This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/JWCAfjjh5zsM89EhT5JBBpHJm28.roa
File:                     JWCAfjjh5zsM89EhT5JBBpHJm28.roa (raw, json)
Hash identifier:          +D0zzkFTWspOvvhGzzd00EXqwAQzFC2yhaPbQUOWqZU=
Subject key identifier:   25:60:80:7E:38:E1:E7:3B:0C:F3:D1:21:4F:92:41:06:91:C9:9B:6F
Certificate issuer:       /CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Certificate serial:       019B77C669007964EC1353E751280748063E
Authority key identifier: A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/JWCAfjjh5zsM89EhT5JBBpHJm28.roa
Signing time:             Thu 01 Jan 2026 04:17:30 +0000
ROA not before:           Thu 01 Jan 2026 04:17:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14907
IP address blocks:        193.46.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 22:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:69:00:79:64:ec:13:53:e7:51:28:07:48:06:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
        Validity
            Not Before: Jan  1 04:17:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2560807e38e1e73b0cf3d1214f92410691c99b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:5e:00:d1:a2:e3:15:04:2f:e3:54:9d:3b:
                    d7:44:13:fb:7c:90:a9:f7:85:a4:6a:b0:d5:0f:a0:
                    2f:d9:30:55:e0:0f:da:51:c3:25:3c:f8:f0:9c:8e:
                    2e:db:89:67:c7:0d:9f:7c:8d:fb:d7:22:f8:c8:d8:
                    74:63:68:e0:72:f4:c8:ce:e0:55:9b:31:d6:d2:d0:
                    33:8a:48:79:5a:c8:38:b7:c6:90:2d:8b:36:dc:6f:
                    f6:e2:14:d1:be:92:67:96:d9:6b:be:39:92:b0:12:
                    5a:de:f5:f6:45:01:eb:89:fd:67:56:99:5f:c6:52:
                    c4:a5:40:04:37:1a:71:a1:fa:21:57:1b:52:8a:51:
                    d6:e1:36:ba:ab:6c:75:65:0e:76:22:da:c0:cd:0a:
                    78:68:2a:dc:9e:76:9e:46:74:94:61:5f:88:d8:63:
                    92:3f:9b:cd:81:44:11:fe:14:80:bf:60:44:20:27:
                    0d:44:55:fb:ea:b6:fc:cc:56:f6:63:b1:6b:55:ad:
                    a5:07:aa:c1:24:98:d4:84:f6:be:36:87:33:ce:df:
                    5b:c3:86:6b:70:4b:fc:75:ff:1e:42:1f:ea:da:7c:
                    d0:89:27:17:00:2c:f5:f6:0c:ba:bb:b9:94:51:a0:
                    4d:bb:5b:8a:27:c4:eb:0e:77:0e:27:ba:4a:d0:8c:
                    a1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:60:80:7E:38:E1:E7:3B:0C:F3:D1:21:4F:92:41:06:91:C9:9B:6F
            X509v3 Authority Key Identifier:
                keyid:A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/JWCAfjjh5zsM89EhT5JBBpHJm28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.46.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:ae:9c:0a:08:b7:58:80:14:3d:02:ee:64:29:39:1f:65:de:
         dd:2e:ea:b8:84:ee:a4:9a:58:d4:e4:0b:dc:df:1f:92:43:de:
         58:54:b8:56:8b:9d:e1:6c:b9:39:6d:59:c9:0d:d6:55:7a:d9:
         f9:ff:5f:85:98:3c:6f:e8:99:ee:8b:63:e4:c1:28:e4:1b:0a:
         05:21:65:d9:d1:1e:af:3b:13:c2:6a:a5:f9:a4:6b:b5:aa:6e:
         e8:53:49:84:d3:e0:76:e8:5a:49:84:49:48:4b:bb:ab:81:ed:
         10:b2:0a:8a:6c:97:14:8c:c8:a6:8f:f1:5c:6b:4b:88:c1:49:
         82:ac:e4:77:b3:fc:66:93:ce:36:98:07:e7:f7:c5:5f:08:5c:
         aa:df:52:d2:2b:5b:8d:4b:09:af:e9:9f:b4:fe:3b:c4:9b:7b:
         ae:9f:9a:56:87:7d:5f:4e:df:e4:74:42:b5:0b:2f:b8:5a:4f:
         21:ea:7e:53:bb:88:ce:fa:0b:10:ba:a3:51:bf:0d:23:b6:53:
         f9:af:ee:ce:5b:c1:6b:16:92:97:5c:04:f1:88:0a:c2:44:bc:
         92:ea:21:74:ba:ae:c7:8f:fc:55:75:07:db:b3:79:fc:f8:9a:
         07:76:cd:a3:9c:90:e8:1c:da:86:51:c2:c9:47:f7:02:df:cd:
         86:21:34:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3xmkAeWTsE1PnUSgHSAY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OWYzYWQzMTQyYTJjMDJmOTkyYjk2YWIwYjliNjM5MGFm
N2ZlMDIwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTYwODA3ZTM4ZTFlNzNiMGNmM2QxMjE0ZjkyNDEwNjkxYzk5YjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3heANGi4xUEL+NUnTvXRBP7fJCp
94WkarDVD6Av2TBV4A/aUcMlPPjwnI4u24lnxw2ffI371yL4yNh0Y2jgcvTIzuBV
mzHW0tAzikh5Wsg4t8aQLYs23G/24hTRvpJnltlrvjmSsBJa3vX2RQHrif1nVplf
xlLEpUAENxpxofohVxtSilHW4Ta6q2x1ZQ52ItrAzQp4aCrcnnaeRnSUYV+I2GOS
P5vNgUQR/hSAv2BEICcNRFX76rb8zFb2Y7FrVa2lB6rBJJjUhPa+Noczzt9bw4Zr
cEv8df8eQh/q2nzQiScXACz19gy6u7mUUaBNu1uKJ8TrDncOJ7pK0IyhLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCVggH444ec7DPPRIU+SQQaRyZtvMB8GA1UdIwQY
MBaAFKefOtMUKiwC+ZK5arC5tjkK9/4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDU4NjB4UXFMQUw1a3JscXNMbTJPUXIzX2dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82MzYzY2UtYzhhMC00OTYxLWFlODAt
ZDVhNzg1NTE3YmJmLzEvSldDQWZqamg1enNNODlFaFQ1SkJCcEhKbTI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82MzYzY2UtYzhhMC00OTYxLWFlODAtZDVhNzg1NTE3YmJm
LzEvcDU4NjB4UXFMQUw1a3JscXNMbTJPUXIzX2dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS5aMA0G
CSqGSIb3DQEBCwUAA4IBAQBGrpwKCLdYgBQ9Au5kKTkfZd7dLuq4hO6kmljU5Avc
3x+SQ95YVLhWi53hbLk5bVnJDdZVetn5/1+FmDxv6Jnui2PkwSjkGwoFIWXZ0R6v
OxPCaqX5pGu1qm7oU0mE0+B26FpJhElIS7urge0QsgqKbJcUjMimj/Fca0uIwUmC
rOR3s/xmk842mAfn98VfCFyq31LSK1uNSwmv6Z+0/jvEm3uun5pWh31fTt/kdEK1
Cy+4Wk8h6n5Tu4jO+gsQuqNRvw0jtlP5r+7OW8FrFpKXXATxiArCRLyS6iF0uq7H
j/xVdQfbs3n8+JoHds2jnJDoHNqGUcLJR/cC382GITRf
-----END CERTIFICATE-----
Generated at Sun Jan 11 08:35:58 2026 by rpki-client