This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/Je6pwcupxmYkeLTCOv8CGXlDTBs.roa
File:                     Je6pwcupxmYkeLTCOv8CGXlDTBs.roa (raw, json)
Hash identifier:          JZNE/6+TrLFJcwxnS7s7SxfstDxwCFdTQJQsRp/mtTA=
Subject key identifier:   25:EE:A9:C1:CB:A9:C6:66:24:78:B4:C2:3A:FF:02:19:79:43:4C:1B
Certificate issuer:       /CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Certificate serial:       019B78A377E2BA585094FD94583F8C407216
Authority key identifier: 97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/Je6pwcupxmYkeLTCOv8CGXlDTBs.roa
Signing time:             Thu 01 Jan 2026 08:18:57 +0000
ROA not before:           Thu 01 Jan 2026 08:18:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197537
IP address blocks:        103.156.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:77:e2:ba:58:50:94:fd:94:58:3f:8c:40:72:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
        Validity
            Not Before: Jan  1 08:18:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=25eea9c1cba9c6662478b4c23aff021979434c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:62:4c:0b:7c:f2:ae:cd:cc:c5:a3:aa:4e:
                    db:02:35:e0:97:fc:90:60:17:ad:ff:48:3a:4e:c1:
                    34:03:ad:8b:72:71:96:7c:fc:9d:f5:05:34:33:4c:
                    e8:3d:81:0c:30:35:a6:86:2e:f7:2f:8b:1f:f0:05:
                    d6:a2:0e:09:58:77:6c:dc:ef:ac:66:3c:a1:06:aa:
                    58:76:f2:93:f9:ca:13:cb:51:b3:40:39:71:ab:22:
                    7b:f4:59:0c:fd:e8:cc:69:a5:78:f7:a7:37:88:60:
                    7a:a7:94:44:23:5a:c8:31:c7:5f:90:76:80:f3:5d:
                    45:cd:be:6b:55:5a:3c:b8:4b:d3:ca:ca:e0:4f:a8:
                    21:67:fe:12:09:3f:37:34:5d:57:91:b4:7d:39:f9:
                    83:a8:8a:f8:98:79:93:e6:a2:99:27:34:8f:4a:60:
                    f7:98:2e:09:30:70:1e:98:c1:b6:75:c2:28:81:9c:
                    b2:d8:4b:60:5e:c5:62:7a:3d:fe:48:00:1b:7d:12:
                    f3:64:57:43:2d:aa:a5:6b:08:20:73:9e:7d:2f:2d:
                    30:bd:23:cc:7c:ee:13:24:fe:79:df:d9:52:25:55:
                    66:e8:3d:e9:a9:90:9b:1e:d4:92:c2:cb:80:66:85:
                    73:3e:fd:88:28:a1:18:b7:51:68:90:3b:79:c3:3d:
                    25:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EE:A9:C1:CB:A9:C6:66:24:78:B4:C2:3A:FF:02:19:79:43:4C:1B
            X509v3 Authority Key Identifier:
                keyid:97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/Je6pwcupxmYkeLTCOv8CGXlDTBs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:e1:73:a1:77:57:cd:62:6c:ae:38:56:2a:09:d0:35:99:6f:
         a5:38:64:5a:f6:1b:30:08:b5:34:51:f9:cd:16:2d:74:60:61:
         e1:52:4e:26:2a:ae:83:a7:5b:e6:44:bf:bb:86:6a:e2:d9:9a:
         1a:40:a5:7c:9b:95:85:32:55:2d:f0:7b:1d:25:65:ed:68:9d:
         d6:7f:6a:f7:fb:89:c2:41:03:8c:df:8d:b7:90:74:4e:a3:f8:
         16:4e:eb:13:ec:d0:54:f0:6b:0b:46:92:ca:7e:4c:c0:f8:dd:
         c2:65:16:64:cf:f9:ad:77:f1:0b:e5:67:58:4c:b1:72:91:53:
         59:d8:c9:61:30:ac:a8:cf:f5:0c:80:eb:97:41:ac:45:a0:c0:
         b2:bb:91:d8:c8:7a:bd:3e:fc:d3:96:b1:a9:26:27:d0:4c:bf:
         8a:77:de:f6:2c:68:5d:4b:f5:08:d0:b8:25:6a:af:e5:94:24:
         b8:db:99:14:d7:35:f1:85:dc:44:cf:7a:53:e7:80:b3:47:9b:
         b7:a0:6a:99:dc:84:21:9f:f9:48:e0:f1:8f:4a:30:14:f0:b5:
         43:0c:82:3f:df:c9:48:fd:c3:be:ba:98:6e:74:1b:4c:19:ba:
         e4:74:8f:8c:ac:6a:9c:83:03:42:13:0a:73:60:1d:1b:21:50:
         bc:ca:35:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 10:02:34 2026 by rpki-client