This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/J5Qtt873sF3C37LKAWbfzw4yFDc.roa
File:                     J5Qtt873sF3C37LKAWbfzw4yFDc.roa (raw, json)
Hash identifier:          JFU1LgYxS8jjniEo7tgFwuxgms5qkAm/du3uO0+Rez0=
Subject key identifier:   27:94:2D:B7:CE:F7:B0:5D:C2:DF:B2:CA:01:66:DF:CF:0E:32:14:37
Certificate issuer:       /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial:       019B7BA3611A6465D4D70A35CF892EA88E40
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/J5Qtt873sF3C37LKAWbfzw4yFDc.roa
Signing time:             Thu 01 Jan 2026 22:17:43 +0000
ROA not before:           Thu 01 Jan 2026 22:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60781
IP address blocks:        185.102.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:61:1a:64:65:d4:d7:0a:35:cf:89:2e:a8:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
        Validity
            Not Before: Jan  1 22:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=27942db7cef7b05dc2dfb2ca0166dfcf0e321437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a1:dc:3e:71:79:5f:35:f5:37:94:cb:97:7f:
                    d4:a3:cb:18:16:c0:ce:ff:84:01:88:3f:27:68:47:
                    15:e1:e4:60:ce:ec:86:06:a0:e4:55:13:8d:d0:a6:
                    04:cc:6f:92:08:fe:83:13:6d:1a:aa:6f:c3:57:cf:
                    7a:3a:76:8e:e2:65:cc:31:98:7f:59:fc:1c:dd:61:
                    02:0d:0e:af:84:e0:3c:35:a7:f0:6b:31:51:98:4a:
                    18:ef:db:e6:dd:6f:1b:30:03:80:b8:42:38:b7:90:
                    74:ee:51:f8:c0:b0:97:a6:c6:54:93:e8:b7:ae:d6:
                    ea:d2:bc:a7:c4:31:c7:77:35:7a:d2:1c:cf:8d:d3:
                    14:c7:7e:f1:ef:70:39:54:76:7a:14:30:b9:62:69:
                    9c:55:a1:43:72:7a:4e:08:4a:cb:3c:2e:d8:0f:37:
                    d6:c6:0b:fe:b3:58:e3:3b:ae:3e:78:56:b0:c1:18:
                    b6:68:54:ae:57:0e:d3:10:09:12:23:7a:e5:ae:c3:
                    e8:54:18:51:97:eb:12:c8:b6:55:d3:89:7b:f8:c0:
                    65:d3:2c:51:da:9e:65:87:a8:16:9d:04:01:89:58:
                    d0:cd:ed:fc:23:87:ba:6e:db:a9:7a:16:48:02:21:
                    a7:8a:16:ab:50:0e:c3:1b:e5:bd:60:b5:01:57:9e:
                    f3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:94:2D:B7:CE:F7:B0:5D:C2:DF:B2:CA:01:66:DF:CF:0E:32:14:37
            X509v3 Authority Key Identifier:
                keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/J5Qtt873sF3C37LKAWbfzw4yFDc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.102.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:87:52:1e:8a:04:23:d3:e7:62:e8:f1:e6:7d:22:94:95:de:
         47:ed:96:15:c2:37:e4:5a:e7:89:0c:2f:dd:75:02:1e:15:a1:
         9b:75:a3:65:0c:24:5c:58:69:42:4b:a4:f1:36:b1:54:37:cd:
         da:03:17:6c:17:cc:00:f5:40:47:59:06:cb:51:ad:14:af:25:
         0e:29:a4:d4:a7:39:01:89:b3:85:63:80:64:90:4f:cb:28:64:
         e9:ee:b1:58:05:75:f3:da:62:ba:4a:9c:ed:cd:36:b2:3f:b3:
         32:e5:db:a0:be:3d:fc:16:af:7e:96:e0:38:fe:28:41:5d:d5:
         44:37:51:6f:4f:3e:4d:ad:11:11:bd:89:13:93:43:c7:50:15:
         0b:b9:e6:d5:45:56:58:c9:39:ae:ac:d6:6f:d3:eb:f1:d9:7a:
         52:92:8e:74:8c:96:5d:7d:82:a9:4d:75:a3:c4:2b:1e:1f:3f:
         89:88:a2:65:a7:17:8b:91:a0:9b:0e:6e:b6:18:4b:77:16:f2:
         cf:ff:45:50:48:43:3f:71:41:de:1b:5c:aa:09:a8:96:86:11:
         a7:48:8e:e1:fc:30:bb:7d:7c:d9:f4:e4:e5:59:6b:d4:9f:dc:
         ea:2d:98:ba:ab:9b:a0:03:0d:f7:00:f1:e2:63:b9:f8:cf:4c:
         b6:71:9a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:51:35 2026 by rpki-client