This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/JpOEIniBJHts2084NOqMHq98Ajc.roa
File:                     JpOEIniBJHts2084NOqMHq98Ajc.roa (raw, json)
Hash identifier:          bzhADrpPKOaVRuCZzxcDyjV658iQtircvowggSUU670=
Subject key identifier:   26:93:84:22:78:81:24:7B:6C:DB:4F:38:34:EA:8C:1E:AF:7C:02:37
Certificate issuer:       /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial:       019B7BA4B5C1CBB77BB95E7F6EED22493BDB
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/JpOEIniBJHts2084NOqMHq98Ajc.roa
Signing time:             Thu 01 Jan 2026 22:19:10 +0000
ROA not before:           Thu 01 Jan 2026 22:19:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208972
IP address blocks:        185.201.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:b5:c1:cb:b7:7b:b9:5e:7f:6e:ed:22:49:3b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
        Validity
            Not Before: Jan  1 22:19:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=269384227881247b6cdb4f3834ea8c1eaf7c0237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f3:0f:57:99:bf:d5:71:6e:51:a4:af:0e:63:
                    43:80:b3:d8:60:f3:17:d5:3d:c3:d2:53:ee:46:dd:
                    a2:40:ea:79:70:95:8c:bf:16:14:5a:13:2b:72:4e:
                    ee:c3:1b:17:e6:90:9e:f1:be:65:b5:af:19:29:da:
                    16:91:aa:db:fd:52:7c:c1:aa:68:d5:3b:c9:02:75:
                    eb:eb:fc:48:0f:61:69:75:07:d5:27:20:33:3f:4d:
                    a6:4e:c0:cf:8f:e1:d5:51:7f:f9:2e:ba:ee:52:19:
                    39:73:b0:d0:61:fe:97:47:a4:b2:1d:2d:c3:69:c9:
                    e1:8a:44:a5:6a:d5:10:b5:e1:72:49:3c:1d:18:e3:
                    51:1f:2a:d4:27:fb:b3:41:e3:25:74:cf:68:58:ee:
                    e8:98:17:19:38:0c:5c:60:11:18:36:8c:4b:fc:a8:
                    4f:f4:2d:85:fa:af:64:28:8d:ad:7c:41:34:d1:98:
                    50:97:85:76:c3:12:47:86:8f:ec:d6:32:e8:15:5c:
                    c0:22:24:94:1c:3c:ec:f2:79:79:a6:a1:cf:3c:73:
                    1a:00:cb:03:7a:0e:0c:47:7e:9a:e9:a7:5a:1b:fa:
                    01:1e:fc:5b:36:04:3e:f2:c0:95:77:88:d9:5a:c7:
                    8a:9a:9a:fd:de:ae:bf:09:af:3a:8c:85:d3:84:75:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:93:84:22:78:81:24:7B:6C:DB:4F:38:34:EA:8C:1E:AF:7C:02:37
            X509v3 Authority Key Identifier:
                keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/JpOEIniBJHts2084NOqMHq98Ajc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:4b:eb:fa:de:33:62:f3:b1:1e:4a:a9:d7:60:97:6d:47:75:
         10:12:3d:c3:6a:22:28:b4:92:d4:38:f9:1f:ca:c2:3e:ae:29:
         8a:24:a8:9a:43:36:ab:9b:07:ab:78:67:b6:b1:43:b2:86:23:
         18:66:24:9d:f0:a1:ff:41:a8:0b:b0:06:7f:4e:8b:08:cd:56:
         6b:cf:ee:09:89:ad:b2:f5:8c:5a:c4:cb:6b:d7:1d:f0:af:a0:
         92:5c:e2:c1:2f:0a:72:8e:c8:ed:8b:3a:48:e5:25:a5:1f:33:
         a2:23:a6:5a:fa:f9:90:65:6a:01:4c:7d:8a:f9:35:b3:63:73:
         94:40:ca:ef:21:0c:b9:b4:a1:54:90:f9:0d:5e:74:6c:8d:e8:
         ad:06:01:ac:b6:3f:eb:57:13:2c:14:43:df:dd:d5:4e:b6:44:
         f6:86:08:3c:cc:67:0a:e7:ea:d7:9f:22:97:9b:2f:11:af:06:
         e5:8c:33:f7:37:13:15:4a:ef:ac:a9:5a:00:df:46:fc:0b:d9:
         c6:02:bf:32:ab:9d:ea:44:9d:a4:1d:4f:d2:aa:0c:99:48:d0:
         88:9a:72:4b:dc:e5:0e:54:b3:ac:aa:4d:22:62:1a:0c:e7:11:
         71:a8:91:04:e0:c1:9e:44:53:e8:79:a1:45:17:bb:60:ec:26:
         54:5d:02:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 16:23:12 2026 by rpki-client