This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/j-RqQ-Jv6xwxZVAttzs0WSOfmLc.roa
File:                     j-RqQ-Jv6xwxZVAttzs0WSOfmLc.roa (raw, json)
Hash identifier:          8oVyr5bD2ep8rJ+/mCDqgEEEeQzSBWCENnyJGHUEE6c=
Subject key identifier:   8F:E4:6A:43:E2:6F:EB:1C:31:65:50:2D:B7:3B:34:59:23:9F:98:B7
Certificate issuer:       /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial:       019B7AC8C5616EE3F01B5CAE1DE4917738C7
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/j-RqQ-Jv6xwxZVAttzs0WSOfmLc.roa
Signing time:             Thu 01 Jan 2026 18:18:56 +0000
ROA not before:           Thu 01 Jan 2026 18:18:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62061
IP address blocks:        185.180.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:c5:61:6e:e3:f0:1b:5c:ae:1d:e4:91:77:38:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
        Validity
            Not Before: Jan  1 18:18:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8fe46a43e26feb1c3165502db73b3459239f98b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:70:9a:37:0a:fe:d9:e6:cd:43:92:d9:d0:ca:
                    64:e1:f8:b0:bb:cb:3b:8b:9c:eb:7e:4d:54:32:28:
                    27:95:bf:01:c0:eb:24:c1:05:20:b6:ae:03:95:6f:
                    27:f1:69:95:51:4a:ca:c0:0e:20:1c:ab:38:6d:76:
                    b2:4b:38:74:1d:90:82:0a:7b:be:84:a1:69:72:4b:
                    ef:75:c9:5d:e4:7d:47:4a:4f:08:1b:62:b1:26:38:
                    40:ab:4d:b6:84:fe:79:0f:49:70:63:46:15:c1:e0:
                    fa:44:ca:23:54:b0:92:f2:c9:e6:23:bf:05:6a:83:
                    49:78:58:e3:69:a7:77:35:cc:45:00:b3:2d:f5:82:
                    6b:a0:53:31:17:9a:a3:dd:c2:29:0b:fa:cd:f9:f4:
                    f8:c2:58:f3:5d:26:9d:d7:a8:b5:b1:d1:74:f5:6f:
                    96:5c:82:2e:09:45:31:ac:9d:d1:af:d5:3f:78:6c:
                    9d:a3:f6:d8:c3:b7:30:f3:b1:9d:8a:e0:36:ab:be:
                    34:71:04:7e:aa:14:30:d2:69:50:38:5a:cc:20:87:
                    d9:9c:f3:e1:ea:11:a6:5a:fa:ff:2f:d6:f9:7b:bf:
                    3d:8d:c9:0e:50:c7:17:24:d2:fa:ba:85:af:7e:28:
                    cd:c9:d1:ed:1c:ab:49:aa:04:41:03:2d:a1:93:24:
                    b4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E4:6A:43:E2:6F:EB:1C:31:65:50:2D:B7:3B:34:59:23:9F:98:B7
            X509v3 Authority Key Identifier:
                keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/j-RqQ-Jv6xwxZVAttzs0WSOfmLc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.180.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:38:f7:43:fa:ad:2d:ef:1e:f0:24:f1:87:65:66:ee:0f:4a:
         b6:00:b4:21:e4:a4:d9:4a:72:69:78:e2:13:0f:08:29:f3:2f:
         45:68:83:99:85:57:a4:4f:70:c6:1c:09:47:d6:62:81:bd:fe:
         33:36:f0:12:89:ea:c1:0a:e7:7b:02:9a:4f:86:a4:58:08:fe:
         c6:0b:27:46:72:ee:fe:45:e9:9f:ee:00:e4:fa:ea:f7:8e:cb:
         73:d7:80:45:62:1a:e8:d4:9c:e9:86:5f:7f:1d:83:65:5b:e8:
         7c:0e:a0:9d:16:a6:d1:56:e3:36:6e:cd:fa:16:fa:67:4d:00:
         bf:d0:2b:9a:4e:60:c6:8b:78:5c:1a:bc:87:d0:41:f1:a1:24:
         4c:53:e0:03:4e:b2:3b:d7:eb:7b:fe:d3:3a:e3:54:ec:71:8c:
         ad:82:a6:dd:8f:13:30:46:fd:b8:5d:96:30:e6:da:59:25:5b:
         51:06:70:04:6d:88:62:91:be:f6:86:34:95:a5:51:d5:38:f8:
         aa:4f:a5:92:61:8f:0c:12:6e:e9:00:67:27:e8:9f:bf:25:93:
         e7:8b:e7:96:66:5f:45:e7:78:5b:b8:62:79:cb:9b:fe:e2:7c:
         e4:16:b0:55:a3:8f:3f:af:70:a8:7d:1a:8c:5c:9c:31:e8:c3:
         26:ad:d4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:05:20 2026 by rpki-client