This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/jB3wCiu-AvDKO3DTXUCgLV9LXBA.roa
File:                     jB3wCiu-AvDKO3DTXUCgLV9LXBA.roa (raw, json)
Hash identifier:          1qE+PeKCdqwLTMKhlG/DvcYz45q96dHEsGiuDU6+/bM=
Subject key identifier:   8C:1D:F0:0A:2B:BE:02:F0:CA:3B:70:D3:5D:40:A0:2D:5F:4B:5C:10
Certificate issuer:       /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial:       019B7C124AF27F90091C05F2BC3676E79F5A
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/jB3wCiu-AvDKO3DTXUCgLV9LXBA.roa
Signing time:             Fri 02 Jan 2026 00:18:52 +0000
ROA not before:           Fri 02 Jan 2026 00:18:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212865
IP address blocks:        185.82.103.0/24 maxlen: 24
                          2a05:8f00:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:4a:f2:7f:90:09:1c:05:f2:bc:36:76:e7:9f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
        Validity
            Not Before: Jan  2 00:18:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8c1df00a2bbe02f0ca3b70d35d40a02d5f4b5c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2c:35:0c:1c:44:d4:f6:58:46:9a:f0:7e:83:
                    76:ee:4a:f5:11:70:29:fa:65:ea:d0:fd:5e:c4:e8:
                    b5:03:3e:c5:96:08:93:67:ee:e3:9f:b7:18:03:64:
                    83:b9:fe:4a:29:1f:25:a9:1d:97:2b:10:7a:92:27:
                    c8:ca:4f:79:9d:15:45:a4:20:43:f1:55:9f:59:a0:
                    4d:e2:40:97:11:7e:96:d0:d9:a8:49:1b:02:05:e4:
                    f0:ba:61:3e:b5:9a:2b:61:b2:60:73:6e:f1:3c:0b:
                    88:35:a6:6f:ee:7d:3a:66:d9:bf:5f:70:fa:ca:5f:
                    95:23:6b:a6:1b:27:d3:51:71:27:99:01:55:38:e3:
                    74:39:9a:db:78:cb:1e:40:8e:da:78:6c:cf:ff:6b:
                    ca:fe:dc:dc:d8:d0:72:02:08:8c:9c:c3:c7:f8:c1:
                    3e:53:f5:d3:c1:e9:1c:c1:c7:7b:d0:6a:3c:de:2a:
                    d0:e9:a1:7f:30:8a:7f:20:62:b9:e3:8d:b5:30:02:
                    35:30:1b:ee:c8:c0:a0:50:cf:c2:87:8d:1a:96:bb:
                    a3:e7:41:a3:97:9c:38:85:e6:9d:b4:04:4c:41:8a:
                    af:20:3f:ae:a7:ca:dd:cb:f4:0b:55:bb:25:2a:b5:
                    4f:4c:76:a3:2f:c7:12:35:b4:41:67:a3:1b:88:c1:
                    c2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1D:F0:0A:2B:BE:02:F0:CA:3B:70:D3:5D:40:A0:2D:5F:4B:5C:10
            X509v3 Authority Key Identifier:
                keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/jB3wCiu-AvDKO3DTXUCgLV9LXBA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.103.0/24
                IPv6:
                  2a05:8f00:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:db:e4:13:8b:30:a4:cc:54:54:6d:ee:72:c0:59:8c:bb:32:
         d6:b8:b6:02:d1:59:ae:12:d8:9c:a7:5f:35:28:81:6c:17:02:
         73:df:08:ae:f9:ed:20:a5:e5:19:4e:6c:48:0b:2b:bb:02:d1:
         59:c3:26:f8:f7:29:01:70:40:bb:e7:ff:ae:5f:4c:40:8f:34:
         6d:41:30:28:5d:ce:be:b3:af:42:5e:b5:80:7e:96:73:d5:ac:
         b5:b0:66:34:f4:7a:52:84:bd:a5:bb:1a:1c:38:05:7c:ac:7a:
         9c:f7:9c:94:1c:71:3e:6a:e3:0d:65:45:b3:58:4e:86:8f:85:
         76:0e:f1:36:1d:c8:9d:68:ea:08:f5:14:ef:32:e1:94:fb:4d:
         1f:f6:75:e1:d9:72:27:3e:6b:01:23:b3:6f:8c:bf:38:e3:e8:
         ae:b8:f2:42:a9:4f:25:2e:ea:4f:38:20:eb:23:e1:98:30:84:
         82:c9:11:cd:c5:f6:62:f5:fe:b4:c9:4e:1e:50:47:a5:8e:f1:
         fa:23:5a:7f:4e:25:19:7e:74:3d:c9:a7:a8:e2:4a:c8:4d:3a:
         ba:39:84:84:f2:ea:0a:22:4b:f2:de:a8:7a:b6:08:35:dd:ce:
         e7:3d:78:1c:ed:55:1b:75:8d:ee:10:c8:db:78:77:0b:08:fd:
         db:db:24:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:15:00 2026 by rpki-client