This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/JjGWu_iS8cN2zsRmRzGaL41mOkE.roa
File:                     JjGWu_iS8cN2zsRmRzGaL41mOkE.roa (raw, json)
Hash identifier:          g4eeZndVmzfMZIquXIPB+scdVjdZfzjwgvSICfGOgYk=
Subject key identifier:   26:31:96:BB:F8:92:F1:C3:76:CE:C4:66:47:31:9A:2F:8D:66:3A:41
Certificate issuer:       /CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Certificate serial:       019B7DCB3F20C4550CEA5588B6C47DF71B54
Authority key identifier: 55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/JjGWu_iS8cN2zsRmRzGaL41mOkE.roa
Signing time:             Fri 02 Jan 2026 08:20:30 +0000
ROA not before:           Fri 02 Jan 2026 08:20:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209106
IP address blocks:        5.182.96.0/22 maxlen: 22
                          194.246.74.0/24 maxlen: 24
                          2a0e:1400::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:3f:20:c4:55:0c:ea:55:88:b6:c4:7d:f7:1b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
        Validity
            Not Before: Jan  2 08:20:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=263196bbf892f1c376cec46647319a2f8d663a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d4:2f:4a:7a:04:fe:dc:19:9f:ed:62:2d:85:
                    67:e2:9f:3c:73:7d:00:af:0f:3e:96:80:32:00:dd:
                    ff:b9:c5:47:86:62:ae:16:9a:c8:6e:ea:80:51:dc:
                    69:55:6d:93:5d:c7:68:23:6a:f1:e6:55:53:32:e5:
                    54:35:1c:fe:8c:bd:5b:77:23:b6:ae:86:d5:c7:23:
                    7f:82:79:49:fa:5a:0b:17:a6:8e:a7:ce:c5:9d:8d:
                    77:48:60:78:2d:a1:f5:bb:ed:7b:3c:16:d9:7d:fd:
                    08:cd:57:b4:5d:50:5e:97:cf:39:22:cb:7d:3a:4e:
                    07:58:a3:cf:36:3d:ea:81:5b:e6:1e:a3:b2:8f:30:
                    c2:ed:05:d8:db:86:d6:0d:17:77:69:f3:14:35:06:
                    3b:c9:be:75:d8:01:32:7d:17:68:a1:8e:94:b5:f1:
                    06:e1:85:bb:b8:a4:69:ce:75:91:f5:7c:43:f6:94:
                    46:47:10:41:d7:f4:aa:8f:1d:e6:6c:ec:2c:75:73:
                    3b:ca:f0:6f:0d:db:67:d8:cc:f5:ee:10:07:79:c1:
                    07:b4:8e:69:ff:ae:e5:40:56:fa:1e:db:4d:99:5e:
                    a0:f9:20:18:92:86:58:46:21:39:dc:81:90:a1:1f:
                    d7:94:d8:14:bf:04:07:22:6e:4a:bc:cc:b8:24:b1:
                    e3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:31:96:BB:F8:92:F1:C3:76:CE:C4:66:47:31:9A:2F:8D:66:3A:41
            X509v3 Authority Key Identifier:
                keyid:55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/JjGWu_iS8cN2zsRmRzGaL41mOkE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.96.0/22
