This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/JfyjjOVusOvMQb-_LBwPzPN1IYA.roa
File:                     JfyjjOVusOvMQb-_LBwPzPN1IYA.roa (raw, json)
Hash identifier:          M/e+6uFfmrkTdcER4exIQzvYV2TMLB+Olo4dayBwDK4=
Subject key identifier:   25:FC:A3:8C:E5:6E:B0:EB:CC:41:BF:BF:2C:1C:0F:CC:F3:75:21:80
Certificate issuer:       /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial:       019C1DFE4B4F33930649A3B033120EEEFA6C
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/JfyjjOVusOvMQb-_LBwPzPN1IYA.roa
Signing time:             Mon 02 Feb 2026 10:55:30 +0000
ROA not before:           Mon 02 Feb 2026 10:55:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211261
IP address blocks:        185.201.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:fe:4b:4f:33:93:06:49:a3:b0:33:12:0e:ee:fa:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
        Validity
            Not Before: Feb  2 10:55:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=25fca38ce56eb0ebcc41bfbf2c1c0fccf3752180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e0:14:b9:6f:e5:f7:ab:8e:8a:c7:e7:d7:1e:
                    0f:2b:51:67:4f:77:7b:4e:79:c0:40:32:91:20:ae:
                    5b:c9:9d:35:c9:5f:30:46:21:3e:1e:ee:fe:f8:93:
                    b2:8e:d6:0a:68:2e:29:fd:5f:21:af:6e:4b:e3:8b:
                    9e:e4:8a:54:74:33:73:0c:2e:56:f9:a3:93:9e:6a:
                    e3:31:04:f1:c6:4a:68:b5:30:ee:6c:af:af:3f:91:
                    d8:25:cf:af:74:41:7b:5a:de:1e:4c:ba:7a:92:ae:
                    6d:db:58:05:0d:91:66:78:08:af:9e:79:1e:68:a2:
                    6a:39:57:98:63:0a:68:b7:c2:25:6d:cf:a8:e6:13:
                    2b:6c:ba:68:5c:70:b0:d4:6b:c6:34:fb:0f:f7:56:
                    1c:f9:34:b5:88:12:2b:74:28:fe:5d:82:b4:96:4b:
                    d2:0e:3a:83:06:02:6b:4b:06:7e:b9:84:f0:78:cd:
                    4d:fb:0c:2b:6a:88:98:34:a1:fb:b1:0c:8c:3d:e2:
                    8e:f5:74:41:fb:a2:af:23:6b:5d:71:04:1d:4a:ae:
                    ad:20:3f:9e:48:1a:fc:e3:fc:ac:d5:18:8d:00:b7:
                    54:c8:04:7b:2b:64:e9:1c:2c:85:a9:c0:82:9a:c0:
                    0b:c3:cf:71:ea:15:0c:39:e6:38:3f:88:24:01:bb:
                    70:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FC:A3:8C:E5:6E:B0:EB:CC:41:BF:BF:2C:1C:0F:CC:F3:75:21:80
            X509v3 Authority Key Identifier:
                keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/JfyjjOVusOvMQb-_LBwPzPN1IYA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:9e:41:f0:67:c0:5f:3a:10:f4:31:c3:e0:c0:ed:5c:a6:d6:
         02:ad:35:9e:08:9d:de:94:94:2e:92:e4:42:0b:e1:5d:5f:7c:
         a9:c3:92:0c:fc:cd:2b:6c:f0:10:a1:21:4c:35:74:68:1f:db:
         83:2f:f2:b2:7b:71:07:a7:47:d4:0b:65:ec:f2:67:9a:26:01:
         3c:6e:10:37:87:a9:e3:0d:29:49:44:00:1e:a6:46:24:71:27:
         e4:5f:0d:29:b6:75:79:1d:d7:56:62:60:77:e3:a5:5b:03:66:
         0e:ca:23:62:9e:4f:ca:00:56:83:6b:75:32:87:f3:08:99:e0:
         1c:e0:cb:b0:66:4a:78:d8:bb:64:75:a8:03:64:39:c0:07:19:
         d4:90:09:79:52:35:a6:cf:dc:cf:14:49:2c:ab:81:b3:5a:78:
         67:97:98:ee:d3:a7:f0:3c:f1:f3:7b:29:06:cb:b9:c8:ef:51:
         53:3e:b8:41:1d:c0:70:06:80:98:7b:f6:77:fc:fa:82:0c:9d:
         4e:20:dc:46:3c:e0:5c:4a:48:ee:2a:4b:a9:b7:be:c0:7a:85:
         8c:e5:d6:30:28:7f:7e:2c:7a:45:d7:b0:f6:d4:6c:1d:a1:1b:
         ba:ef:f1:6b:97:8d:e1:c3:2c:b5:9c:4d:af:c4:1d:16:ff:0a:
         50:e2:a6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:17:10 2026 by rpki-client