This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/JB134IM9J5u4LXkvJ4iGFs0HNJ0.roa
File:                     JB134IM9J5u4LXkvJ4iGFs0HNJ0.roa (raw, json)
Hash identifier:          LO/2rEaU8NJadCqLNPLOuZLeub0erw3UpacAaLPm6Fg=
Subject key identifier:   24:1D:77:E0:83:3D:27:9B:B8:2D:79:2F:27:88:86:16:CD:07:34:9D
Certificate issuer:       /CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Certificate serial:       019B7E37F924433B3D7C3137C3BD965C7247
Authority key identifier: D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/JB134IM9J5u4LXkvJ4iGFs0HNJ0.roa
Signing time:             Fri 02 Jan 2026 10:19:16 +0000
ROA not before:           Fri 02 Jan 2026 10:19:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197511
IP address blocks:        195.20.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:f9:24:43:3b:3d:7c:31:37:c3:bd:96:5c:72:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
        Validity
            Not Before: Jan  2 10:19:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=241d77e0833d279bb82d792f27888616cd07349d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1a:60:8b:70:9f:89:40:b9:c1:a8:81:d1:86:
                    87:c4:ab:10:d7:b9:24:97:4e:68:94:c9:3c:b6:8c:
                    7b:e3:e3:26:68:62:17:4b:68:f0:a0:c9:94:8c:41:
                    5d:d5:8e:a7:36:ba:f6:9c:4e:52:d9:61:c6:23:2f:
                    b9:41:f3:26:1f:b1:72:64:e1:a2:8b:8d:87:88:8c:
                    01:6b:94:90:53:ef:31:de:17:2d:d2:8f:f5:c7:15:
                    b0:f8:c5:66:7c:e1:d5:f6:3f:56:44:b2:c0:ff:85:
                    68:51:4d:91:ec:0c:e3:d1:e9:b0:17:e8:e8:0f:70:
                    23:fb:0c:9b:ed:41:52:96:c9:42:4e:47:51:87:c2:
                    0f:41:a5:d8:8d:4c:d4:de:bb:10:b4:25:ff:2c:4f:
                    b5:04:08:12:0b:f5:21:99:18:58:93:9a:ee:dd:69:
                    0e:fc:f4:66:11:19:17:f0:4b:2e:e3:e3:67:93:a0:
                    99:f3:b0:0a:42:ff:be:db:d7:a6:bc:5a:2d:23:51:
                    73:99:c4:d8:32:6b:cc:df:80:f7:c9:bc:89:dd:b0:
                    ae:fb:4e:b2:6c:49:0e:f7:a7:7a:60:51:b7:59:af:
                    66:35:e2:54:43:1a:10:77:df:46:ff:35:be:5b:40:
                    5d:f0:ae:58:f3:5c:c4:9e:cd:e1:75:08:6e:d9:aa:
                    e1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1D:77:E0:83:3D:27:9B:B8:2D:79:2F:27:88:86:16:CD:07:34:9D
            X509v3 Authority Key Identifier:
                keyid:D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/JB134IM9J5u4LXkvJ4iGFs0HNJ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.20.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:c0:ef:1d:e2:38:b2:64:f9:6a:91:db:f5:d1:5c:88:bd:7f:
         20:a6:3c:0a:f5:46:ad:19:d2:77:d9:d0:90:b8:3c:0a:2c:5c:
         4f:c7:e6:e7:6e:4a:2d:f2:b2:8a:1e:7b:7c:de:be:e4:1c:ef:
         ee:b0:38:67:ef:6a:50:94:4d:56:19:9c:09:cb:ad:a2:a0:63:
         09:c4:43:b5:21:8d:70:b5:2e:7f:46:77:44:2a:e1:29:09:50:
         9b:ed:af:cb:d7:f3:06:77:2c:a2:b1:cf:2d:c6:a3:0b:d2:8b:
         b4:39:61:ce:e8:39:7d:e3:1b:c4:57:12:eb:4f:b0:98:f7:ca:
         53:95:5f:27:5a:89:fc:8a:ef:27:80:21:ed:a5:84:36:c7:14:
         66:b3:c3:12:4e:a0:b1:fe:38:4c:dc:a8:00:48:1e:64:4a:d9:
         17:ad:58:07:e3:17:98:36:40:c2:ee:b5:d3:86:da:35:5c:9a:
         d2:48:6e:4a:34:ef:78:e3:68:03:d2:18:08:bc:bd:63:44:d8:
         07:f9:0b:ba:8b:43:8b:a0:89:b6:7b:83:ea:4d:54:b4:72:ab:
         3a:d0:87:7e:a2:34:d1:4f:c9:91:4b:ef:ee:b6:a3:d6:83:07:
         8a:2a:86:e3:99:e6:f6:fa:b2:3d:88:eb:e7:26:8c:b4:17:42:
         38:42:d6:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+N/kkQzs9fDE3w72WXHJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZDZlNjU1MDViNGY0ZTRmNGYzMWQ5MGI4YjIxYTNhN2Nm
YjBlYmYwHhcNMjYwMTAyMTAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDFkNzdlMDgzM2QyNzliYjgyZDc5MmYyNzg4ODYxNmNkMDczNDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRpgi3CfiUC5waiB0YaHxKsQ17kk
l05olMk8tox74+MmaGIXS2jwoMmUjEFd1Y6nNrr2nE5S2WHGIy+5QfMmH7FyZOGi
i42HiIwBa5SQU+8x3hct0o/1xxWw+MVmfOHV9j9WRLLA/4VoUU2R7Azj0emwF+jo
D3Aj+wyb7UFSlslCTkdRh8IPQaXYjUzU3rsQtCX/LE+1BAgSC/UhmRhYk5ru3WkO
/PRmERkX8Esu4+Nnk6CZ87AKQv++29emvFotI1FzmcTYMmvM34D3ybyJ3bCu+06y
bEkO96d6YFG3Wa9mNeJUQxoQd99G/zW+W0Bd8K5Y81zEns3hdQhu2arhIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCQdd+CDPSebuC15LyeIhhbNBzSdMB8GA1UdIwQY
MBaAFNDW5lUFtPTk9PMdkLiyGjp8+w6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME5ibVZRVzA5T1QwOHgyUXVMSWFPbno3RHI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80NjU1NTYtNzBkMS00MTUyLWE2NWEt
NmM2M2UxNTIyNDJkLzEvSkIxMzRJTTlKNXU0TFhrdko0aUdGczBITkowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80NjU1NTYtNzBkMS00MTUyLWE2NWEtNmM2M2UxNTIyNDJk
LzEvME5ibVZRVzA5T1QwOHgyUXVMSWFPbno3RHI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxSOMA0G
CSqGSIb3DQEBCwUAA4IBAQCqwO8d4jiyZPlqkdv10VyIvX8gpjwK9UatGdJ32dCQ
uDwKLFxPx+bnbkot8rKKHnt83r7kHO/usDhn72pQlE1WGZwJy62ioGMJxEO1IY1w
tS5/RndEKuEpCVCb7a/L1/MGdyyisc8txqML0ou0OWHO6Dl94xvEVxLrT7CY98pT
lV8nWon8iu8ngCHtpYQ2xxRms8MSTqCx/jhM3KgASB5kStkXrVgH4xeYNkDC7rXT
hto1XJrSSG5KNO9442gD0hgIvL1jRNgH+Qu6i0OLoIm2e4PqTVS0cqs60Id+ojTR
T8mRS+/utqPWgweKKobjmeb2+rI9iOvnJoy0F0I4QtaG
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:00 2026 by rpki-client