This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/j-xoCug8oSXkLy-zRPrQvCr6fM0.roa
File:                     j-xoCug8oSXkLy-zRPrQvCr6fM0.roa (raw, json)
Hash identifier:          Ey2qMtymo6/7vUVDP3c3+HbS2Exk1vQ0aziEB5/WRwc=
Subject key identifier:   8F:EC:68:0A:E8:3C:A1:25:E4:2F:2F:B3:44:FA:D0:BC:2A:FA:7C:CD
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       019B79ED18F1966CACBF5658D18050F71E31
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/j-xoCug8oSXkLy-zRPrQvCr6fM0.roa
Signing time:             Thu 01 Jan 2026 14:18:59 +0000
ROA not before:           Thu 01 Jan 2026 14:18:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49926
IP address blocks:        195.187.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:18:f1:96:6c:ac:bf:56:58:d1:80:50:f7:1e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 14:18:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8fec680ae83ca125e42f2fb344fad0bc2afa7ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3f:d3:a8:10:f6:c9:d8:49:1e:9e:31:7b:b6:
                    10:fd:e1:59:bb:1a:c7:66:38:8d:38:d4:cc:db:20:
                    51:74:c5:65:a5:a8:29:45:f4:ae:aa:3c:59:db:bf:
                    18:ce:8f:4b:01:4c:d7:eb:32:86:e9:f4:51:9e:3d:
                    13:c1:6c:15:27:47:64:fe:0c:2f:ee:86:13:b8:a1:
                    6f:5d:54:f9:3c:fc:86:1b:96:9f:39:ef:09:50:47:
                    7f:c3:9e:f8:ea:9f:e3:5a:51:6e:04:f6:b0:3e:93:
                    48:10:ab:fd:12:64:d4:c2:34:7d:82:47:ff:6a:f2:
                    81:ef:7d:8d:48:7f:86:93:e2:9e:77:72:ad:e1:d9:
                    cc:f7:cf:cb:7e:11:3b:60:25:0d:06:0d:13:c0:68:
                    94:05:89:20:52:b3:85:34:53:c6:83:d6:04:16:f4:
                    ad:8a:ec:15:40:d7:b9:1b:64:8e:f9:67:2a:e9:b1:
                    2f:0e:56:49:23:3e:8c:42:09:f3:fb:62:17:d7:b1:
                    f9:17:ea:86:d9:91:2f:7a:c4:2f:8e:bf:7b:13:e2:
                    a3:a6:4a:cc:21:61:dd:a4:f5:71:13:d5:c2:3f:2c:
                    d8:65:b7:80:9a:fd:a1:1c:c1:d3:02:53:fa:b9:23:
                    55:95:76:39:4e:9e:a0:87:bd:6e:4b:bd:25:15:b9:
                    22:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EC:68:0A:E8:3C:A1:25:E4:2F:2F:B3:44:FA:D0:BC:2A:FA:7C:CD
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/j-xoCug8oSXkLy-zRPrQvCr6fM0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.187.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:42:af:ce:68:f0:26:58:08:ed:a3:b7:e6:28:5d:52:6e:44:
         2d:60:0b:09:b7:2e:66:6e:90:ee:ba:92:e9:e5:5f:b3:79:20:
         bf:09:19:9c:e6:3a:e1:4f:81:bb:2f:dd:94:5d:66:c4:e7:bd:
         20:df:8a:75:48:cd:f4:ef:af:f0:64:4b:ca:9e:dd:05:ac:25:
         89:b4:98:02:3b:31:f0:38:e7:15:1e:12:76:07:ed:b1:fb:07:
         a5:05:af:39:48:fb:79:39:6d:71:ba:f6:42:a5:db:08:a3:c8:
         1b:d2:a3:72:11:4f:0d:ac:8f:0a:ea:27:ba:a5:5a:32:af:55:
         eb:c8:b7:13:d2:d1:62:62:ef:50:52:35:ac:34:36:a0:02:7f:
         4c:39:22:1f:bf:17:44:e2:f4:ce:01:9a:e3:25:a5:8b:3f:fa:
         04:89:f5:5f:93:b3:77:94:53:f6:51:5e:94:ff:db:d3:a0:35:
         ae:14:ed:8a:04:01:84:30:12:9e:38:2a:4e:5e:a9:64:5d:ea:
         de:a0:64:2c:b2:dd:b1:c0:30:79:78:58:55:48:de:8a:56:fa:
         a1:2c:6c:54:af:03:b4:07:29:88:bc:1c:4b:14:e1:c2:55:dc:
         98:12:3a:60:e5:ea:7d:3f:25:d6:66:06:cd:cd:10:ca:26:d0:
         69:63:84:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt57Rjxlmysv1ZY0YBQ9x4xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw
MTE4OGYwHhcNMjYwMTAxMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmVjNjgwYWU4M2NhMTI1ZTQyZjJmYjM0NGZhZDBiYzJhZmE3Y2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz/TqBD2ydhJHp4xe7YQ/eFZuxrH
ZjiNONTM2yBRdMVlpagpRfSuqjxZ278Yzo9LAUzX6zKG6fRRnj0TwWwVJ0dk/gwv
7oYTuKFvXVT5PPyGG5afOe8JUEd/w5746p/jWlFuBPawPpNIEKv9EmTUwjR9gkf/
avKB732NSH+Gk+Ked3Kt4dnM98/LfhE7YCUNBg0TwGiUBYkgUrOFNFPGg9YEFvSt
iuwVQNe5G2SO+Wcq6bEvDlZJIz6MQgnz+2IX17H5F+qG2ZEvesQvjr97E+KjpkrM
IWHdpPVxE9XCPyzYZbeAmv2hHMHTAlP6uSNVlXY5Tp6gh71uS70lFbkiIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI/saAroPKEl5C8vs0T60Lwq+nzNMB8GA1UdIwQY
MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt
YzA2NzFiZjRjZjNlLzEvai14b0N1ZzhvU1hrTHktelJQclF2Q3I2Zk0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl
LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7snMA0G
CSqGSIb3DQEBCwUAA4IBAQAiQq/OaPAmWAjto7fmKF1SbkQtYAsJty5mbpDuupLp
5V+zeSC/CRmc5jrhT4G7L92UXWbE570g34p1SM3076/wZEvKnt0FrCWJtJgCOzHw
OOcVHhJ2B+2x+welBa85SPt5OW1xuvZCpdsIo8gb0qNyEU8NrI8K6ie6pVoyr1Xr
yLcT0tFiYu9QUjWsNDagAn9MOSIfvxdE4vTOAZrjJaWLP/oEifVfk7N3lFP2UV6U
/9vToDWuFO2KBAGEMBKeOCpOXqlkXereoGQsst2xwDB5eFhVSN6KVvqhLGxUrwO0
BymIvBxLFOHCVdyYEjpg5ep9PyXWZgbNzRDKJtBpY4QU
-----END CERTIFICATE-----
Generated at Mon Jan 26 08:38:38 2026 by rpki-client