This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/njp42lmk79PcnKdSKL7dBNAF-pA.roa
File:                     njp42lmk79PcnKdSKL7dBNAF-pA.roa (raw, json)
Hash identifier:          fNgEvWqAsrEHm2QEX+Q7tOEmushfbaHX+HahMzZ89W4=
Subject key identifier:   9E:3A:78:DA:59:A4:EF:D3:DC:9C:A7:52:28:BE:DD:04:D0:05:FA:90
Certificate issuer:       /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial:       019BA829DC7994EB166273C17DBBF7ECC227
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/njp42lmk79PcnKdSKL7dBNAF-pA.roa
Signing time:             Sat 10 Jan 2026 13:47:54 +0000
ROA not before:           Sat 10 Jan 2026 13:47:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        185.27.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 01:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a8:29:dc:79:94:eb:16:62:73:c1:7d:bb:f7:ec:c2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
        Validity
            Not Before: Jan 10 13:47:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9e3a78da59a4efd3dc9ca75228bedd04d005fa90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:46:c0:62:6d:11:36:51:fb:b4:15:74:b4:58:
                    6f:c6:9b:0b:e9:7e:9c:11:e2:67:e0:f6:33:37:7e:
                    96:61:08:64:86:55:1d:ec:c9:8c:ec:d3:21:05:50:
                    98:8a:fb:70:5a:ed:8a:0a:7f:76:fc:52:44:91:d9:
                    e4:78:15:a3:6a:bb:fb:da:c5:2f:d1:b2:67:4b:0e:
                    26:c9:83:bc:52:30:84:c7:08:ac:5d:5b:41:98:34:
                    aa:22:db:3d:50:12:4d:87:39:aa:bb:ed:bc:d9:cd:
                    7d:e2:05:25:c1:04:e6:92:d3:73:1c:5c:78:ce:fe:
                    29:8a:fd:fc:a3:a4:f9:0d:44:0b:51:77:e5:93:01:
                    4c:60:de:c7:ad:92:e2:72:f2:e4:8a:a3:b7:e9:6f:
                    f3:ac:e1:db:50:4e:8a:69:03:76:f6:c4:cc:61:89:
                    7a:2c:a2:b2:62:eb:d9:7f:4b:f8:47:05:eb:d0:66:
                    25:28:e5:07:77:7f:a1:e9:ea:aa:99:86:15:4e:d3:
                    a1:29:8d:95:5d:56:e5:7f:e1:f6:2c:22:af:74:6b:
                    b1:cc:cc:c8:93:52:70:6a:a4:17:c1:6c:b6:04:59:
                    69:6b:48:1d:f5:0d:dc:77:26:e3:0e:5d:12:de:d5:
                    73:44:22:49:ac:17:43:c5:10:ed:01:b8:a5:dd:5f:
                    11:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3A:78:DA:59:A4:EF:D3:DC:9C:A7:52:28:BE:DD:04:D0:05:FA:90
            X509v3 Authority Key Identifier:
                keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/njp42lmk79PcnKdSKL7dBNAF-pA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.27.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:b3:de:f0:81:95:a4:92:80:fd:85:83:4f:a6:70:53:22:0e:
         a6:da:3e:de:dd:d5:4a:91:6f:bd:44:df:c7:b6:c4:21:d4:93:
         1b:67:6c:e0:c5:0a:0f:04:df:0a:07:d4:e5:98:07:dd:95:ca:
         5a:cc:79:e2:88:b7:a0:c4:4e:2d:7a:96:8b:9e:19:1a:a4:14:
         36:99:40:a1:d4:09:6a:a0:62:da:24:fd:bd:4f:28:e2:6c:6a:
         42:0b:21:6e:c6:4e:00:d9:7a:93:b0:5a:2b:e2:a5:5e:9b:f6:
         ce:11:50:ad:31:53:61:e6:7d:3d:8e:32:a5:ae:58:15:0d:5f:
         47:c6:a2:16:20:13:ac:9a:a9:9c:3e:47:01:16:4c:e4:70:5c:
         1e:bd:36:be:5f:f1:f2:ed:1e:51:be:43:3d:12:f6:9d:57:90:
         2b:02:ef:9b:d9:e4:44:09:95:64:27:b8:c7:e8:f2:f2:60:a9:
         f6:91:6a:f7:ed:f0:4c:71:ff:a5:d8:6b:35:6e:dc:bb:12:a4:
         a7:73:46:1f:12:03:93:85:3f:02:35:7e:b2:a1:32:2d:98:5e:
         76:d1:45:8b:fc:d0:e4:d5:47:eb:a7:72:69:4c:d3:36:9a:09:
         3d:2b:cc:08:02:a2:2c:da:0a:a6:0b:a0:0a:af:62:67:b1:e3:
         ce:f2:ac:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 10:03:01 2026 by rpki-client