This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/J_SSKQI5qG2_bl4y8fHsm2Pf63w.roa
File:                     J_SSKQI5qG2_bl4y8fHsm2Pf63w.roa (raw, json)
Hash identifier:          UOGT2RhBA6tPeTqerB1WZ2vEx6H2vpB+E5UHZrjFo1U=
Subject key identifier:   27:F4:92:29:02:39:A8:6D:BF:6E:5E:32:F1:F1:EC:9B:63:DF:EB:7C
Certificate issuer:       /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial:       019B8D9B8370683C1C4F5B5B9FC7D918D993
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/J_SSKQI5qG2_bl4y8fHsm2Pf63w.roa
Signing time:             Mon 05 Jan 2026 10:02:17 +0000
ROA not before:           Mon 05 Jan 2026 10:02:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57344
IP address blocks:        5.181.81.0/24 maxlen: 24
                          5.181.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:8d:9b:83:70:68:3c:1c:4f:5b:5b:9f:c7:d9:18:d9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
        Validity
            Not Before: Jan  5 10:02:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=27f492290239a86dbf6e5e32f1f1ec9b63dfeb7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a6:09:8d:c7:b3:73:2b:35:7d:57:03:f4:6d:
                    f2:28:78:6c:8e:07:13:08:dc:56:f2:eb:56:f8:e3:
                    e7:ac:b3:ea:f6:52:86:b6:9e:c1:48:c7:d0:8e:cb:
                    bd:23:d2:32:f6:98:e5:e2:37:7c:b4:9d:e0:10:92:
                    8f:56:1f:12:21:54:ad:e7:b2:7f:e5:cb:43:92:a8:
                    79:fe:28:ae:a2:b8:2e:c6:82:ae:4c:b5:ad:9f:0e:
                    ac:31:81:f7:11:a0:79:cb:a7:83:16:b5:97:aa:22:
                    de:17:7d:a1:8b:ac:eb:55:3e:29:1e:0a:4c:b2:86:
                    3d:bf:18:9a:08:e3:c2:23:b2:5b:e5:7f:99:2a:d4:
                    f0:82:d1:b4:68:e7:e0:9f:3f:3f:37:cc:45:db:22:
                    08:35:ff:2d:b5:91:ea:ac:c0:96:0f:94:c5:82:e0:
                    de:96:a1:78:ad:21:7f:23:0f:90:f8:d2:8f:33:7b:
                    56:70:50:92:06:1c:c0:f2:0d:e0:17:f8:b5:c2:3f:
                    e8:f8:1b:75:cb:d8:56:3d:3d:3a:00:0f:e7:17:a0:
                    19:40:ba:8b:c3:6c:c3:84:ca:2e:65:b0:d8:d4:1d:
                    68:04:0f:2d:38:f4:79:da:00:c5:fd:e2:13:f5:9a:
                    88:c4:93:0c:c3:0f:db:b3:dd:e5:4b:ae:80:dd:ec:
                    2a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F4:92:29:02:39:A8:6D:BF:6E:5E:32:F1:F1:EC:9B:63:DF:EB:7C
            X509v3 Authority Key Identifier:
                keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/J_SSKQI5qG2_bl4y8fHsm2Pf63w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.81.0-5.181.83.255

    Signature Algorithm: sha256WithRSAEncryption
         4e:b2:fa:66:0c:37:3d:8d:ab:6e:8e:f7:d9:1b:b0:5c:aa:7d:
         8b:47:fa:66:26:69:a2:92:ff:1f:31:4e:56:45:7c:07:c4:fc:
         bb:e1:9d:92:71:3f:f9:1d:d5:d4:74:8c:03:6f:f8:a9:dd:d3:
         a2:ab:fc:4c:32:f2:bd:c7:46:58:a1:23:c3:29:20:cd:ef:2e:
         c9:85:ec:b0:ac:4b:94:87:64:be:5f:d5:bd:5b:55:7a:dd:f7:
         1a:6f:ec:de:16:15:83:09:5a:99:68:28:f4:5e:19:91:06:ee:
         68:e0:77:47:dd:90:b6:e7:69:6f:77:4c:c2:f8:d6:d9:99:e6:
         52:2c:fc:fb:fb:aa:0c:0f:8f:ab:5c:89:63:e7:51:ae:a0:00:
         0f:89:ff:f4:83:2f:fa:1c:83:e3:27:f0:1a:a5:3b:5e:ad:1c:
         03:8a:7c:18:c4:ba:11:f6:b7:1d:8a:30:c3:f1:3d:44:27:47:
         c4:21:73:ae:f6:a9:f8:41:6b:5b:b7:e1:c8:f1:52:03:e1:ab:
         f9:76:d9:bf:aa:9f:53:72:00:24:6b:b9:a2:ec:68:29:4a:f1:
         0f:54:69:54:df:61:b7:d2:bd:94:45:d3:29:b8:79:18:af:4e:
         b5:73:50:06:2b:ba:f3:2f:4a:72:cb:de:a9:04:f0:03:cd:0a:
         eb:de:c9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:13:56 2026 by rpki-client