This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/JwAMG7H5zqvWutaY0tL6qWOVQ84.roa
File:                     JwAMG7H5zqvWutaY0tL6qWOVQ84.roa (raw, json)
Hash identifier:          WHBkccdZypDjFyRaZ97jWOQpOH4yG3/HgeMqK5knvm8=
Subject key identifier:   27:00:0C:1B:B1:F9:CE:AB:D6:BA:D6:98:D2:D2:FA:A9:63:95:43:CE
Certificate issuer:       /CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Certificate serial:       019B78A339E494DA9D8D567ABA28C9B38664
Authority key identifier: 8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/JwAMG7H5zqvWutaY0tL6qWOVQ84.roa
Signing time:             Thu 01 Jan 2026 08:18:41 +0000
ROA not before:           Thu 01 Jan 2026 08:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57536
IP address blocks:        2001:67c:26a4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:39:e4:94:da:9d:8d:56:7a:ba:28:c9:b3:86:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
        Validity
            Not Before: Jan  1 08:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=27000c1bb1f9ceabd6bad698d2d2faa9639543ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5d:23:0f:c1:c4:84:9e:94:f2:b0:5c:31:85:
                    cc:30:88:d5:1d:ef:b8:72:44:50:ee:60:e6:18:44:
                    db:cf:45:11:5b:6c:3b:87:f3:64:a2:a9:7a:d9:db:
                    2d:1c:70:bb:56:88:7d:69:86:fe:aa:0f:25:e5:ec:
                    ce:28:2f:71:28:b0:e9:21:9f:f4:15:98:c3:a0:0a:
                    39:75:e6:bb:eb:b4:9f:e0:ed:92:f2:4a:d5:2c:f6:
                    d0:9e:a3:90:93:57:8b:ab:d0:a8:76:5a:d5:d6:65:
                    3a:4a:f6:f1:c4:3b:42:02:e5:a6:05:98:22:b3:fd:
                    a7:21:47:46:69:a3:05:38:ba:69:db:20:65:6e:45:
                    d2:ba:53:a5:f0:78:06:0a:fb:c5:a5:4c:a2:48:4a:
                    4f:fe:03:f7:59:cf:fb:e0:d0:fc:d2:20:8d:2c:47:
                    05:89:8f:1f:07:2a:2e:18:5d:01:95:59:6d:da:21:
                    6d:10:a0:a6:57:e6:06:0d:5a:45:f3:f0:ae:d9:91:
                    e1:44:9a:61:f8:a8:58:67:60:e1:84:2f:ef:71:90:
                    c3:b6:05:c2:db:80:4d:44:79:ff:18:15:1e:0d:05:
                    49:bd:19:ca:8b:92:42:24:79:1b:3d:69:4c:f1:ac:
                    a5:ef:24:50:2e:8c:8b:fd:30:7e:78:d6:c3:82:4c:
                    ae:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:00:0C:1B:B1:F9:CE:AB:D6:BA:D6:98:D2:D2:FA:A9:63:95:43:CE
            X509v3 Authority Key Identifier:
                keyid:8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/JwAMG7H5zqvWutaY0tL6qWOVQ84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:26a4::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:98:94:a1:f6:8c:cc:3e:42:89:56:38:85:56:87:0c:4e:3e:
         06:c0:82:e9:ea:0e:6f:d2:bf:7e:b3:8d:a3:e0:f3:5c:0a:5a:
         a7:72:c6:8d:db:94:c5:62:d6:39:c6:56:d3:f2:9a:95:f7:0d:
         bb:f0:1d:07:e2:1d:fd:36:22:29:c8:77:7b:b7:4d:6e:32:f8:
         75:b2:7e:2e:66:45:dc:2c:db:6b:dc:e6:36:1a:09:4f:5c:fa:
         75:5b:ac:9c:34:1c:11:e0:09:04:cf:8e:07:03:68:53:3f:21:
         79:b1:75:16:df:3c:5b:8d:83:47:ca:c3:9a:00:05:44:f3:a8:
         32:e8:e4:94:16:d4:f9:6c:5b:4e:31:5b:5e:b2:0d:35:6a:1b:
         87:55:35:78:dd:57:63:88:28:7c:09:a4:52:78:91:51:85:f5:
         08:06:46:48:46:89:3f:d2:eb:90:ad:b2:df:89:3d:aa:77:79:
         b2:ff:f1:f9:de:75:f5:cb:a7:ae:b2:0f:73:b8:57:1f:87:08:
         e6:d0:31:0f:01:b8:cc:08:6a:33:fd:ad:68:33:e4:0e:48:b3:
         c9:18:2a:6b:7b:57:f1:c9:8a:47:c6:4d:cf:6f:76:a6:bd:43:
         cb:c0:5b:d4:90:ad:c0:b2:3f:ce:4d:65:51:ec:95:68:cf:2b:
         43:91:05:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 04:04:16 2026 by rpki-client