This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/J_wTFK-Imelz3lo0EhalX7WkndE.roa
File:                     J_wTFK-Imelz3lo0EhalX7WkndE.roa (raw, json)
Hash identifier:          LyfXf848vt7E8bU3yBHMuVskZUEoXA7JJdYXHBAJ7MY=
Subject key identifier:   27:FC:13:14:AF:88:99:E9:73:DE:5A:34:12:16:A5:5F:B5:A4:9D:D1
Certificate issuer:       /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial:       019BE9EEF60201E47CDC6F93A9FC9AD9901A
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/J_wTFK-Imelz3lo0EhalX7WkndE.roa
Signing time:             Fri 23 Jan 2026 08:18:30 +0000
ROA not before:           Fri 23 Jan 2026 08:18:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6205
IP address blocks:        185.122.12.0/22 maxlen: 24
                          185.122.13.0/24 maxlen: 24
                          185.122.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e9:ee:f6:02:01:e4:7c:dc:6f:93:a9:fc:9a:d9:90:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
        Validity
            Not Before: Jan 23 08:18:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=27fc1314af8899e973de5a341216a55fb5a49dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0d:c0:3b:96:97:c3:5a:26:6e:64:dd:e4:b9:
                    5f:ef:e5:86:94:ec:6b:5e:16:b0:de:b9:2d:2a:db:
                    63:84:ab:41:7c:6e:af:45:b3:45:6f:a7:23:d3:22:
                    3f:3c:fb:0c:dd:0c:24:db:32:2f:e9:b3:42:af:9f:
                    e8:b8:a1:47:b7:0d:7a:7d:44:5c:66:87:19:52:c6:
                    e7:5e:6a:5a:89:11:1d:ad:4a:a6:ae:ac:ab:40:d6:
                    16:e5:07:5a:d0:98:d5:43:bb:3c:1e:b4:f7:55:c8:
                    0b:1d:ed:92:00:54:91:2e:19:32:79:c9:fd:46:87:
                    80:9f:cb:f6:04:f4:09:db:c1:e1:74:a1:53:00:0b:
                    6c:05:1a:b8:7e:a2:dd:d2:14:7b:82:ac:06:33:4c:
                    09:fd:c0:d1:1b:38:2f:e9:31:1f:77:a5:4d:46:2b:
                    97:80:7f:02:8e:94:11:ee:0e:20:56:0b:88:2f:9c:
                    c4:5e:ec:70:a5:f3:6b:16:1d:6f:af:be:6c:c3:64:
                    d8:11:1d:43:7b:27:42:af:3a:4d:93:af:29:31:dd:
                    d1:ad:4b:98:69:46:8e:d2:3c:b2:3b:e1:84:30:8c:
                    87:62:44:e5:31:83:c1:b3:86:da:37:ca:d9:78:9b:
                    2b:c4:d3:2c:be:88:2f:ba:a5:f3:19:bc:50:01:39:
                    c3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FC:13:14:AF:88:99:E9:73:DE:5A:34:12:16:A5:5F:B5:A4:9D:D1
            X509v3 Authority Key Identifier:
                keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/J_wTFK-Imelz3lo0EhalX7WkndE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.122.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:e7:f3:09:a6:11:b8:c5:7f:d8:da:1d:70:98:b0:fa:d3:33:
         d9:e0:2f:17:9f:fe:a9:36:31:86:39:4a:be:b0:66:a3:69:b3:
         71:5a:d0:22:52:20:96:48:cb:9d:07:13:14:8c:7f:27:1c:43:
         23:69:b6:3c:bd:d8:d8:40:7d:f7:81:43:9f:eb:f0:90:8f:8f:
         df:89:e8:4f:b6:33:29:c0:41:63:42:18:6f:bf:df:a8:7d:9a:
         3e:17:4d:30:43:55:1b:8a:f3:a4:5e:ed:d9:48:ee:a4:29:04:
         bf:b3:fa:4f:c8:df:28:17:7a:3b:45:ce:10:e3:59:78:d8:33:
         4e:55:2d:d1:42:7d:c9:a8:ac:f9:d2:1b:e0:2f:38:89:4d:3b:
         91:0b:a8:0a:de:3d:98:39:92:04:19:fd:ea:a6:ac:9d:f4:a6:
         1b:e2:90:2d:45:0b:d6:db:d2:87:a4:f6:32:67:01:1c:20:88:
         5b:c0:1f:8a:8f:54:79:77:73:ec:18:64:3e:53:c5:e2:1d:fe:
         c2:e2:80:57:64:d6:36:4c:74:ed:92:67:c5:6e:5e:85:22:77:
         f5:35:46:f2:bb:42:34:cf:16:79:45:0c:54:12:c5:10:cd:44:
         63:21:42:f5:66:0e:13:dc:03:4a:19:e8:9b:68:1a:d6:5b:11:
         ca:7c:71:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:57:50 2026 by rpki-client