This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/JgeUHeNo3nFoKbjY1AINP-ptMwI.roa
File:                     JgeUHeNo3nFoKbjY1AINP-ptMwI.roa (raw, json)
Hash identifier:          CbuVPg9dHHICjEGGHB/goqF54ESCFCWeMJDnOxUnhB8=
Subject key identifier:   26:07:94:1D:E3:68:DE:71:68:29:B8:D8:D4:02:0D:3F:EA:6D:33:02
Certificate issuer:       /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial:       019B77C71192F175DC64BC2D64F5CE7A9D93
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/JgeUHeNo3nFoKbjY1AINP-ptMwI.roa
Signing time:             Thu 01 Jan 2026 04:18:13 +0000
ROA not before:           Thu 01 Jan 2026 04:18:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51876
IP address blocks:        45.136.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:11:92:f1:75:dc:64:bc:2d:64:f5:ce:7a:9d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
        Validity
            Not Before: Jan  1 04:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2607941de368de716829b8d8d4020d3fea6d3302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:09:50:59:04:32:09:0e:38:59:51:59:c4:0d:
                    98:01:2a:35:89:b1:83:9a:2a:60:ba:1b:0a:5d:b3:
                    17:bd:de:c4:92:7b:49:ad:82:b4:14:63:56:2a:2b:
                    17:6f:98:28:e6:2c:6f:3f:00:f8:44:7f:41:44:53:
                    88:01:83:05:ce:0d:61:ed:94:a1:41:c7:c0:e9:56:
                    51:f7:67:24:0e:01:bb:3b:46:1d:dc:6c:91:09:fd:
                    b4:41:fc:14:05:54:b3:08:c1:39:27:d4:0e:b2:1e:
                    71:3e:9b:e9:f5:2f:f9:26:aa:f7:78:04:34:34:ec:
                    dd:75:dc:d9:24:ef:5a:83:43:ff:ac:2e:f2:ec:71:
                    0f:e8:2b:d6:0e:9f:9a:a3:8a:b8:2d:3d:bf:8f:89:
                    c8:e8:c9:43:14:2c:e2:3f:20:ab:2a:11:74:60:d4:
                    fb:49:52:69:6a:59:2c:46:53:89:d9:e3:68:24:67:
                    2b:83:81:47:3c:ca:22:18:7f:ab:0b:b5:86:22:2c:
                    c0:36:5c:8c:8c:c7:e0:09:93:28:c0:2a:81:c9:7f:
                    74:58:e2:40:e3:9b:3e:5e:cd:c1:f6:36:01:0e:2a:
                    2c:9e:3c:6d:f0:15:bf:64:c2:4e:3b:2f:59:3b:34:
                    e8:c0:16:e2:cb:f3:ba:58:01:d2:86:43:7d:c3:05:
                    10:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:07:94:1D:E3:68:DE:71:68:29:B8:D8:D4:02:0D:3F:EA:6D:33:02
            X509v3 Authority Key Identifier:
                keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/JgeUHeNo3nFoKbjY1AINP-ptMwI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:f7:82:94:5d:44:7d:d7:65:1c:9f:11:0d:1f:3f:33:3e:42:
         35:6b:d2:18:b9:6d:04:d2:86:a4:b9:6c:e6:f7:a5:2d:1f:e8:
         91:55:ed:7e:11:c8:d1:fc:af:0e:e6:64:92:b4:21:c1:28:a7:
         7a:f5:45:47:b3:ef:ec:a6:4d:4e:1c:2b:a2:68:1d:de:d2:71:
         38:7f:20:0c:bc:7a:01:5c:d9:0a:b9:9a:47:fb:ed:8a:4e:24:
         51:9a:fb:b9:5b:79:8c:b7:57:bc:65:b0:37:d7:34:97:ba:d5:
         ec:e3:01:34:91:a4:c7:e2:fa:a8:9d:11:2c:48:0f:18:f6:1a:
         98:cc:78:6e:da:e9:c4:29:95:3c:2b:98:3f:1c:ac:b8:83:4f:
         3f:1a:46:14:1e:61:93:2b:74:c9:af:24:31:5c:8a:3f:a5:d5:
         9a:a3:40:d3:7a:d0:a7:a4:76:c0:cf:ac:bc:4f:18:28:a4:ba:
         6a:77:b4:d1:12:6a:38:aa:89:1b:ff:cd:5b:05:68:59:75:35:
         e6:25:33:bb:67:db:37:1a:2f:00:93:76:00:87:85:8c:c6:22:
         69:69:be:b6:4b:0f:22:26:cc:08:ca:57:6e:a8:8f:e0:6a:1d:
         1f:24:c7:be:c9:7c:57:f9:94:de:02:5c:4a:b9:26:68:1d:56:
         5f:d5:37:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:33 2026 by rpki-client