This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/jFPGtX_FcQAwHXe-QQOgTka56j8.roa
File:                     jFPGtX_FcQAwHXe-QQOgTka56j8.roa (raw, json)
Hash identifier:          g/NOz6pPl41kH4Yiy/SzHiZpH6VRanD2q2qJkEMccn0=
Subject key identifier:   8C:53:C6:B5:7F:C5:71:00:30:1D:77:BE:41:03:A0:4E:46:B9:EA:3F
Certificate issuer:       /CN=ed6a3127ed75acd24600db35a8f230e2f324ba0e
Certificate serial:       019C1F72E918D11C7C879E48E4E19A7AFA7D
Authority key identifier: ED:6A:31:27:ED:75:AC:D2:46:00:DB:35:A8:F2:30:E2:F3:24:BA:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/jFPGtX_FcQAwHXe-QQOgTka56j8.roa
Signing time:             Mon 02 Feb 2026 17:42:30 +0000
ROA not before:           Mon 02 Feb 2026 17:42:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43626
IP address blocks:        91.195.84.0/24 maxlen: 24
                          91.195.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1f:72:e9:18:d1:1c:7c:87:9e:48:e4:e1:9a:7a:fa:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6a3127ed75acd24600db35a8f230e2f324ba0e
        Validity
            Not Before: Feb  2 17:42:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8c53c6b57fc57100301d77be4103a04e46b9ea3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:82:a4:ac:12:28:76:26:d9:ef:de:5e:af:
                    7f:54:00:bf:27:1e:5e:2d:18:08:f5:5a:35:05:ef:
                    96:57:12:10:e0:06:62:4a:fa:5a:32:09:92:56:40:
                    f8:47:68:bf:3f:26:59:3e:18:31:37:48:20:7e:aa:
                    9c:bb:ac:8a:e4:dc:98:83:57:08:b0:98:9d:87:5e:
                    a5:47:1f:63:59:f2:ee:3a:47:5d:3f:2c:b2:9b:38:
                    5b:81:5a:a9:7a:db:cc:72:42:1e:c1:f4:c7:5e:da:
                    18:d0:6e:43:8c:ba:94:2d:ac:76:ac:0a:35:72:3f:
                    d1:74:76:af:eb:4e:ee:a5:ea:29:ea:1d:b9:82:41:
                    84:ce:3a:08:8e:9c:73:28:7e:ab:99:87:c0:6a:63:
                    fc:b5:18:04:dc:b9:86:2a:e5:26:01:8f:c3:d1:1a:
                    e1:b1:7d:be:d5:86:a6:63:db:21:c6:e0:ae:8e:48:
                    1b:70:1c:be:44:09:cb:88:37:16:69:c3:cc:b8:f6:
                    f1:d7:13:e8:33:ca:b2:d7:90:71:67:99:18:d4:7a:
                    f6:0c:e5:8c:58:b6:d9:a8:c1:f2:c1:61:79:aa:4e:
                    16:d4:3f:4f:1c:e2:6a:4b:34:ba:60:1e:82:06:0f:
                    81:80:bd:20:19:e0:5d:8d:31:48:0c:3e:a5:8a:0e:
                    ae:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:53:C6:B5:7F:C5:71:00:30:1D:77:BE:41:03:A0:4E:46:B9:EA:3F
            X509v3 Authority Key Identifier:
                keyid:ED:6A:31:27:ED:75:AC:D2:46:00:DB:35:A8:F2:30:E2:F3:24:BA:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/jFPGtX_FcQAwHXe-QQOgTka56j8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.195.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:26:78:ea:e7:e3:2b:d9:08:a5:bd:2e:88:d0:71:98:43:ab:
         e8:27:47:23:ff:aa:48:5b:81:0b:63:93:23:91:59:a3:ba:06:
         52:28:4a:94:91:6e:e8:10:3a:42:df:7b:c1:e9:2f:ef:15:0b:
         8f:7c:ed:f8:68:b9:13:6d:2a:6e:90:5b:15:d0:37:14:1c:53:
         ca:a4:bd:90:aa:fd:14:1a:3f:55:38:7c:ee:9d:74:19:50:17:
         51:d6:b6:46:76:79:58:3b:62:d4:76:a4:d9:8b:91:96:44:97:
         c9:00:8f:c7:29:b9:4b:7a:bc:a7:a4:1d:f3:41:8b:06:b8:e4:
         ec:f8:10:13:2b:ac:31:fd:6a:0b:0a:72:fc:8e:61:04:a5:77:
         c6:70:c0:64:46:67:88:88:11:d9:14:44:8b:95:bb:65:db:76:
         16:64:58:39:c3:6b:a0:53:4e:ff:e0:62:ef:d7:79:8f:14:9b:
         1a:88:97:d2:5f:f0:bb:43:82:e3:42:c5:95:7e:14:87:c5:91:
         7a:7a:5c:ea:ac:d7:2b:10:36:38:49:d7:a9:de:48:5a:17:37:
         05:97:e4:75:74:81:44:b5:58:6a:10:94:48:3a:f0:60:15:d9:
         8a:c2:53:06:1c:7b:c9:1c:4c:80:a7:5a:d0:b5:2f:09:34:bc:
         bb:1a:3f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:45:34 2026 by rpki-client