This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa
File:                     e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (raw, json)
Hash identifier:          V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=
Subject key identifier:   7B:90:A0:44:D5:FC:0C:EE:99:4A:A4:3D:30:91:FB:D4:51:3B:FE:37
Certificate issuer:       /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial:       019B7D5B7302408049F5DBBCFC1E26670F7D
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa
Signing time:             Fri 02 Jan 2026 06:18:23 +0000
ROA not before:           Fri 02 Jan 2026 06:18:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216332
IP address blocks:        94.142.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:73:02:40:80:49:f5:db:bc:fc:1e:26:67:0f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
        Validity
            Not Before: Jan  2 06:18:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7b90a044d5fc0cee994aa43d3091fbd4513bfe37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5a:cd:94:74:36:87:6a:7a:e4:2b:b1:f3:83:
                    73:58:7c:84:d2:27:91:c1:c7:bf:94:b4:cf:7e:4a:
                    a4:54:e9:78:e1:11:26:ff:db:ba:d6:c0:08:15:20:
                    43:f1:32:9d:12:6f:c0:69:d7:fa:d5:e7:8e:7b:48:
                    23:84:c1:2d:6c:5f:af:f1:01:4f:a1:c5:57:05:aa:
                    96:88:ff:3a:75:a0:0f:2a:fe:f6:ad:28:53:24:39:
                    95:0c:b4:88:ba:c4:dc:92:9a:98:44:c2:8e:8e:3d:
                    d9:ec:65:26:0b:aa:79:64:b6:7c:58:67:e9:9b:37:
                    e5:81:47:40:33:46:6c:f4:1e:fe:9f:88:63:a9:1b:
                    51:05:ba:06:99:60:69:4a:4f:20:3e:98:be:02:78:
                    d0:ba:1b:2f:3b:97:dc:9d:21:26:09:01:1b:ce:13:
                    0d:b9:a0:95:8a:76:70:14:f0:6b:08:0d:4e:ab:12:
                    b1:f6:c4:b3:d0:14:b1:9d:6f:70:b6:26:bb:8a:d0:
                    90:74:fa:f0:bf:8f:b7:5f:ae:2c:87:d7:fc:b7:13:
                    f7:19:c3:32:02:e4:cd:e2:de:5c:0b:dd:23:70:c7:
                    16:4b:b9:2b:b3:ce:aa:1c:0e:b5:38:d2:ef:66:1c:
                    43:ff:06:45:24:fb:c8:55:75:fd:cd:4d:65:3b:8b:
                    40:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:90:A0:44:D5:FC:0C:EE:99:4A:A4:3D:30:91:FB:D4:51:3B:FE:37
            X509v3 Authority Key Identifier:
                keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.142.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:1b:1a:b7:f5:44:e1:31:fd:3a:25:52:38:7d:00:12:20:32:
         7c:d7:94:d3:87:d0:ff:09:b2:cd:17:ae:1c:0a:58:16:4c:c9:
         6e:90:3a:1c:e6:d1:59:73:c0:26:48:35:8e:f0:9d:1b:68:a0:
         6b:02:21:80:7a:a1:79:b8:8b:d2:17:19:b7:fb:83:d9:f4:bb:
         1c:46:be:af:dd:ed:f9:f8:e8:25:d0:32:da:4f:fc:66:f4:d8:
         4b:62:82:25:4f:84:ab:10:5b:94:ff:cb:79:1e:03:84:cc:e8:
         26:a3:27:f5:f3:0d:06:a5:5a:cb:a5:e6:2c:b6:cf:22:e3:7b:
         67:b3:26:33:1d:96:4a:52:2a:45:d5:93:33:92:87:a1:6f:ce:
         b4:3d:65:20:94:ee:ba:6a:65:ed:0a:74:ba:91:79:6c:da:32:
         3c:b0:a7:98:2d:95:b9:65:3f:c6:99:8e:5c:47:87:1e:07:21:
         62:0a:b2:eb:f2:2a:03:10:9c:5a:f3:fd:8b:f0:ef:8e:31:4b:
         54:f9:f5:6f:23:69:06:76:df:b4:d2:5d:47:fe:95:60:09:d3:
         8d:22:71:a5:dc:01:76:6b:55:2c:bd:97:6f:e9:f5:67:18:c7:
         c8:30:15:d4:55:85:6f:a7:89:63:e5:e9:20:92:fa:44:d2:12:
         fc:c6:13:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:50:08 2026 by rpki-client