This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/JptumZK_o26NVGZw2bJJ29wzj98.roa
File:                     JptumZK_o26NVGZw2bJJ29wzj98.roa (raw, json)
Hash identifier:          SmAhkDSWvGNAUul7qwEsVxdhO2v2bdTfJVR8jW5J3l8=
Subject key identifier:   26:9B:6E:99:92:BF:A3:6E:8D:54:66:70:D9:B2:49:DB:DC:33:8F:DF
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       019B7DC89C31C10A804F11188ACAEB99D475
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/JptumZK_o26NVGZw2bJJ29wzj98.roa
Signing time:             Fri 02 Jan 2026 08:17:37 +0000
ROA not before:           Fri 02 Jan 2026 08:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     5650
IP address blocks:        92.53.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:c8:9c:31:c1:0a:80:4f:11:18:8a:ca:eb:99:d4:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: Jan  2 08:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=269b6e9992bfa36e8d546670d9b249dbdc338fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:67:52:89:df:b3:f5:1b:6a:75:09:30:15:13:
                    5f:89:b3:1c:2a:18:24:58:9e:4a:7b:7c:d0:e6:43:
                    8c:18:b6:63:d4:d6:fc:e0:10:0b:bc:5c:da:be:ff:
                    f4:fe:33:8c:5f:14:bd:18:b3:89:0e:78:03:fd:6d:
                    b0:b2:17:2a:ae:6e:36:65:76:6b:59:49:f3:8f:17:
                    00:a1:b7:a1:b9:4e:4e:d0:f3:d2:86:6a:bc:5d:8f:
                    6b:f6:10:14:09:3e:73:78:e6:e7:85:f2:04:02:fe:
                    b9:47:17:b0:a5:47:cd:1c:b8:3e:8f:99:03:60:33:
                    83:60:f5:49:6a:1d:e3:16:d5:08:05:84:fa:04:8c:
                    61:6a:7d:c0:fe:2c:73:7a:93:d7:17:90:81:3a:8e:
                    72:fe:c1:1c:55:82:64:21:4f:1d:93:75:43:ff:68:
                    af:f6:fe:eb:5e:b4:26:04:04:68:c1:06:83:d1:0d:
                    6b:75:72:98:92:32:b4:aa:5e:d7:81:a0:51:a7:0f:
                    71:e6:1b:a7:eb:a6:ca:51:41:e3:2c:73:1f:ca:b2:
                    39:bb:67:8d:10:97:20:ff:a6:7c:56:66:ee:72:97:
                    e5:fb:a9:38:66:38:1c:41:35:fa:09:09:12:da:8c:
                    57:ae:86:25:b8:b0:fb:bf:3a:30:7b:cd:10:52:19:
                    4f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9B:6E:99:92:BF:A3:6E:8D:54:66:70:D9:B2:49:DB:DC:33:8F:DF
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/JptumZK_o26NVGZw2bJJ29wzj98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.53.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:0b:65:0f:76:b0:e1:a3:df:47:ee:d7:13:09:0c:7f:7c:50:
         98:3d:e0:8f:a6:68:b9:68:d9:0c:a9:f7:3e:ab:bc:3a:99:3e:
         46:41:03:7c:e5:e2:de:16:45:30:77:39:e9:79:42:c9:d9:c4:
         17:1f:55:47:f3:4e:11:e5:39:60:42:11:de:5e:a7:f9:b8:92:
         e6:00:37:d0:80:f3:4a:ba:d7:91:2d:d4:8b:8b:ad:76:42:a4:
         17:36:eb:54:93:b0:a2:ca:1b:72:8e:23:db:60:18:89:1d:be:
         a4:16:e7:02:25:91:5b:29:41:12:81:89:fe:30:12:4f:0e:18:
         65:ca:0e:a6:00:78:90:41:30:67:fb:bf:07:71:f9:ae:7e:4d:
         4f:1a:e9:57:40:71:bf:e2:41:e7:24:a7:8d:1c:0e:4a:ad:7b:
         e9:aa:e6:ab:05:ce:4c:25:5d:b5:0a:be:49:30:00:c6:a6:2e:
         82:65:bc:72:a1:b9:61:cd:1a:bf:80:58:42:1b:6c:fe:51:b6:
         84:da:df:ac:81:24:cc:ce:a2:8d:53:88:d3:2a:bc:b4:d2:58:
         ad:31:1d:e7:15:aa:3d:3a:e5:2a:7b:a4:16:63:c3:c8:c3:2d:
         c8:bd:fc:de:eb:02:e5:0b:bb:d4:51:2c:98:68:4a:d7:44:e0:
         26:2c:0b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:23 2026 by rpki-client