This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/N_Jul0j3jUL-F4iuEeP9lcen_ME.roa
File:                     N_Jul0j3jUL-F4iuEeP9lcen_ME.roa (raw, json)
Hash identifier:          68J7iK3pOuG8xYDdpx1Rr0BIzlJOCl0ODoQcNwpDaYs=
Subject key identifier:   37:F2:6E:97:48:F7:8D:42:FE:17:88:AE:11:E3:FD:95:C7:A7:FC:C1
Certificate issuer:       /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial:       019B7D5D39311C9F1351CDF56637176E0C89
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/N_Jul0j3jUL-F4iuEeP9lcen_ME.roa
Signing time:             Fri 02 Jan 2026 06:20:20 +0000
ROA not before:           Fri 02 Jan 2026 06:20:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        193.131.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5d:39:31:1c:9f:13:51:cd:f5:66:37:17:6e:0c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
        Validity
            Not Before: Jan  2 06:20:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=37f26e9748f78d42fe1788ae11e3fd95c7a7fcc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ff:55:34:12:a7:98:3a:23:7f:74:ea:03:74:
                    bf:84:00:ce:00:a0:63:1f:3b:41:aa:86:c5:f9:c3:
                    58:48:eb:8d:37:eb:a6:55:47:f4:00:60:96:69:dd:
                    6b:06:df:6c:0b:76:47:3b:5a:22:a0:7a:69:d8:f5:
                    53:77:bf:e1:18:bb:54:06:be:69:fd:8e:61:5c:8f:
                    55:e6:bf:d6:60:61:97:1b:b7:56:1b:c6:cb:e9:2c:
                    6e:c8:63:3b:b0:34:e5:36:9e:c4:ec:d2:e6:52:75:
                    3f:66:4f:1c:1f:4f:0e:05:d4:50:cd:3c:0d:0f:07:
                    28:89:b6:37:ad:95:2b:42:a8:0f:54:bb:14:f9:00:
                    d9:4d:0a:4b:9f:85:e5:99:e3:4e:6d:1d:b4:d6:1c:
                    80:c2:64:8b:91:18:c5:01:de:70:b1:f6:ab:5a:e7:
                    9a:c5:57:d2:21:ab:bc:3c:4b:fc:2a:c7:b7:08:3f:
                    40:e5:99:c7:ee:23:e4:fb:ae:19:8d:6b:1d:ca:c0:
                    c0:ff:65:8c:f5:7a:d5:44:65:2f:84:71:c1:c2:c9:
                    64:98:6a:04:f9:96:57:96:4a:d6:ac:81:5f:1a:10:
                    4f:8e:09:09:a3:3a:a5:8e:a4:c6:63:eb:03:ec:c4:
                    aa:62:46:54:18:ac:a0:4b:f2:e7:9b:90:75:83:17:
                    10:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F2:6E:97:48:F7:8D:42:FE:17:88:AE:11:E3:FD:95:C7:A7:FC:C1
            X509v3 Authority Key Identifier:
                keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/N_Jul0j3jUL-F4iuEeP9lcen_ME.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.131.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:8e:d1:85:fe:05:64:09:be:7a:a4:95:b3:39:fd:a5:bd:c0:
         b1:5b:07:42:dc:3a:c4:ac:58:c7:5c:84:87:a4:a2:a6:2e:90:
         d7:78:65:03:6e:73:d4:44:d2:a0:0e:47:23:b4:af:d4:87:f2:
         22:34:81:63:29:0c:b3:b0:ae:73:58:7e:fd:85:97:d2:16:6f:
         c6:c7:56:bb:2e:48:89:92:7b:d9:e3:4a:f5:28:a5:fb:ca:98:
         a6:61:02:a4:d4:82:cb:ab:42:08:1d:58:1a:72:ae:97:95:c0:
         ff:47:74:e1:10:83:90:e7:af:30:ed:57:59:79:86:0d:d0:5f:
         2a:92:5d:cb:e7:b5:40:29:e4:39:ad:32:a0:c6:92:a4:a8:71:
         b6:90:f2:82:af:01:66:6c:7c:19:f2:e7:06:b0:5d:f4:98:1f:
         4a:86:5a:5a:bb:a8:9b:e1:bf:d2:37:a1:2e:94:f2:cd:67:a4:
         c3:ae:62:34:e6:6c:32:9c:18:d6:8e:9b:a4:7c:3b:db:fc:3f:
         dc:9f:d1:3f:bf:2d:26:46:2b:9e:3b:cc:97:04:79:79:a7:81:
         f3:cb:05:90:bd:54:3e:1c:af:35:58:8f:43:07:9e:9d:a9:cf:
         3b:b6:71:86:0b:9c:19:a7:bc:f1:04:23:8d:64:85:57:0c:90:
         60:a8:90:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:47:37 2026 by rpki-client