:a2:fd:
                    b6:84:b0:c5:df:29:b3:61:c3:88:c2:9b:b8:b7:81:
                    ce:ae:e7:1d:47:50:7c:77:19:1b:8b:4c:6d:29:f4:
                    9d:d8:c0:be:23:6a:81:7d:de:7b:a3:b1:8b:2d:ca:
                    19:d2:97:a5:15:40:f1:b7:9a:03:11:82:d5:34:dd:
                    29:83:3f:05:69:7e:55:c8:b5:72:57:e7:2a:c4:2e:
                    db:a9:10:32:15:c6:2e:3f:67:7b:13:8d:82:e7:31:
                    97:cb:9b:0e:c2:5d:69:fc:2a:62:d3:cb:44:53:8a:
                    fc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7D:D6:E9:96:87:BE:08:C2:DB:27:9E:75:2C:30:2A:5D:07:15:7A
            X509v3 Authority Key Identifier:
                keyid:A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/Jn3W6ZaHvgjC2yeedSwwKl0HFXo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.113.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:1e:27:68:a1:f6:2b:5b:9b:b1:9e:a0:43:04:c8:28:79:06:
         5f:7c:30:5d:23:5c:53:fd:12:b3:d8:65:55:a1:2f:36:61:35:
         0c:ca:1c:96:8b:e0:6b:58:04:f7:9c:a6:f4:7b:e9:41:0a:b8:
         ad:76:c1:a6:90:26:b0:f5:df:c3:85:d5:26:63:9d:13:78:9a:
         a3:1d:2b:1c:cd:3d:7f:ed:4f:4e:f5:e8:ba:f2:0b:ab:15:8e:
         f2:b8:93:fa:67:3e:01:bf:83:8c:8d:78:7a:18:8f:52:12:f3:
         b3:f0:5c:0f:b9:4e:98:fd:fe:da:02:b7:5b:34:39:9f:91:ce:
         8e:4e:dc:1a:c6:b7:30:2f:4a:8f:3d:86:fc:26:2e:17:7b:71:
         37:52:99:28:14:fe:5c:f6:d4:87:df:5a:21:a1:0d:43:15:89:
         50:84:11:13:f0:e4:cd:3b:f7:4f:67:a6:ba:c5:78:a5:a4:e9:
         de:f2:ed:6e:0e:f0:75:07:97:57:f4:6c:0f:24:70:12:92:0b:
         7a:16:85:8c:d9:ae:46:fb:39:85:74:d6:0c:88:fa:ed:a2:62:
         c9:8f:df:c0:25:5b:70:0e:28:97:a5:3d:7a:cd:fa:da:df:1f:
         3e:9a:63:26:81:16:dc:b7:86:d3:4b:22:2a:20:e3:d0:fe:d1:
         92:e9:ce:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WI0SgAWua9Zp9jIGLOZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NWYyNWFiM2M2NjAwM2IyZDVhZjgzZDJiMzY1MWY4OGQx
NTFmMmEwHhcNMjYwMTAxMDIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjdkZDZlOTk2ODdiZTA4YzJkYjI3OWU3NTJjMzAyYTVkMDcxNTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT2UlaWr4m80bsfrqoEGP2FS3wpq
6Izm7gdvAeflxN8/6U//8JJIBLgeVBgeJtcpmTPt4PBIrQRThvgI8Mph6uiXFZzt
rnzcMoPEAvcFiYXxoxtAuv918Npj0gukNWzJ0VzgFIMXDlbbvLHETSpfAeQr4dOB
PEAeOif0iz+tKkLHuLP+gnkYVnoxZvawtCgvkNT/ov22hLDF3ymzYcOIwpu4t4HO
rucdR1B8dxkbi0xtKfSd2MC+I2qBfd57o7GLLcoZ0pelFUDxt5oDEYLVNN0pgz8F
aX5VyLVyV+cqxC7bqRAyFcYuP2d7E42C5zGXy5sOwl1p/Cpi08tEU4r8CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCZ91umWh74IwtsnnnUsMCpdBxV6MB8GA1UdIwQY
MBaAFKdfJas8ZgA7LVr4PSs2UfiNFR8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDE4bHF6eG1BRHN0V3ZnOUt6WlItSTBWSHlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9kMGVmMzEtOTkxZC00OTZkLTk2MzUt
YjZmNGE0ZDYwNTNiLzEvSm4zVzZaYUh2Z2pDMnllZWRTd3dLbDBIRlhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9kMGVmMzEtOTkxZC00OTZkLTk2MzUtYjZmNGE0ZDYwNTNi
LzEvcDE4bHF6eG1BRHN0V3ZnOUt6WlItSTBWSHlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHFxMA0G
CSqGSIb3DQEBCwUAA4IBAQCcHidoofYrW5uxnqBDBMgoeQZffDBdI1xT/RKz2GVV
oS82YTUMyhyWi+BrWAT3nKb0e+lBCritdsGmkCaw9d/DhdUmY50TeJqjHSsczT1/
7U9O9ei68gurFY7yuJP6Zz4Bv4OMjXh6GI9SEvOz8FwPuU6Y/f7aArdbNDmfkc6O
TtwaxrcwL0qPPYb8Ji4Xe3E3UpkoFP5c9tSH31ohoQ1DFYlQhBET8OTNO/dPZ6a6
xXilpOne8u1uDvB1B5dX9GwPJHASkgt6FoWM2a5G+zmFdNYMiPrtomLJj9/AJVtw
DiiXpT16zfra3x8+mmMmgRbct4bTSyIqIOPQ/tGS6c4e
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:43:59 2026 by rpki-client