This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/JFLXszgtKWNB8UXX7n6ocqRtZzs.roa
File:                     JFLXszgtKWNB8UXX7n6ocqRtZzs.roa (raw, json)
Hash identifier:          cE8sRkhHErz5b5DWjzqzoNNykqnd7My1UzU7NgMicdM=
Subject key identifier:   24:52:D7:B3:38:2D:29:63:41:F1:45:D7:EE:7E:A8:72:A4:6D:67:3B
Certificate issuer:       /CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Certificate serial:       019B7758811D15C662F39BD41FF28FD95FA8
Authority key identifier: 79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/JFLXszgtKWNB8UXX7n6ocqRtZzs.roa
Signing time:             Thu 01 Jan 2026 02:17:27 +0000
ROA not before:           Thu 01 Jan 2026 02:17:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62344
IP address blocks:        91.216.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:81:1d:15:c6:62:f3:9b:d4:1f:f2:8f:d9:5f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bb370b0c9a06fd82cb7100d903859b09f50333
        Validity
            Not Before: Jan  1 02:17:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2452d7b3382d296341f145d7ee7ea872a46d673b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:31:d4:f7:63:ad:90:0d:e5:1f:0a:49:77:
                    d2:ce:80:a9:7a:9c:91:33:dc:1e:42:7b:82:47:68:
                    7f:51:9c:66:f8:64:3a:93:5d:b5:a3:eb:15:83:8f:
                    32:d0:2e:17:29:18:88:07:b4:92:92:53:88:ae:eb:
                    c4:3b:ec:5e:d0:01:09:d8:2c:50:6d:8e:cb:41:97:
                    8e:c4:4b:02:f7:7f:5f:70:e3:cc:b2:27:a9:a1:f5:
                    b2:a7:be:ce:64:1d:3b:25:c0:03:b7:23:40:42:da:
                    c2:f6:31:3f:b2:9c:99:4b:d0:83:a7:6e:0a:0a:d4:
                    88:64:22:0e:84:78:fd:97:55:71:eb:2e:42:99:e2:
                    4e:ef:ff:d2:82:25:73:26:39:0a:44:dc:15:0d:3d:
                    46:23:1e:55:6d:58:ec:a8:1c:82:1e:a2:a4:19:1d:
                    db:72:05:8e:94:9e:40:f1:38:1d:4f:69:30:c1:eb:
                    7f:10:3d:a8:e2:44:71:25:70:f6:3b:e6:ad:71:c0:
                    ef:bb:0a:69:12:bd:28:10:6c:5d:73:14:d7:05:90:
                    ff:80:53:f3:d0:79:11:7e:8f:d8:3f:4f:ce:4a:55:
                    62:14:0b:bb:69:f8:0a:8e:51:6e:d8:34:9a:16:4a:
                    56:ba:65:f2:4e:6d:f3:ba:77:e7:c0:de:a4:67:a9:
                    66:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:52:D7:B3:38:2D:29:63:41:F1:45:D7:EE:7E:A8:72:A4:6D:67:3B
            X509v3 Authority Key Identifier:
                keyid:79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/JFLXszgtKWNB8UXX7n6ocqRtZzs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:c0:bc:30:3e:93:83:72:bb:62:e8:2e:32:48:d7:14:97:cf:
         49:3e:17:7f:f7:fa:b3:69:72:a7:9d:c7:96:20:bd:43:ed:d2:
         a6:1a:b6:0a:17:32:b1:37:ae:45:b6:58:08:6f:61:16:a9:fd:
         7e:66:b6:ab:0b:b8:4a:59:66:83:a1:46:c5:5c:3a:b7:cc:28:
         f0:ca:07:bc:1e:9e:46:75:0d:01:66:38:96:0a:23:ba:b2:e7:
         aa:82:79:51:71:71:0c:1d:80:4d:ce:a1:a7:f9:e0:16:cd:da:
         18:26:58:31:8d:19:70:3f:d8:d3:65:29:ef:9a:d6:53:06:fa:
         70:fc:4e:be:24:8d:86:f2:92:d9:8b:44:25:32:c0:16:fd:d2:
         26:23:f5:b5:51:ce:c7:14:10:cb:21:73:e0:a4:dc:f2:6b:ad:
         7f:e3:bd:cb:47:2e:a2:9c:67:71:2f:f3:2a:3c:37:b2:30:64:
         74:85:fa:1b:d2:a9:72:8a:88:ef:21:b1:f4:4e:7f:8f:ff:d8:
         ea:e0:2d:21:64:d6:98:a6:1d:0e:0c:22:09:6c:28:f0:37:93:
         d2:b4:67:9a:78:73:77:9e:36:c4:92:e3:f5:c0:d6:72:53:39:
         75:ee:14:25:93:9c:ae:ed:a4:be:78:a1:04:d4:f0:28:48:8e:
         d4:9e:8e:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WIEdFcZi85vUH/KP2V+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YmIzNzBiMGM5YTA2ZmQ4MmNiNzEwMGQ5MDM4NTliMDlm
NTAzMzMwHhcNMjYwMTAxMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDUyZDdiMzM4MmQyOTYzNDFmMTQ1ZDdlZTdlYTg3MmE0NmQ2NzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRYx1PdjrZAN5R8KSXfSzoCpepyR
M9weQnuCR2h/UZxm+GQ6k121o+sVg48y0C4XKRiIB7SSklOIruvEO+xe0AEJ2CxQ
bY7LQZeOxEsC939fcOPMsiepofWyp77OZB07JcADtyNAQtrC9jE/spyZS9CDp24K
CtSIZCIOhHj9l1Vx6y5CmeJO7//SgiVzJjkKRNwVDT1GIx5VbVjsqByCHqKkGR3b
cgWOlJ5A8TgdT2kwwet/ED2o4kRxJXD2O+atccDvuwppEr0oEGxdcxTXBZD/gFPz
0HkRfo/YP0/OSlViFAu7afgKjlFu2DSaFkpWumXyTm3zunfnwN6kZ6lm7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCRS17M4LSljQfFF1+5+qHKkbWc7MB8GA1UdIwQY
MBaAFHm7NwsMmgb9gstxANkDhZsJ9QMzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWJzM0N3eWFCdjJDeTNFQTJRT0Ztd24xQXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83ZWYyZWUtYzQwZC00YjIyLWExOGYt
NTNmMjVkNDM2ZTJjLzEvSkZMWHN6Z3RLV05COFVYWDduNm9jcVJ0WnpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83ZWYyZWUtYzQwZC00YjIyLWExOGYtNTNmMjVkNDM2ZTJj
LzEvZWJzM0N3eWFCdjJDeTNFQTJRT0Ztd24xQXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9iCMA0G
CSqGSIb3DQEBCwUAA4IBAQBTwLwwPpODcrti6C4ySNcUl89JPhd/9/qzaXKnnceW
IL1D7dKmGrYKFzKxN65FtlgIb2EWqf1+ZrarC7hKWWaDoUbFXDq3zCjwyge8Hp5G
dQ0BZjiWCiO6sueqgnlRcXEMHYBNzqGn+eAWzdoYJlgxjRlwP9jTZSnvmtZTBvpw
/E6+JI2G8pLZi0QlMsAW/dImI/W1Uc7HFBDLIXPgpNzya61/473LRy6inGdxL/Mq
PDeyMGR0hfob0qlyiojvIbH0Tn+P/9jq4C0hZNaYph0ODCIJbCjwN5PStGeaeHN3
njbEkuP1wNZyUzl17hQlk5yu7aS+eKEE1PAoSI7Uno6t
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:14:10 2026 by rpki-client