                  194.246.74.0/24
                IPv6:
                  2a0e:1400::/29

    Signature Algorithm: sha256WithRSAEncryption
         b4:8a:a1:8f:1f:de:b8:e9:7a:36:10:0d:98:ec:1f:b1:90:77:
         7d:6f:1a:9f:93:84:6f:53:2b:3d:c7:26:b3:9e:a2:0e:6d:72:
         4b:fd:eb:df:ae:9e:e8:93:1e:95:c3:99:5b:64:9a:0d:25:ff:
         0d:3c:a2:29:65:ef:13:8e:f5:99:3f:93:d7:1b:e0:01:67:bb:
         b5:10:cc:d3:2a:d6:a1:89:58:b6:9b:db:f5:f2:b5:42:56:10:
         76:9b:b8:65:fe:15:66:f7:26:c6:ab:fc:1c:3c:e4:ce:ad:48:
         62:98:f4:1d:1f:22:7d:5c:33:04:6a:fd:64:9d:27:0c:5c:8a:
         80:c4:85:3e:89:50:69:0e:d7:77:47:b9:4b:b7:40:e4:7a:ad:
         5d:4f:31:7b:38:ec:a2:97:8e:8f:74:13:69:79:df:f6:60:b4:
         0f:c4:45:6e:a8:e9:9a:b9:e5:95:3e:97:07:07:84:66:39:05:
         71:43:94:83:15:2a:81:52:70:3c:05:33:3e:d8:71:51:b3:75:
         4b:5a:ba:11:5e:52:e0:51:20:e0:fb:a2:5d:f0:ea:39:a6:b1:
         65:9b:35:d3:4f:54:fe:62:88:7d:f6:a9:a1:c6:72:8a:84:77:
         d8:74:11:ed:5f:c3:ac:48:42:73:a7:5f:4b:fb:23:ce:ab:c9:
         40:67:84:5c
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZt9yz8gxFUM6lWItsR99xtUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YjljZGY4YjdlNTNlZmNkOTc5OWIxMWU3NDBmNTU1ZmQ1
M2Y0YzYwHhcNMjYwMTAyMDgyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjMxOTZiYmY4OTJmMWMzNzZjZWM0NjY0NzMxOWEyZjhkNjYzYTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNQvSnoE/twZn+1iLYVn4p88c30A
rw8+loAyAN3/ucVHhmKuFprIbuqAUdxpVW2TXcdoI2rx5lVTMuVUNRz+jL1bdyO2
robVxyN/gnlJ+loLF6aOp87FnY13SGB4LaH1u+17PBbZff0IzVe0XVBel885Ist9
Ok4HWKPPNj3qgVvmHqOyjzDC7QXY24bWDRd3afMUNQY7yb512AEyfRdooY6UtfEG
4YW7uKRpznWR9XxD9pRGRxBB1/Sqjx3mbOwsdXM7yvBvDdtn2Mz17hAHecEHtI5p
/67lQFb6HttNmV6g+SAYkoZYRiE53IGQoR/XlNgUvwQHIm5KvMy4JLHjDwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCYxlrv4kvHDds7EZkcxmi+NZjpBMB8GA1UdIwQY
MBaAFFW5zfi35T782XmbEedA9VX9U/TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83N2U5MmEtZWFlMS00OGMwLThkOWMt
NmZjNGNkY2IzZjE3LzEvSmpHV3VfaVM4Y04yenNSbVJ6R2FMNDFtT2tFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS83N2U5MmEtZWFlMS00OGMwLThkOWMtNmZjNGNkY2IzZjE3
LzEvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCBbZgAwQA
wvZKMA0EAgACMAcDBQMqDhQAMA0GCSqGSIb3DQEBCwUAA4IBAQC0iqGPH9646Xo2
EA2Y7B+xkHd9bxqfk4RvUys9xyaznqIObXJL/evfrp7okx6Vw5lbZJoNJf8NPKIp
Ze8TjvWZP5PXG+ABZ7u1EMzTKtahiVi2m9v18rVCVhB2m7hl/hVm9ybGq/wcPOTO
rUhimPQdHyJ9XDMEav1knScMXIqAxIU+iVBpDtd3R7lLt0Dkeq1dTzF7OOyil46P
dBNped/2YLQPxEVuqOmaueWVPpcHB4RmOQVxQ5SDFSqBUnA8BTM+2HFRs3VLWroR
XlLgUSDg+6Jd8Oo5prFlmzXTT1T+Yoh99qmhxnKKhHfYdBHtX8OsSEJzp19L+yPO
q8lAZ4Rc
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:58 2026 by rpki-client