This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/N_Jp-G27wqAqsqkajDg53k_oUEE.roa
File:                     N_Jp-G27wqAqsqkajDg53k_oUEE.roa (raw, json)
Hash identifier:          NpaEZ0EEykOhPXCywjsGGExbKvpF7O0B2ojyn6pZCPc=
Subject key identifier:   37:F2:69:F8:6D:BB:C2:A0:2A:B2:A9:1A:8C:38:39:DE:4F:E8:50:41
Certificate issuer:       /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial:       019B7F822C396394548DFBA939BB61B75555
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/N_Jp-G27wqAqsqkajDg53k_oUEE.roa
Signing time:             Fri 02 Jan 2026 16:19:56 +0000
ROA not before:           Fri 02 Jan 2026 16:19:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28753
IP address blocks:        45.83.185.0/24 maxlen: 24
                          45.94.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:82:2c:39:63:94:54:8d:fb:a9:39:bb:61:b7:55:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
        Validity
            Not Before: Jan  2 16:19:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=37f269f86dbbc2a02ab2a91a8c3839de4fe85041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:bf:70:7a:4c:f8:06:f3:89:91:71:c7:5a:cb:
                    cb:fd:75:6e:da:6d:8f:7d:ab:38:c6:c6:24:33:f3:
                    1e:e2:e2:a1:4b:fd:5c:c2:79:11:81:3c:92:b4:56:
                    4d:97:92:dd:81:9e:3d:12:f0:74:12:e7:1b:55:49:
                    75:ab:f0:4f:f1:c8:78:37:1c:82:e3:92:46:5a:92:
                    98:f7:a0:93:1a:18:dc:6c:1a:48:a8:c1:70:40:32:
                    29:17:7b:bc:b8:22:5c:ba:b0:34:8f:46:98:38:b2:
                    d6:cc:4f:93:a7:9a:5f:43:86:01:80:ad:e2:6f:ef:
                    1c:cb:71:f3:6a:c2:31:5c:68:0b:7e:73:a1:7e:3b:
                    5a:23:bd:a0:e8:2e:b4:02:c5:a1:5c:12:b6:22:f4:
                    3b:c7:b0:0b:f2:93:f3:9e:46:81:3e:12:d8:e2:e1:
                    d6:d9:db:df:16:26:7f:c1:46:a0:39:13:48:1d:8e:
                    e2:89:77:34:f8:e8:e2:01:f3:f6:8a:27:7a:b1:6e:
                    00:4b:85:16:22:c0:69:2a:76:ee:65:98:37:03:68:
                    84:48:7a:6d:17:9f:97:0c:c4:ac:d7:1b:f7:13:6e:
                    55:5d:8d:45:b6:88:33:c0:13:25:37:68:16:dd:bd:
                    9a:7a:9e:09:b8:70:56:82:c4:9f:2e:de:9e:69:b0:
                    4b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F2:69:F8:6D:BB:C2:A0:2A:B2:A9:1A:8C:38:39:DE:4F:E8:50:41
            X509v3 Authority Key Identifier:
                keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/N_Jp-G27wqAqsqkajDg53k_oUEE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.185.0/24
                  45.94.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:47:b2:81:77:91:d8:19:e1:48:96:10:eb:bc:35:1d:d4:d3:
         42:a0:ce:a5:41:22:b6:a6:0b:51:2d:e9:d3:b6:f7:72:5a:6f:
         fa:ba:7d:c3:22:9d:46:1d:19:fa:9d:67:f6:31:e6:57:b9:9e:
         9f:19:85:47:55:72:97:c3:fc:50:ac:6a:81:5a:58:7c:41:15:
         a3:25:5f:ae:11:94:0b:fa:82:fc:b7:9c:98:ab:8c:af:12:1d:
         31:41:2f:67:68:ee:0e:ae:cd:c4:a2:23:43:9b:f5:4c:0d:6a:
         a7:ad:7a:a6:92:ce:e1:c5:86:70:5f:78:c3:ea:87:3a:e1:48:
         95:af:7d:e8:a6:81:84:08:44:94:1f:1f:97:0a:f9:13:f5:9f:
         b7:c4:e8:a6:62:13:fb:5a:32:47:c4:d4:f2:0b:fc:87:2b:6b:
         e8:3c:71:8c:e4:17:d7:71:b6:22:0e:49:b5:40:a6:bf:b0:25:
         93:9c:1d:ce:2a:0f:5a:54:eb:6c:3e:8e:1c:a1:d3:46:01:bc:
         a5:c9:63:79:37:c3:2e:dc:e2:36:43:b8:52:63:7c:01:4b:97:
         fe:91:87:e4:4a:63:04:14:b8:59:69:0f:46:19:16:37:6d:59:
         6b:ec:e6:ed:0b:22:3d:98:bb:c5:42:cb:56:49:65:94:79:31:
         cd:de:94:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 17:16:51 2026 by rpki-client