This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/jbPn_huaTii3UeZHQ_d9dvrziA4.roa
File:                     jbPn_huaTii3UeZHQ_d9dvrziA4.roa (raw, json)
Hash identifier:          WDTKgP7OatpD7hZS6aOF7SUbKrJNGnHp02sDeSf2/f4=
Subject key identifier:   8D:B3:E7:FE:1B:9A:4E:28:B7:51:E6:47:43:F7:7D:76:FA:F3:88:0E
Certificate issuer:       /CN=bbccba76b439fdadfd394d6f477ee681bc33832f
Certificate serial:       019C28D9D4653CC20B7358069FD8D024917E
Authority key identifier: BB:CC:BA:76:B4:39:FD:AD:FD:39:4D:6F:47:7E:E6:81:BC:33:83:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u8y6drQ5_a39OU1vR37mgbwzgy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/jbPn_huaTii3UeZHQ_d9dvrziA4.roa
Signing time:             Wed 04 Feb 2026 13:31:30 +0000
ROA not before:           Wed 04 Feb 2026 13:31:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207857
IP address blocks:        91.202.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u8y6drQ5_a39OU1vR37mgbwzgy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:28:d9:d4:65:3c:c2:0b:73:58:06:9f:d8:d0:24:91:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbccba76b439fdadfd394d6f477ee681bc33832f
        Validity
            Not Before: Feb  4 13:31:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8db3e7fe1b9a4e28b751e64743f77d76faf3880e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a7:23:c3:c6:60:82:6e:94:6e:d5:15:2e:32:
                    15:d9:6d:d5:4b:80:5c:16:cb:25:e4:8c:c4:31:6e:
                    f6:18:b4:d8:55:bd:83:50:ac:ac:35:4e:23:e8:c3:
                    c5:85:a7:35:44:4b:e7:f5:77:a5:8c:f5:19:51:7d:
                    c6:2b:2e:2a:e9:d7:3d:f5:82:dc:c6:45:ca:f6:33:
                    cb:56:28:a7:28:dd:aa:48:63:41:ae:a7:86:55:1d:
                    84:0f:53:d5:e8:6e:34:6d:39:2d:70:f6:84:e7:89:
                    27:eb:60:24:e9:8e:30:40:de:88:fb:a7:c8:e7:bf:
                    28:40:a2:32:69:e2:57:aa:1c:1b:9b:aa:8e:c9:fe:
                    81:db:09:31:dc:2b:59:d5:19:2d:89:62:39:be:66:
                    ac:06:44:f1:b5:fe:68:21:9f:28:9e:6c:16:6d:dc:
                    61:27:e9:cc:b9:c3:c7:66:fd:b3:ca:c7:0e:00:27:
                    c7:91:e3:d0:59:99:16:4c:2c:3b:1e:d4:5b:40:81:
                    e4:9d:98:cd:e1:e9:49:27:d7:92:8d:9d:38:25:db:
                    d6:11:92:02:d5:7d:52:a2:5f:95:01:52:67:ee:2d:
                    6b:4c:9e:9c:90:28:a8:9c:1e:73:fd:75:7a:65:04:
                    a9:32:2d:4f:f8:50:c6:3b:48:10:68:c0:79:65:59:
                    98:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B3:E7:FE:1B:9A:4E:28:B7:51:E6:47:43:F7:7D:76:FA:F3:88:0E
            X509v3 Authority Key Identifier:
                keyid:BB:CC:BA:76:B4:39:FD:AD:FD:39:4D:6F:47:7E:E6:81:BC:33:83:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8y6drQ5_a39OU1vR37mgbwzgy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/jbPn_huaTii3UeZHQ_d9dvrziA4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.202.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:9f:33:06:a6:85:98:5a:1b:0f:1f:c5:e8:df:36:31:4a:d0:
         7e:4c:b3:74:57:35:a8:0a:47:ad:1a:3e:b1:29:e7:d7:85:a3:
         fb:5d:b2:3d:68:19:dd:2a:fb:3e:28:50:ad:1c:60:d7:57:2f:
         d9:b2:d6:99:13:c5:c8:ca:fa:ce:ab:81:7d:70:d1:62:dc:83:
         a0:f6:5a:b6:a7:43:06:9b:1a:a3:84:2b:95:e3:b2:06:28:38:
         ed:ae:46:6d:cb:4e:75:73:5f:44:32:bb:e2:42:5a:2e:83:c9:
         62:c1:a9:f0:d0:ca:32:eb:c2:bc:b1:0a:de:1f:d3:72:0d:49:
         33:0f:14:12:09:c8:4d:48:da:5e:ce:97:01:d9:f7:cc:d0:ef:
         30:eb:d0:26:40:c3:61:67:64:2a:7d:34:dc:6c:36:b4:2f:d4:
         7b:bf:b8:d3:0c:57:1e:9f:4b:12:2c:ed:e7:82:0b:e2:f9:d0:
         23:02:a4:61:d1:d1:b5:64:f4:a8:cf:d1:e4:60:b1:bb:81:9f:
         30:f2:78:a0:7b:a0:75:fc:dc:38:58:3b:44:10:29:2f:cc:aa:
         b2:4a:7d:e2:a4:e0:96:3e:99:09:eb:dc:5b:99:0e:30:15:d9:
         f0:5f:50:0d:0e:b0:37:d5:63:bd:ed:2e:9c:d7:63:fc:bf:f6:
         94:14:ff:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:22:31 2026 by rpki-client