This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/au6l1R_D5TS70Po3ddjxh4jpsrw.roa
File:                     au6l1R_D5TS70Po3ddjxh4jpsrw.roa (raw, json)
Hash identifier:          nF+JU9MjISfoV5j1pWIuixKzo4d4T8t4S6fvAEqKW0w=
Subject key identifier:   6A:EE:A5:D5:1F:C3:E5:34:BB:D0:FA:37:75:D8:F1:87:88:E9:B2:BC
Certificate issuer:       /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial:       019B76EB1232FE433DA7B1F9D23FAF1D40BC
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/au6l1R_D5TS70Po3ddjxh4jpsrw.roa
Signing time:             Thu 01 Jan 2026 00:17:55 +0000
ROA not before:           Thu 01 Jan 2026 00:17:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     397630
IP address blocks:        37.153.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:12:32:fe:43:3d:a7:b1:f9:d2:3f:af:1d:40:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
        Validity
            Not Before: Jan  1 00:17:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aeea5d51fc3e534bbd0fa3775d8f18788e9b2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:73:e4:0c:17:60:6e:bb:75:b1:ff:b0:39:b9:
                    35:9c:af:f3:22:9a:1e:73:21:f4:69:3c:3e:e2:84:
                    49:32:b3:2d:70:d7:3f:26:4a:8a:07:c9:34:29:c8:
                    db:a8:ab:d7:97:00:b4:b3:e1:48:3c:2e:f3:64:67:
                    39:1a:7d:be:23:96:7b:13:0c:1d:b9:db:2a:69:2f:
                    51:7f:57:5c:61:b7:47:af:e0:f4:17:4d:56:b3:05:
                    79:75:07:cf:84:c6:e2:0d:ac:28:e8:4b:66:4d:87:
                    30:c9:e2:2d:56:76:37:5b:2e:f1:b1:3c:b3:bb:58:
                    69:b5:75:4c:be:60:9d:b6:7d:9b:6f:52:75:01:de:
                    2f:69:01:1f:e9:a7:14:ce:24:a2:10:f3:b2:96:bc:
                    de:31:46:f1:52:9c:01:69:68:34:81:b6:6a:2b:24:
                    c8:4e:8f:10:b6:47:f0:6a:4f:17:40:cd:54:fa:a8:
                    d9:89:62:50:72:7e:74:dd:07:b4:da:bc:78:ee:1c:
                    d4:c9:f2:da:78:57:43:10:92:07:1f:d7:14:58:e8:
                    5c:dd:c5:91:b1:bd:8c:a7:70:4a:d5:91:de:62:65:
                    07:40:22:0d:98:32:34:f1:22:e4:24:08:5f:70:0d:
                    73:09:b4:d2:04:06:3b:24:18:e3:04:11:4a:92:b9:
                    37:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EE:A5:D5:1F:C3:E5:34:BB:D0:FA:37:75:D8:F1:87:88:E9:B2:BC
            X509v3 Authority Key Identifier:
                keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/au6l1R_D5TS70Po3ddjxh4jpsrw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.153.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:2f:83:91:70:18:be:df:bf:ac:09:e8:ef:de:38:05:92:a7:
         ea:d2:3b:8d:b4:4a:6a:4e:47:a3:22:5e:85:45:be:52:de:61:
         de:33:d3:1f:32:67:33:f6:61:a0:06:1f:4e:5d:20:96:8d:97:
         7c:46:1b:32:2f:96:06:ae:44:a6:cb:d2:18:7c:69:ba:62:44:
         e0:9a:5f:c1:ae:ea:31:dd:ec:02:bb:c5:80:0c:5c:0c:39:ce:
         49:a7:55:f0:c7:d3:57:a6:c1:bc:4a:14:03:87:39:95:01:3b:
         0e:ee:3a:fc:66:bf:a2:38:af:3f:31:13:50:00:22:e2:bf:68:
         f4:5f:e4:8d:b8:fd:4d:25:1d:18:20:55:99:71:da:e3:a1:ba:
         d4:81:24:f6:d2:ae:e1:72:65:3b:52:34:a5:0b:f8:95:76:84:
         10:3d:0e:ef:5c:05:65:9c:e3:9a:c4:4e:6b:06:45:7c:ea:9f:
         8f:0b:80:8f:7e:f2:38:bf:5e:68:a5:1e:13:83:7b:6a:94:2f:
         a2:80:26:21:c4:fe:0b:8a:38:a9:49:05:20:89:b1:12:d8:4f:
         52:7b:36:13:98:a0:8d:ed:ac:2b:6f:2b:00:fa:a3:6a:bb:a2:
         72:9e:3a:eb:1c:4b:bd:8a:15:4c:55:69:ab:c3:19:38:38:90:
         68:ba:bc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 22:33:29 2026 by rpki-client