This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/JvmG4srCaSBVjS3b_UYP80FSxLE.roa
File:                     JvmG4srCaSBVjS3b_UYP80FSxLE.roa (raw, json)
Hash identifier:          ZJO6ofZaI2PWjKrC4pb6GFH0yDjMTMw7QA1MxHBtewo=
Subject key identifier:   26:F9:86:E2:CA:C2:69:20:55:8D:2D:DB:FD:46:0F:F3:41:52:C4:B1
Certificate issuer:       /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial:       019B7B358A9D86638CCBA67250F022CD4C52
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/JvmG4srCaSBVjS3b_UYP80FSxLE.roa
Signing time:             Thu 01 Jan 2026 20:17:45 +0000
ROA not before:           Thu 01 Jan 2026 20:17:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213404
IP address blocks:        2a14:67c1:a040::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:8a:9d:86:63:8c:cb:a6:72:50:f0:22:cd:4c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
        Validity
            Not Before: Jan  1 20:17:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=26f986e2cac26920558d2ddbfd460ff34152c4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6a:9e:7d:21:09:49:f9:4c:c4:8b:c7:34:27:
                    43:9b:5c:36:85:d8:dd:03:1c:11:96:a6:a0:33:a3:
                    43:a7:8a:36:ce:c7:d6:1a:a9:2d:07:c6:c1:3e:c0:
                    a1:aa:55:66:84:f0:d7:dd:9e:93:9d:8e:a1:fd:37:
                    83:b7:62:5c:62:fb:05:37:30:27:97:99:15:d5:15:
                    f0:80:89:1b:37:12:e3:77:4e:25:87:8c:9c:94:e3:
                    7f:00:72:bc:20:42:96:c6:ae:e8:49:f5:be:81:e0:
                    6c:de:6c:46:15:26:62:70:e2:54:d9:e9:23:d8:21:
                    15:79:16:42:3b:db:82:9c:79:74:94:31:cb:dd:f7:
                    ef:d7:cf:15:89:98:d2:32:9f:0a:5b:1a:be:0e:80:
                    72:35:ae:f7:18:10:3c:fd:2e:47:98:c6:9d:eb:9a:
                    7b:12:15:be:06:2b:17:83:d2:e6:df:6b:05:86:0c:
                    52:59:ba:ee:af:07:2d:61:0c:e5:07:bc:47:bb:63:
                    64:14:78:0e:8f:c9:8c:ae:82:61:fc:d8:0a:e2:b5:
                    8b:21:ff:6f:0d:05:c3:4a:71:6c:2b:19:7e:28:d7:
                    c7:9e:54:8a:c9:35:05:2b:f0:da:b9:c8:a1:8a:48:
                    fb:f0:a7:80:eb:0a:66:14:c4:9b:e1:29:32:99:c1:
                    d1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F9:86:E2:CA:C2:69:20:55:8D:2D:DB:FD:46:0F:F3:41:52:C4:B1
            X509v3 Authority Key Identifier:
                keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/JvmG4srCaSBVjS3b_UYP80FSxLE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:67c1:a040::/44

    Signature Algorithm: sha256WithRSAEncryption
         ab:59:6e:67:0b:d3:e0:14:7c:44:8c:7a:cd:c1:62:6e:6d:ee:
         08:af:e0:10:18:a2:c3:c3:50:b9:b5:94:fa:76:f6:29:34:c9:
         5e:b1:35:fc:bc:87:dc:8b:21:61:37:aa:ee:98:be:1c:c1:9f:
         04:ac:92:79:d1:f1:34:01:54:de:73:04:54:ff:fb:df:e5:09:
         5c:d7:1a:d1:bc:79:1e:0c:35:53:0c:b0:69:66:94:51:43:56:
         8c:83:c9:52:9d:ed:14:e0:54:df:04:5b:f6:f6:61:5a:0d:8b:
         ef:51:b3:ca:88:fb:7b:fa:e4:99:76:aa:0a:0f:2c:67:79:20:
         17:99:22:7a:a4:d9:44:e8:ba:08:04:82:f3:d3:b0:55:ac:47:
         e4:6c:0c:0e:67:fc:7a:4d:25:a4:a6:08:58:64:de:a0:ac:71:
         10:11:f0:a8:97:af:5b:38:e4:1a:21:a2:8a:bd:51:5e:7c:2c:
         58:fe:54:67:32:4b:35:cf:8b:fc:a2:16:0d:89:6d:7c:95:a2:
         58:f6:ce:bc:f7:92:df:5b:b5:8b:46:e2:41:ff:7b:5f:cf:53:
         29:0f:e1:a3:e5:9b:a2:4f:14:d6:0b:3c:26:c3:73:b9:77:f8:
         a1:53:86:3a:79:76:0e:93:95:0a:a0:51:56:f9:76:81:11:22:
         97:91:64:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:31:14 2026 by rpki-client