This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/JBmh4xJQPOrgXhW8afp75WMHXtU.roa
File:                     JBmh4xJQPOrgXhW8afp75WMHXtU.roa (raw, json)
Hash identifier:          Eu21koGIAierUmhNQZ3QsI0F1soGks0wdE/brAHqtA4=
Subject key identifier:   24:19:A1:E3:12:50:3C:EA:E0:5E:15:BC:69:FA:7B:E5:63:07:5E:D5
Certificate issuer:       /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial:       019B7C115F0AAC7D3D1E21347CA2966CBC19
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/JBmh4xJQPOrgXhW8afp75WMHXtU.roa
Signing time:             Fri 02 Jan 2026 00:17:51 +0000
ROA not before:           Fri 02 Jan 2026 00:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212139
IP address blocks:        62.175.249.0/24 maxlen: 24
                          84.124.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:11:5f:0a:ac:7d:3d:1e:21:34:7c:a2:96:6c:bc:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
        Validity
            Not Before: Jan  2 00:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2419a1e312503ceae05e15bc69fa7be563075ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b8:ea:e2:5a:36:85:d9:da:33:05:7a:ef:bf:
                    12:4a:63:0a:78:ac:93:ee:89:6c:06:a4:26:ad:1b:
                    fe:55:f0:d6:de:b1:9f:29:94:12:bc:ac:e5:47:85:
                    10:7a:b3:e2:32:0b:cd:f2:9a:70:8b:e5:b5:2f:6a:
                    67:1d:df:9c:91:b5:62:19:cc:71:7e:fc:08:e1:a4:
                    d9:1c:31:86:d7:b8:46:80:0c:79:4f:78:97:e3:69:
                    55:52:02:a9:09:69:08:86:61:1a:0e:9c:3f:f6:c5:
                    e4:1c:9a:47:b0:b3:6f:9e:0d:86:6a:3b:4e:cd:ac:
                    16:a2:61:f5:07:58:36:3f:e6:88:05:70:38:23:d5:
                    2c:48:4d:7b:4b:aa:9b:a9:d8:4c:ee:cf:80:6b:18:
                    e4:ab:a6:c5:a2:65:4e:a6:8a:aa:c1:6e:57:0f:a7:
                    c1:9e:ce:e0:a3:7b:f7:f7:87:d2:75:80:a1:3a:37:
                    43:f2:b1:0e:d6:82:d5:87:f9:a7:cc:ee:b1:c4:c2:
                    45:37:55:3a:da:3a:08:de:ca:14:ba:72:4e:e8:03:
                    00:b7:97:37:a5:99:84:79:22:01:84:4a:2d:e8:57:
                    da:56:0b:f1:e8:53:1d:07:ef:15:e4:43:65:92:4a:
                    9f:72:22:d3:18:3b:d3:7f:01:17:fc:7d:1f:2d:60:
                    39:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:19:A1:E3:12:50:3C:EA:E0:5E:15:BC:69:FA:7B:E5:63:07:5E:D5
            X509v3 Authority Key Identifier:
                keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/JBmh4xJQPOrgXhW8afp75WMHXtU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.175.249.0/24
                  84.124.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:b9:21:94:a9:cf:4a:10:e5:93:ff:d9:ff:4d:78:55:6e:ed:
         ee:96:22:4d:ec:85:e5:97:e1:14:c2:03:e9:ef:19:36:cd:c1:
         9a:f9:a7:05:2c:f2:54:3a:a2:43:87:7f:49:9b:a7:11:16:b4:
         38:2f:22:b0:51:f6:56:fd:9b:84:1e:e1:97:66:61:4c:52:26:
         d4:f8:94:6e:64:94:dc:95:c3:55:61:0a:4d:0f:5a:99:36:4f:
         ad:fa:af:e4:66:cf:a1:f7:ff:27:b2:58:cb:55:cd:93:e1:6e:
         8d:4b:75:a2:07:92:65:31:c1:82:ce:30:d8:39:77:fd:e3:a4:
         e7:bb:23:7a:80:15:07:fe:44:0a:25:7e:9c:9c:10:cf:33:c2:
         9d:aa:7b:9c:53:e6:1a:1f:f3:d5:aa:5e:64:72:d8:98:91:63:
         93:bc:11:9b:4d:dc:10:7d:a7:bd:24:87:5b:a1:8f:d7:5f:ff:
         d8:45:63:ae:16:78:53:39:a5:7c:fd:4a:c0:1c:c0:4e:b1:f6:
         67:b4:50:0b:38:a4:40:ba:96:66:25:8f:aa:c0:8a:f5:b7:56:
         2d:54:50:94:50:75:33:ad:40:70:bc:9b:32:19:6d:0c:3a:be:
         33:e0:4f:28:ef:78:22:23:6a:55:94:90:26:52:df:2d:54:e0:
         cd:f5:75:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:41:38 2026 by rpki-client