This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/J0OQyR9LmjZf5FauefK0q_2E3RA.roa
File:                     J0OQyR9LmjZf5FauefK0q_2E3RA.roa (raw, json)
Hash identifier:          +y5kOLbNNTr/jle5ApOpIspzDKbs0jrRDVAPYidkMBc=
Subject key identifier:   27:43:90:C9:1F:4B:9A:36:5F:E4:56:AE:79:F2:B4:AB:FD:84:DD:10
Certificate issuer:       /CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Certificate serial:       019B77C7095935C479C33F57474FB0A74133
Authority key identifier: B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/J0OQyR9LmjZf5FauefK0q_2E3RA.roa
Signing time:             Thu 01 Jan 2026 04:18:11 +0000
ROA not before:           Thu 01 Jan 2026 04:18:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203
IP address blocks:        212.57.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:09:59:35:c4:79:c3:3f:57:47:4f:b0:a7:41:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6380000fb7e45f8976261a698d418f08e8d67c7
        Validity
            Not Before: Jan  1 04:18:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=274390c91f4b9a365fe456ae79f2b4abfd84dd10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f6:ec:56:dc:0b:25:6b:16:36:e3:4b:30:be:
                    ac:2b:b0:06:12:30:f2:61:35:ad:12:a0:84:cf:31:
                    2f:c3:30:22:c5:62:df:41:4f:56:04:f5:6b:89:1b:
                    bf:ce:58:04:68:7b:03:8e:d6:81:45:67:4c:1e:da:
                    89:8e:f1:ec:6c:0b:4f:1f:1e:8f:c5:be:70:93:85:
                    9d:83:7b:e6:c3:63:49:2d:54:41:8e:a6:13:5d:e5:
                    cf:3d:dd:88:af:52:00:7b:5b:96:2f:ff:15:fc:75:
                    31:c6:6c:3e:7c:a2:bb:fe:28:af:bf:c0:70:c8:2b:
                    4a:e8:1d:ee:62:9f:ef:0c:08:da:65:8b:61:df:2d:
                    17:9c:63:46:ab:2b:ce:93:44:ca:5e:25:0a:eb:59:
                    d3:43:24:bd:25:0d:96:af:29:dc:33:3c:97:f4:fa:
                    f8:c0:e9:71:fb:ed:bc:0d:a2:45:29:b4:b5:82:f1:
                    ad:88:95:85:03:10:1a:b4:d9:b6:69:58:02:49:aa:
                    e3:cf:c0:7d:4f:8b:8f:d2:62:23:32:31:8c:e8:70:
                    39:1c:6b:42:88:eb:13:ae:d8:d1:62:9a:3c:66:de:
                    6d:e0:db:4b:35:6b:da:2f:62:99:39:00:90:3e:49:
                    4c:81:90:65:1f:ca:9a:4c:2a:04:40:17:6d:cb:4f:
                    b9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:43:90:C9:1F:4B:9A:36:5F:E4:56:AE:79:F2:B4:AB:FD:84:DD:10
            X509v3 Authority Key Identifier:
                keyid:B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/J0OQyR9LmjZf5FauefK0q_2E3RA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.57.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         57:bb:a8:23:d1:9a:0d:71:73:fa:5a:7e:9a:8c:d8:dc:a3:47:
         03:88:89:5b:6b:55:d1:60:e0:d0:c0:ac:a4:38:cf:6e:e6:db:
         33:76:46:17:3d:fb:2b:79:eb:9e:39:9c:39:92:cc:a2:5f:1b:
         f5:04:d3:d3:38:8e:a2:17:ce:0a:09:2e:f5:1d:b9:da:f7:44:
         11:96:58:d7:1a:67:7f:69:9a:f9:a4:46:ef:f3:69:ad:79:1b:
         1b:2f:c7:c0:9b:cb:0f:ab:8c:fb:38:0f:2e:2c:4f:e9:71:93:
         43:15:b9:ae:62:85:14:72:69:13:84:6f:18:c3:bc:17:f3:f4:
         d5:c4:eb:31:97:7c:3a:84:89:fc:93:9e:f0:c3:eb:63:fb:2e:
         77:d6:8f:d0:c7:bd:03:c8:45:09:a3:5a:9f:1e:29:cc:c0:42:
         ed:c7:60:b9:be:3f:72:fc:54:b8:f4:3e:74:e7:12:f6:7f:4c:
         49:fe:d8:75:c9:de:d3:d1:ee:8b:bd:bc:dc:6c:89:61:b2:a8:
         6a:19:3d:a1:6a:79:85:3a:d5:ad:f7:59:68:25:0d:76:8e:06:
         19:e7:cd:97:c6:1d:4a:e8:53:67:83:b4:6d:20:10:d9:ca:93:
         ee:87:95:2a:5a:70:fb:ab:8e:73:30:18:5f:30:a0:68:cd:7f:
         e2:48:4f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 09:48:34 2026 by rpki-client