This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/JqbX_PTUjq28Lqi1j_knCVS0A90.roa
File:                     JqbX_PTUjq28Lqi1j_knCVS0A90.roa (raw, json)
Hash identifier:          iCvt3eLQurCsmS7VrC6JLl3/RIGkqIASrCrA/w60LJs=
Subject key identifier:   26:A6:D7:FC:F4:D4:8E:AD:BC:2E:A8:B5:8F:F9:27:09:54:B4:03:DD
Certificate issuer:       /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial:       019B7EA4F35E8924F47A133210BC3F753089
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/JqbX_PTUjq28Lqi1j_knCVS0A90.roa
Signing time:             Fri 02 Jan 2026 12:18:17 +0000
ROA not before:           Fri 02 Jan 2026 12:18:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     196651
IP address blocks:        195.246.244.0/24 maxlen: 24
                          195.246.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a4:f3:5e:89:24:f4:7a:13:32:10:bc:3f:75:30:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
        Validity
            Not Before: Jan  2 12:18:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=26a6d7fcf4d48eadbc2ea8b58ff9270954b403dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cb:4d:5e:17:07:33:d2:f1:36:39:df:c3:1b:
                    26:c0:54:eb:ea:08:fc:57:53:cf:f3:30:c4:92:f0:
                    93:5a:65:97:9e:ac:81:5e:97:8d:b4:26:4c:f1:7d:
                    19:4e:c2:98:df:cd:b3:a6:14:f2:cf:19:15:8d:16:
                    1c:75:1f:7c:0f:44:58:2c:b0:7c:5c:6f:00:ce:cd:
                    17:42:c7:27:62:9c:d2:17:d3:47:16:2a:9f:a6:53:
                    e2:32:68:76:09:36:91:95:45:75:f1:0d:69:d4:a4:
                    89:e6:60:ad:06:5b:53:cb:18:9d:ec:a2:e2:5f:0b:
                    ab:ca:6a:a0:ff:ac:24:22:70:f8:17:98:4e:5e:36:
                    93:8b:43:cf:dc:45:66:68:e6:05:b6:b0:2e:0f:50:
                    89:d1:e6:cb:2b:d4:f5:c8:74:14:26:a2:03:6a:c0:
                    bd:76:6b:c7:27:68:f8:88:1f:4f:43:3d:15:d5:ff:
                    7b:7f:10:c1:02:00:7f:14:f5:ed:19:0a:87:d7:14:
                    c8:e1:2d:e2:8d:9b:58:31:fb:96:7a:88:62:09:60:
                    0c:9f:2a:9e:27:fd:22:84:aa:1f:80:89:a8:ee:30:
                    86:a6:c7:16:f9:2e:e2:91:68:b5:1b:64:21:38:d7:
                    41:c1:2e:ee:42:68:84:c8:b4:23:0b:99:0f:76:22:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A6:D7:FC:F4:D4:8E:AD:BC:2E:A8:B5:8F:F9:27:09:54:B4:03:DD
            X509v3 Authority Key Identifier:
                keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/JqbX_PTUjq28Lqi1j_knCVS0A90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.246.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:b9:ea:88:31:88:48:87:9e:88:fd:f7:20:76:2a:2b:12:30:
         f6:e7:0f:77:07:1a:79:08:6c:05:11:4b:ac:85:20:7a:a5:39:
         96:94:5f:0a:11:00:cc:6f:ff:a4:42:5a:9b:ad:d3:31:55:0b:
         01:71:23:a6:96:13:b6:20:d4:f5:69:26:a1:70:85:64:a2:c6:
         89:a1:72:cc:17:05:27:1d:50:98:eb:22:26:44:e5:b1:71:4a:
         7e:9a:96:4d:d1:2b:27:9c:2b:10:d3:a2:82:66:50:af:82:e6:
         c6:d3:f1:e5:18:7b:f4:5d:be:b3:24:c9:02:b8:1e:10:65:5e:
         01:68:c8:7b:c1:f1:a0:bf:d1:6c:31:e2:80:40:93:b5:93:73:
         82:c2:c8:5a:2b:db:8a:90:02:b7:51:67:23:eb:9d:b8:35:2a:
         4c:08:c2:86:22:65:f3:c0:b5:b2:a7:e3:2d:af:9f:eb:b9:7c:
         97:b9:8d:24:ba:c2:cc:d3:f0:ee:69:4b:66:88:d7:ec:84:ec:
         10:1c:aa:21:e6:a9:a0:98:a3:c7:b1:58:dd:21:e5:8c:e8:c3:
         f3:07:13:85:27:dc:39:b6:77:4b:4a:98:08:19:19:49:90:df:
         b7:16:8c:33:49:d7:5f:64:b1:bf:dc:0c:53:cb:33:3c:27:54:
         22:41:56:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:03:36 2026 by rpki-client