This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/NJ_SEgdzKatHssdwqLCFqMQ53hk.roa
File:                     NJ_SEgdzKatHssdwqLCFqMQ53hk.roa (raw, json)
Hash identifier:          3kVWZwNrHMIhSyUMZF0W0etnU/l0yGQ6Sa7sqGY4zU8=
Subject key identifier:   34:9F:D2:12:07:73:29:AB:47:B2:C7:70:A8:B0:85:A8:C4:39:DE:19
Certificate issuer:       /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial:       019B7E37EA010CA870BA3F4026CEF65C249D
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/NJ_SEgdzKatHssdwqLCFqMQ53hk.roa
Signing time:             Fri 02 Jan 2026 10:19:12 +0000
ROA not before:           Fri 02 Jan 2026 10:19:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47294
IP address blocks:        84.44.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:ea:01:0c:a8:70:ba:3f:40:26:ce:f6:5c:24:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
        Validity
            Not Before: Jan  2 10:19:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=349fd212077329ab47b2c770a8b085a8c439de19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ef:c4:f6:36:32:7a:71:7a:f4:81:b8:f7:41:
                    64:11:3b:56:81:b7:38:6a:14:a6:c3:db:ef:9b:5a:
                    27:26:9c:8c:77:a1:97:62:02:8c:29:78:b2:bb:c3:
                    7c:3b:97:7c:1f:b4:c9:ad:e5:21:92:55:b7:c1:a2:
                    85:05:a0:90:14:88:c3:b2:e7:10:3f:a9:81:56:ea:
                    23:2c:b7:69:c5:39:dc:dd:55:a1:ad:a8:37:3b:1b:
                    d6:2a:7c:7e:96:45:17:c2:a3:76:d6:82:41:73:89:
                    28:33:f5:68:3f:93:8e:d7:c0:3a:55:aa:18:0a:5b:
                    8a:28:51:04:52:09:6e:1b:62:37:39:98:a4:63:d5:
                    57:b7:65:b2:3a:4b:87:6e:66:ab:aa:26:ef:27:c7:
                    80:01:8c:ac:17:1d:bc:93:32:88:d1:d4:45:2a:77:
                    8b:03:0a:bf:17:44:80:18:e7:28:3e:97:99:0c:f7:
                    51:fe:e1:3c:bc:05:9f:d3:bf:f6:f4:17:98:cb:ad:
                    8c:52:ba:4c:20:11:38:24:3e:29:d6:e5:59:61:05:
                    48:05:a3:44:7f:6a:02:f6:27:4c:83:65:e9:eb:19:
                    6a:64:6c:7a:a8:62:28:37:a9:69:db:5b:76:2d:3c:
                    91:fe:4d:c5:96:44:91:60:e8:4c:3b:62:da:a1:44:
                    20:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9F:D2:12:07:73:29:AB:47:B2:C7:70:A8:B0:85:A8:C4:39:DE:19
            X509v3 Authority Key Identifier:
                keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/NJ_SEgdzKatHssdwqLCFqMQ53hk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.44.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:16:b7:0e:3c:f3:45:6a:6b:1c:9b:3f:68:d6:71:42:ac:15:
         85:d1:0f:fc:4a:7f:68:7e:15:37:d2:e0:f9:93:93:16:19:e9:
         7b:07:6c:43:bd:70:61:8a:bb:2f:ac:7b:92:39:e5:23:2e:d7:
         f1:32:f3:ab:e9:c7:f8:5a:74:92:50:0b:8b:6c:47:8a:42:76:
         5e:b4:f9:95:76:55:f9:e7:5f:23:92:43:6f:6f:e0:c5:33:c3:
         2c:02:3f:6b:00:01:7e:1f:01:40:40:be:8d:32:91:da:c6:f0:
         86:6d:6d:f2:60:5a:50:45:2a:4f:6e:f7:09:37:b6:0e:0b:55:
         cf:ea:d6:07:86:32:cb:47:1f:7e:1b:c6:10:b5:1a:ef:fe:c7:
         68:72:ff:83:b3:bb:ad:c9:08:20:a0:49:40:fd:8d:4d:33:a4:
         ac:e6:28:09:50:db:7b:9b:21:e5:cb:a7:dd:a8:34:12:a9:d3:
         67:84:fa:b3:9a:63:b4:e7:bf:c4:d1:61:90:88:8c:87:4b:b7:
         c8:19:2c:7b:b8:f9:ea:25:35:f9:86:ed:b9:ad:87:a7:da:26:
         60:07:a3:5a:eb:63:12:8a:1f:b5:f3:30:01:b7:e7:51:d7:75:
         74:a9:61:6a:83:5e:6b:97:f0:6f:a5:e7:de:6d:39:c9:d5:9d:
         74:90:d9:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+N+oBDKhwuj9AJs72XCSdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw
MWY0YzkwHhcNMjYwMTAyMTAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDlmZDIxMjA3NzMyOWFiNDdiMmM3NzBhOGIwODVhOGM0MzlkZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle/E9jYyenF69IG490FkETtWgbc4
ahSmw9vvm1onJpyMd6GXYgKMKXiyu8N8O5d8H7TJreUhklW3waKFBaCQFIjDsucQ
P6mBVuojLLdpxTnc3VWhrag3OxvWKnx+lkUXwqN21oJBc4koM/VoP5OO18A6VaoY
CluKKFEEUgluG2I3OZikY9VXt2WyOkuHbmarqibvJ8eAAYysFx28kzKI0dRFKneL
Awq/F0SAGOcoPpeZDPdR/uE8vAWf07/29BeYy62MUrpMIBE4JD4p1uVZYQVIBaNE
f2oC9idMg2Xp6xlqZGx6qGIoN6lp21t2LTyR/k3FlkSRYOhMO2LaoUQgaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDSf0hIHcymrR7LHcKiwhajEOd4ZMB8GA1UdIwQY
MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt
ODNkNjQ4Zjc5NzQ2LzEvTkpfU0VnZHpLYXRIc3Nkd3FMQ0ZxTVE1M2hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2
LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCwpMA0G
CSqGSIb3DQEBCwUAA4IBAQBDFrcOPPNFamscmz9o1nFCrBWF0Q/8Sn9ofhU30uD5
k5MWGel7B2xDvXBhirsvrHuSOeUjLtfxMvOr6cf4WnSSUAuLbEeKQnZetPmVdlX5
518jkkNvb+DFM8MsAj9rAAF+HwFAQL6NMpHaxvCGbW3yYFpQRSpPbvcJN7YOC1XP
6tYHhjLLRx9+G8YQtRrv/sdocv+Ds7utyQggoElA/Y1NM6Ss5igJUNt7myHly6fd
qDQSqdNnhPqzmmO057/E0WGQiIyHS7fIGSx7uPnqJTX5hu25rYen2iZgB6Na62MS
ih+18zABt+dR13V0qWFqg15rl/BvpefebTnJ1Z10kNkc
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:15:59 2026 by rpki-client