This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/Joxz29XcI1l6T7AWuUUi-Wl33kA.roa
File:                     Joxz29XcI1l6T7AWuUUi-Wl33kA.roa (raw, json)
Hash identifier:          2VdqxqSE7gstOsM8imgDgOhbP8KJT2EHLv4m8khKNJA=
Subject key identifier:   26:8C:73:DB:D5:DC:23:59:7A:4F:B0:16:B9:45:22:F9:69:77:DE:40
Certificate issuer:       /CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Certificate serial:       019B7F1477AC27D2C89FBAB2FED62414C9DC
Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/Joxz29XcI1l6T7AWuUUi-Wl33kA.roa
Signing time:             Fri 02 Jan 2026 14:20:06 +0000
ROA not before:           Fri 02 Jan 2026 14:20:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205512
IP address blocks:        185.233.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:77:ac:27:d2:c8:9f:ba:b2:fe:d6:24:14:c9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140
        Validity
            Not Before: Jan  2 14:20:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=268c73dbd5dc23597a4fb016b94522f96977de40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:14:52:bb:01:d5:3d:7e:64:0e:af:9c:10:17:
                    76:46:23:45:94:93:9d:20:f2:ce:f9:18:ba:3c:5a:
                    83:7e:8c:6b:da:a0:9a:b0:88:1d:85:77:0c:59:dc:
                    af:65:7d:8e:ae:0c:70:c2:3b:b0:5e:ab:5c:de:3f:
                    cc:76:7b:b2:a6:87:d2:0d:50:12:22:15:88:9e:ae:
                    69:5d:bb:01:3c:b0:5c:f3:5b:54:1f:b2:91:bb:d2:
                    ba:ff:be:c2:21:c1:f3:13:bc:bb:1d:b0:9f:e8:60:
                    78:d5:26:8e:0f:4f:4c:e2:ac:78:50:86:74:2f:6f:
                    4e:2e:f4:0a:07:5b:09:80:63:09:6b:2f:59:92:c0:
                    7a:15:be:92:a8:1a:89:d5:c1:8e:d1:4b:af:ad:69:
                    61:9e:fe:9b:93:01:88:42:80:85:e7:47:3b:78:4f:
                    03:bf:4c:48:04:28:77:51:2f:8c:f0:d6:2b:99:8b:
                    e3:e1:e0:17:fe:5d:ce:45:0b:66:40:b2:59:fc:98:
                    83:95:28:15:47:f0:53:4d:3d:92:40:d9:bc:fa:2c:
                    5b:18:92:34:b9:5e:20:47:d2:0a:c8:c3:25:4f:c6:
                    4a:41:e7:66:a7:ed:aa:c1:2f:56:a9:85:a7:85:9c:
                    13:bf:ae:85:4a:18:ca:97:16:2a:fe:68:55:64:33:
                    82:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8C:73:DB:D5:DC:23:59:7A:4F:B0:16:B9:45:22:F9:69:77:DE:40
            X509v3 Authority Key Identifier:
                keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/Joxz29XcI1l6T7AWuUUi-Wl33kA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:f9:82:b1:d2:64:39:1e:d7:3f:00:4d:51:34:1e:13:72:20:
         6f:bf:34:bc:8f:3c:99:0e:5f:a4:6b:c9:d0:83:1d:d8:a1:44:
         0c:1c:d1:3d:fb:c5:03:90:61:5d:f1:f1:88:90:5c:5e:8b:03:
         ab:db:6e:33:c1:a8:5e:e3:cb:43:d4:ff:5a:45:49:86:60:6d:
         0d:12:32:db:25:00:30:f6:44:56:3f:64:f2:70:75:2f:db:13:
         65:f8:c5:08:87:3e:9e:cb:3c:d4:ba:9e:9b:6f:c8:8d:67:6b:
         51:a0:b7:53:37:36:f2:0e:c7:a5:d6:36:59:94:f2:bf:cd:94:
         32:9d:91:f8:09:f6:2b:d7:05:3a:d9:3c:71:79:09:91:f4:42:
         dc:75:29:8a:ff:35:34:ff:28:2a:05:34:9a:8f:ab:32:79:4b:
         59:91:8b:72:6d:85:8a:20:72:a5:e6:8f:c9:32:b0:b3:f7:4a:
         af:61:a6:dd:e6:ff:7c:c6:5b:46:06:16:3e:5c:b4:c0:61:15:
         1b:72:f2:f4:46:4a:34:44:27:05:6b:59:00:2a:29:8e:21:40:
         1e:f3:78:43:e1:b3:a8:29:4a:11:1d:11:11:58:04:69:3d:ef:
         f9:37:66:d0:2d:60:79:e6:5f:12:42:ce:14:fa:f1:db:75:b7:
         05:03:1a:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FHesJ9LIn7qy/tYkFMncMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MzVhODI5NWEzMGQ3ZGZjYWMyYTU3MGI4ZGVjYjI1YzQ2
NTIxNDAwHhcNMjYwMTAyMTQyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjhjNzNkYmQ1ZGMyMzU5N2E0ZmIwMTZiOTQ1MjJmOTY5NzdkZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixRSuwHVPX5kDq+cEBd2RiNFlJOd
IPLO+Ri6PFqDfoxr2qCasIgdhXcMWdyvZX2OrgxwwjuwXqtc3j/MdnuypofSDVAS
IhWInq5pXbsBPLBc81tUH7KRu9K6/77CIcHzE7y7HbCf6GB41SaOD09M4qx4UIZ0
L29OLvQKB1sJgGMJay9ZksB6Fb6SqBqJ1cGO0UuvrWlhnv6bkwGIQoCF50c7eE8D
v0xIBCh3US+M8NYrmYvj4eAX/l3ORQtmQLJZ/JiDlSgVR/BTTT2SQNm8+ixbGJI0
uV4gR9IKyMMlT8ZKQedmp+2qwS9WqYWnhZwTv66FShjKlxYq/mhVZDOCgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCaMc9vV3CNZek+wFrlFIvlpd95AMB8GA1UdIwQY
MBaAFGc1qClaMNffysKlcLjeyyXEZSFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnpXb0tWb3cxOV9Ld3FWd3VON0xKY1JsSVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMGIwZWMtNzA1NS00ZWJjLTk2ZmMt
MThlMThkNjU5ZDhmLzEvSm94ejI5WGNJMWw2VDdBV3VVVWktV2wzM2tBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMGIwZWMtNzA1NS00ZWJjLTk2ZmMtMThlMThkNjU5ZDhm
LzEvWnpXb0tWb3cxOV9Ld3FWd3VON0xKY1JsSVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuenqMA0G
CSqGSIb3DQEBCwUAA4IBAQAI+YKx0mQ5Htc/AE1RNB4TciBvvzS8jzyZDl+ka8nQ
gx3YoUQMHNE9+8UDkGFd8fGIkFxeiwOr224zwahe48tD1P9aRUmGYG0NEjLbJQAw
9kRWP2TycHUv2xNl+MUIhz6eyzzUup6bb8iNZ2tRoLdTNzbyDsel1jZZlPK/zZQy
nZH4CfYr1wU62TxxeQmR9ELcdSmK/zU0/ygqBTSaj6syeUtZkYtybYWKIHKl5o/J
MrCz90qvYabd5v98xltGBhY+XLTAYRUbcvL0Rko0RCcFa1kAKimOIUAe83hD4bOo
KUoRHRERWARpPe/5N2bQLWB55l8SQs4U+vHbdbcFAxq7
-----END CERTIFICATE-----
Generated at Mon Jan 26 20:42:43 2026 by rpki-client