This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/j54P9E7HJNxXnzx0c4ZlhgLNrmk.roa
File:                     j54P9E7HJNxXnzx0c4ZlhgLNrmk.roa (raw, json)
Hash identifier:          9KgP+vcQVnAWqyQznz1mnI6dtjZmqs2SRf03m1FIUiQ=
Subject key identifier:   8F:9E:0F:F4:4E:C7:24:DC:57:9F:3C:74:73:86:65:86:02:CD:AE:69
Certificate issuer:       /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial:       019B7A5B6B71F2699FFEDC10CE913742EAA5
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/j54P9E7HJNxXnzx0c4ZlhgLNrmk.roa
Signing time:             Thu 01 Jan 2026 16:19:30 +0000
ROA not before:           Thu 01 Jan 2026 16:19:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     38930
IP address blocks:        94.75.196.0/24 maxlen: 24
                          2001:1af8:4410::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:6b:71:f2:69:9f:fe:dc:10:ce:91:37:42:ea:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
        Validity
            Not Before: Jan  1 16:19:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8f9e0ff44ec724dc579f3c747386658602cdae69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:81:ad:94:82:d4:1f:f1:db:d3:96:5f:08:1d:
                    f4:b9:7a:c0:4c:c8:3a:0e:f3:61:e4:6e:56:91:02:
                    e9:b9:8d:e6:84:d7:0a:39:85:7e:75:5a:b5:55:6a:
                    25:f6:81:ac:27:92:66:6c:25:dd:b0:22:21:71:a1:
                    c9:84:c4:4b:30:db:f8:c5:38:87:c9:6a:8b:a7:46:
                    66:70:f1:31:57:e5:12:7e:fd:6d:55:07:78:07:34:
                    34:73:d5:13:56:27:03:61:bf:be:ae:a6:78:82:f0:
                    47:ea:88:cc:e9:bc:89:aa:c6:3b:0c:75:e4:1e:51:
                    f7:76:49:c4:97:8d:13:c5:cb:89:1a:32:6a:0b:e3:
                    96:0b:92:ee:64:b3:6a:ea:4e:b3:53:06:74:41:ff:
                    f5:a6:83:f2:f9:73:bf:c0:fd:1c:c4:fe:c6:93:a3:
                    2e:11:36:c9:6c:94:e9:a8:2b:0f:5c:61:3a:db:f6:
                    b9:cd:c4:f2:cd:be:5e:04:b4:e8:b0:3f:16:3d:33:
                    b3:ee:6d:82:02:e8:17:a5:2e:4e:aa:3f:65:f1:5e:
                    0d:66:8d:30:68:44:14:ce:53:ce:92:0d:a8:bb:21:
                    a5:e5:92:7c:bc:7c:5c:22:d7:ab:9a:f2:2e:8b:69:
                    b3:0f:f2:a8:2d:07:51:f5:cc:20:62:6b:d0:7c:83:
                    55:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9E:0F:F4:4E:C7:24:DC:57:9F:3C:74:73:86:65:86:02:CD:AE:69
            X509v3 Authority Key Identifier:
                keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/j54P9E7HJNxXnzx0c4ZlhgLNrmk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.75.196.0/24
                IPv6:
                  2001:1af8:4410::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:e5:f0:0d:d5:29:1b:7e:0f:33:c8:0d:57:b4:cf:5d:12:a3:
         72:06:37:01:56:62:2b:d5:b8:45:42:93:66:75:cb:b4:90:96:
         48:cc:04:48:71:fd:3e:dd:5b:31:24:b5:4b:83:2b:1b:81:27:
         65:78:5e:0f:f1:00:0c:68:3d:b5:f5:8f:60:14:c5:27:ad:d7:
         76:ed:65:4f:8d:8f:33:5a:94:74:8b:5e:2e:f7:ea:54:d9:16:
         26:fc:cb:c7:82:8c:9a:78:97:5f:a3:13:b8:42:7c:07:a4:89:
         8b:08:58:14:ed:f3:e4:43:25:a6:0b:1b:7e:93:aa:4b:31:39:
         a3:4f:64:52:5a:c6:ff:ce:14:e7:83:c3:31:43:6e:64:09:cb:
         d3:3b:82:15:a5:34:77:d5:52:2a:e1:4a:2d:f1:a2:77:2f:58:
         24:fa:82:00:3d:e0:53:7c:09:f9:04:5f:03:46:e7:9c:16:c3:
         04:d1:e9:7b:31:30:d7:47:7d:6b:0f:0e:6c:b5:a6:16:52:18:
         e8:17:cb:42:66:48:82:a6:95:65:a2:ee:f4:4b:ae:57:ab:d0:
         bd:88:de:f6:59:81:6b:f8:90:35:90:88:18:07:ed:1b:b9:6c:
         e8:66:8d:be:18:a6:2f:25:60:99:11:a2:75:8b:fe:39:6f:be:
         13:b9:8f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:56:35 2026 by rpki-client