This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/jMDauzNgql38unoatB3JO5Ml3iQ.roa
File:                     jMDauzNgql38unoatB3JO5Ml3iQ.roa (raw, json)
Hash identifier:          Bmlq4o2YkAwlEIUrRalLb7yAT8WXu+XhxwnwkhpOnOU=
Subject key identifier:   8C:C0:DA:BB:33:60:AA:5D:FC:BA:7A:1A:B4:1D:C9:3B:93:25:DE:24
Certificate issuer:       /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial:       019B797E12F107091A9484E9B9F3F3DC716E
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/jMDauzNgql38unoatB3JO5Ml3iQ.roa
Signing time:             Thu 01 Jan 2026 12:17:44 +0000
ROA not before:           Thu 01 Jan 2026 12:17:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        195.234.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:12:f1:07:09:1a:94:84:e9:b9:f3:f3:dc:71:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
        Validity
            Not Before: Jan  1 12:17:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8cc0dabb3360aa5dfcba7a1ab41dc93b9325de24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cf:64:49:f3:1a:1f:be:68:7d:e7:dd:b9:e9:
                    78:fe:48:20:e3:fa:b5:ca:98:92:50:76:3e:a1:2b:
                    05:38:73:68:df:be:91:0e:d4:36:64:ce:ba:9d:ef:
                    2d:72:6b:7b:af:5f:a2:49:64:d3:0f:bf:62:e4:ae:
                    bf:7e:e7:56:51:21:4a:76:2d:b0:c7:fb:8f:93:c8:
                    d1:5e:26:ab:14:22:8f:f1:80:14:92:85:d0:84:d2:
                    e9:2d:da:34:e0:d7:e9:c6:22:55:46:e8:f5:0b:df:
                    a3:c9:f5:31:55:b1:be:39:90:f0:96:f6:2c:91:81:
                    3f:8f:39:fd:ec:41:8b:b8:06:59:cc:dc:85:32:3e:
                    10:f6:04:28:ea:1a:50:05:e9:ed:f7:ad:f9:2b:6c:
                    54:57:ab:68:fe:f7:8a:fe:5d:e6:1a:a9:f6:7f:db:
                    52:b6:d6:3a:8a:66:3a:6b:78:88:50:20:7b:9d:15:
                    ac:c2:69:c9:0b:c9:66:fe:08:04:03:e6:df:94:b0:
                    7a:c5:2e:e7:2b:00:c3:18:42:49:48:1c:8f:03:df:
                    87:93:f6:a9:48:2a:bc:09:7d:ce:f3:a6:33:84:26:
                    ae:0b:6d:3c:31:d1:d4:31:ae:04:12:65:48:9d:4c:
                    26:4b:4f:25:47:d7:2f:ad:2e:f5:e3:4d:3f:f2:b2:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C0:DA:BB:33:60:AA:5D:FC:BA:7A:1A:B4:1D:C9:3B:93:25:DE:24
            X509v3 Authority Key Identifier:
                keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/jMDauzNgql38unoatB3JO5Ml3iQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.234.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:dd:5b:da:26:3c:36:8b:47:15:aa:b1:c7:98:e0:eb:57:c2:
         d6:46:e2:f2:c0:70:05:ee:fa:7a:db:d7:de:6d:73:ec:1c:71:
         e0:69:0c:61:6b:71:83:04:97:94:68:22:d6:b3:08:18:b3:21:
         f5:fc:9d:22:2d:e6:38:ca:e9:03:31:e4:3a:b7:56:a0:d1:33:
         7d:da:f6:6e:dc:89:b5:77:52:d6:fd:58:93:f0:98:ca:e6:1e:
         c9:06:de:fa:38:22:63:5e:1a:08:99:f4:49:e7:c8:f2:0c:15:
         aa:e4:a6:37:27:19:05:e7:05:8c:b7:ae:5b:e1:9c:aa:bf:fd:
         5e:d3:e2:c5:b1:1d:46:d9:d9:73:ba:1b:7e:83:e5:7f:cf:06:
         24:1e:05:61:71:be:0c:f4:d6:fc:f4:b7:5b:fc:68:63:f1:1e:
         d6:6b:87:44:a7:20:b7:3b:96:e4:63:0a:7d:5f:63:06:0e:35:
         bd:29:a4:ae:67:5c:3f:99:43:28:47:94:a0:e7:5d:c0:17:09:
         6a:23:0f:85:5a:0e:0b:db:72:af:c1:c7:21:51:b6:92:d4:c2:
         39:36:4f:6e:f9:00:95:2c:c2:5d:29:06:7a:6b:04:02:7b:a3:
         46:4d:16:dd:28:df:29:b4:80:ea:9f:0c:8b:f3:52:25:72:29:
         58:f9:78:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:47:25 2026 by rpki-client