This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/j-l6LKHSFBzRUC4zI3RrMzCHJGg.roa
File:                     j-l6LKHSFBzRUC4zI3RrMzCHJGg.roa (raw, json)
Hash identifier:          TldycA22tY7EvqsLvcs1YaipegGydJ+DMucdg1RkrFY=
Subject key identifier:   8F:E9:7A:2C:A1:D2:14:1C:D1:50:2E:33:23:74:6B:33:30:87:24:68
Certificate issuer:       /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial:       019B783534A756636D7F1EDD74E1AE63A384
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/j-l6LKHSFBzRUC4zI3RrMzCHJGg.roa
Signing time:             Thu 01 Jan 2026 06:18:31 +0000
ROA not before:           Thu 01 Jan 2026 06:18:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203476
IP address blocks:        46.226.104.0/22 maxlen: 22
                          92.243.0.0/19 maxlen: 20
                          95.142.160.0/20 maxlen: 20
                          217.70.188.0/22 maxlen: 22
                          2001:4b98:dc4::/48 maxlen: 48
                          2001:4b98:dc5::/48 maxlen: 48
                          2001:4b98:dc6::/48 maxlen: 48
                          2001:4b99:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:34:a7:56:63:6d:7f:1e:dd:74:e1:ae:63:a3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
        Validity
            Not Before: Jan  1 06:18:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8fe97a2ca1d2141cd1502e3323746b3330872468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:71:d2:58:18:62:0b:ad:fc:8a:a4:76:a6:28:
                    3d:35:86:51:f7:5c:f2:e0:f0:fa:c3:52:90:92:a7:
                    48:7e:e4:de:2b:0e:6b:31:ac:f2:a7:0a:81:59:fb:
                    0d:73:88:44:49:5b:a9:bb:34:f4:aa:81:77:a9:b4:
                    40:53:a4:3a:7c:57:d3:17:94:4f:05:8c:12:0f:79:
                    af:8a:ea:af:89:42:d8:e7:fa:c5:be:75:5a:79:57:
                    ba:d2:4e:44:ac:c2:49:28:5b:ad:e7:ae:da:c9:a8:
                    23:d8:d6:1b:69:e0:a3:1f:65:fa:d3:d2:30:12:f4:
                    da:30:c6:50:74:d2:66:c7:f9:1f:69:0b:eb:31:4d:
                    21:fb:dc:40:87:ac:1d:60:8a:c0:70:d3:65:a1:70:
                    ea:92:67:0d:f6:ab:8a:21:2a:03:c4:6a:68:26:99:
                    a1:dc:6c:37:b4:e0:45:c0:2b:59:67:ef:fe:a2:e1:
                    78:49:d2:32:47:da:99:cd:9a:22:51:d0:0c:b6:3a:
                    6d:6b:fd:f1:0a:78:7b:ef:ac:85:0b:c9:45:07:56:
                    b8:c0:bd:45:2e:48:a3:00:16:30:dc:cc:fe:dc:30:
                    5d:bf:f6:74:89:59:13:01:a2:19:aa:27:c8:28:31:
                    0b:24:6b:83:7b:ee:1b:c4:ce:18:eb:f9:17:49:0f:
                    8d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E9:7A:2C:A1:D2:14:1C:D1:50:2E:33:23:74:6B:33:30:87:24:68
            X509v3 Authority Key Identifier:
                keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/j-l6LKHSFBzRUC4zI3RrMzCHJGg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.226.104.0/22
                  92.243.0.0/19
                  95.142.160.0/20
                  217.70.188.0/22
                IPv6:
                  2001:4b98:dc4::-2001:4b98:dc6:ffff:ffff:ffff:ffff:ffff
                  2001:4b99:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:9d:34:07:02:73:d4:d4:04:a0:8a:73:85:be:6f:4a:18:7b:
         45:6b:ac:55:8a:66:31:7c:05:7f:3b:48:1b:23:f3:bb:28:1e:
         67:f9:03:f8:39:d2:8c:a6:43:13:2d:e5:c3:eb:b9:c4:40:17:
         1e:e2:ac:42:18:e1:44:e7:c3:99:d9:63:36:c2:6d:21:2d:ac:
         47:08:78:80:56:9e:33:cc:e4:20:be:0d:d0:89:39:00:0e:63:
         f7:8b:4e:e4:26:11:df:db:15:2f:2a:17:f5:9a:fc:04:f4:60:
         60:52:b1:b6:7c:cf:1a:77:f9:27:f5:97:a9:f9:52:f3:f0:e3:
         48:51:91:7d:72:c7:de:ca:54:53:a6:01:19:5a:c4:06:9f:ca:
         6a:3d:0c:ba:65:29:d3:72:9c:be:18:8b:96:e4:d7:ca:4f:f1:
         ba:55:96:33:4e:38:96:c3:34:e6:2b:52:26:47:36:bd:0a:6e:
         1d:0a:13:ed:bc:10:9a:17:22:bc:25:bb:c7:2f:14:6a:c4:68:
         a1:71:18:9b:ac:44:de:04:b6:5f:2d:21:5b:00:ed:d0:db:91:
         e1:27:c4:04:96:5b:c0:94:37:73:e6:3b:00:c9:d5:2e:01:7a:
         d7:e7:9a:6d:20:af:79:28:03:61:c2:a3:e0:d3:d9:e6:32:38:
         2f:59:0e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:16:52 2026 by rpki-client