This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/jBkRahacrkLQQ23ac368F01j5WI.roa
File:                     jBkRahacrkLQQ23ac368F01j5WI.roa (raw, json)
Hash identifier:          oyVpwXheCdqTwMT8mzJwnekjFyIeHBTmGLuRsWkI4Gs=
Subject key identifier:   8C:19:11:6A:16:9C:AE:42:D0:43:6D:DA:73:7E:BC:17:4D:63:E5:62
Certificate issuer:       /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial:       019B7D5B5DFE2F7C3B76A7391058DC420131
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/jBkRahacrkLQQ23ac368F01j5WI.roa
Signing time:             Fri 02 Jan 2026 06:18:18 +0000
ROA not before:           Fri 02 Jan 2026 06:18:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14315
IP address blocks:        94.139.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:5d:fe:2f:7c:3b:76:a7:39:10:58:dc:42:01:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
        Validity
            Not Before: Jan  2 06:18:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8c19116a169cae42d0436dda737ebc174d63e562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3c:0c:e1:75:07:78:98:ac:76:70:9f:5a:55:
                    7f:1b:e9:20:45:5b:ec:a6:d8:25:db:a7:74:f1:6a:
                    67:44:ae:0c:18:66:90:8d:2b:bb:c1:22:9a:c0:d3:
                    fe:27:de:3f:97:16:ce:49:4b:95:c0:6c:af:26:4b:
                    5c:cb:ff:fd:f3:13:77:bb:9e:02:f0:87:03:c7:a7:
                    a5:34:c7:b3:29:53:d8:6e:de:c7:53:5b:3b:03:b7:
                    fe:dd:f3:7f:88:42:c2:43:cc:c4:ec:c0:fc:c4:a9:
                    ff:0f:04:29:24:99:95:84:45:c3:4d:21:76:48:3b:
                    d0:35:ff:4c:d9:45:60:6d:9a:f4:2b:13:66:27:2c:
                    b3:33:dc:34:11:cb:63:46:43:75:84:c2:84:b8:11:
                    7e:76:87:80:0c:16:12:34:7b:09:e3:6c:98:4f:09:
                    b3:f2:16:0f:8a:f7:64:07:eb:c6:3c:1d:2a:5b:bd:
                    16:b7:d0:51:5e:ea:df:ff:86:c9:52:16:26:20:b0:
                    ea:dc:cf:46:8f:3f:77:66:9c:b6:38:da:a6:f7:7b:
                    a6:41:ee:97:2c:f2:ed:52:76:be:e5:47:fc:95:7c:
                    31:cd:5d:40:a5:56:01:10:1e:3d:54:b9:a3:eb:15:
                    4e:1b:64:c8:10:0f:08:53:25:c7:2d:78:9f:c3:d5:
                    a7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:19:11:6A:16:9C:AE:42:D0:43:6D:DA:73:7E:BC:17:4D:63:E5:62
            X509v3 Authority Key Identifier:
                keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/jBkRahacrkLQQ23ac368F01j5WI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.139.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:21:59:0c:c7:43:0d:17:06:11:d8:47:07:0b:cf:7b:0b:c5:
         ef:49:2b:6a:a3:b0:8b:9f:4e:c9:2b:c5:71:ab:1d:4e:f5:6f:
         9a:9d:ed:0b:f6:49:dd:77:78:3b:30:39:c1:b9:d4:45:fd:b4:
         53:e9:d6:8f:af:43:75:ef:39:33:aa:1c:fd:0d:a8:8e:1b:3c:
         c4:d2:44:52:0d:41:99:7d:e0:2b:12:5c:ea:95:ad:a4:ae:04:
         41:82:63:f7:44:cb:a5:57:01:ce:22:55:ea:dc:8a:bd:af:98:
         e8:c7:2b:7c:68:40:81:35:2b:53:2a:66:08:e8:db:6d:61:5c:
         3a:b9:79:81:92:2e:b7:bc:dc:2c:f6:69:3e:b0:e7:54:5b:03:
         3d:d4:1b:24:d1:8d:bf:f1:e2:56:82:87:4c:64:89:f3:a1:87:
         2b:e2:29:d3:3e:12:42:42:1f:2b:ef:df:9b:f8:da:42:ef:8d:
         11:74:24:1b:1d:76:67:d0:06:b2:c3:5a:2d:4e:ee:01:50:37:
         b2:0d:77:fc:11:4f:58:86:57:3c:19:dc:9b:50:9c:82:55:16:
         3c:fb:28:f2:5f:da:23:8c:88:44:be:14:79:26:e0:c8:72:c5:
         cf:e2:71:6c:6e:e8:e2:6f:93:6a:45:83:30:e7:d6:b6:d5:99:
         f8:a3:f5:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9W13+L3w7dqc5EFjcQgExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4N2NlN2RmMjMxNDBjMDAwNTEyNWE2MWFhZDcyMTUzMWU2
ODFmMGUwHhcNMjYwMTAyMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzE5MTE2YTE2OWNhZTQyZDA0MzZkZGE3MzdlYmMxNzRkNjNlNTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zwM4XUHeJisdnCfWlV/G+kgRVvs
ptgl26d08WpnRK4MGGaQjSu7wSKawNP+J94/lxbOSUuVwGyvJktcy//98xN3u54C
8IcDx6elNMezKVPYbt7HU1s7A7f+3fN/iELCQ8zE7MD8xKn/DwQpJJmVhEXDTSF2
SDvQNf9M2UVgbZr0KxNmJyyzM9w0EctjRkN1hMKEuBF+doeADBYSNHsJ42yYTwmz
8hYPivdkB+vGPB0qW70Wt9BRXurf/4bJUhYmILDq3M9Gjz93Zpy2ONqm93umQe6X
LPLtUna+5Uf8lXwxzV1ApVYBEB49VLmj6xVOG2TIEA8IUyXHLXifw9Wn5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIwZEWoWnK5C0ENt2nN+vBdNY+ViMB8GA1UdIwQY
MBaAFOh8598jFAwABRJaYarXIVMeaB8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkh6bjN5TVVEQUFGRWxwaHF0Y2hVeDVvSHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83NzY3NDctNjI0YS00OTRlLTk0YjIt
MzIzZDM0ZGVmYzhhLzEvakJrUmFoYWNya0xRUTIzYWMzNjhGMDFqNVdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC83NzY3NDctNjI0YS00OTRlLTk0YjItMzIzZDM0ZGVmYzhh
LzEvNkh6bjN5TVVEQUFGRWxwaHF0Y2hVeDVvSHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXosgMA0G
CSqGSIb3DQEBCwUAA4IBAQA2IVkMx0MNFwYR2EcHC897C8XvSStqo7CLn07JK8Vx
qx1O9W+ane0L9kndd3g7MDnBudRF/bRT6daPr0N17zkzqhz9DaiOGzzE0kRSDUGZ
feArElzqla2krgRBgmP3RMulVwHOIlXq3Iq9r5joxyt8aECBNStTKmYI6NttYVw6
uXmBki63vNws9mk+sOdUWwM91Bsk0Y2/8eJWgodMZInzoYcr4inTPhJCQh8r79+b
+NpC740RdCQbHXZn0Aayw1otTu4BUDeyDXf8EU9Yhlc8GdybUJyCVRY8+yjyX9oj
jIhEvhR5JuDIcsXP4nFsbujib5NqRYMw59a21Zn4o/Vb
-----END CERTIFICATE-----
Generated at Wed Jan 21 13:24:54 2026 by rpki-client