This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/jv_YABzSModWtlchMh_9InM60gw.roa
File:                     jv_YABzSModWtlchMh_9InM60gw.roa (raw, json)
Hash identifier:          4R+lUnXKrDrYcGJOHmhH6oyg2E2dK50I55PSI9u6SrE=
Subject key identifier:   8E:FF:D8:00:1C:D2:32:87:56:B6:57:21:32:1F:FD:22:73:3A:D2:0C
Certificate issuer:       /CN=d301991fc343f358c0f2eebae55cf2da34521c7a
Certificate serial:       019B7C12D7E4DB72A50DBF5403D001CF9E31
Authority key identifier: D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/jv_YABzSModWtlchMh_9InM60gw.roa
Signing time:             Fri 02 Jan 2026 00:19:28 +0000
ROA not before:           Fri 02 Jan 2026 00:19:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15703
IP address blocks:        2a00:a7c0:1026::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:d7:e4:db:72:a5:0d:bf:54:03:d0:01:cf:9e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d301991fc343f358c0f2eebae55cf2da34521c7a
        Validity
            Not Before: Jan  2 00:19:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8effd8001cd2328756b65721321ffd22733ad20c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b0:c1:0c:49:d7:71:92:a6:0d:6b:90:c9:1b:
                    a1:b9:e2:c7:c6:af:12:93:90:99:79:03:48:3f:ac:
                    a7:32:d8:b6:da:33:75:d0:27:60:5c:7b:3f:d0:91:
                    19:0d:c3:0b:ff:38:c3:29:fd:c3:b5:e3:71:38:6f:
                    63:d9:ca:3e:4e:3d:9e:4a:0e:58:eb:b2:06:85:66:
                    d8:d8:88:97:e1:9b:65:ab:7c:26:9c:3d:82:6c:cd:
                    89:b3:75:82:6d:82:80:c0:fc:6d:67:6b:d8:69:40:
                    f3:7b:6d:ee:49:4d:16:ef:69:58:b9:4d:e8:4d:77:
                    4c:15:d6:1c:ee:5a:dd:58:bc:2f:5b:16:c8:3f:18:
                    91:89:1b:67:bb:7a:7b:e5:52:17:7a:f4:74:69:bd:
                    2b:0a:f3:bb:69:9e:a2:a6:46:fe:bd:6e:27:b8:fa:
                    d8:fa:97:18:d8:88:5e:e6:21:8e:26:bc:bf:9e:97:
                    3a:59:44:76:e2:38:6c:a9:8a:52:82:f6:ae:80:a9:
                    75:de:f8:44:05:5a:7f:dc:ea:58:78:4a:ba:a5:0c:
                    94:aa:79:81:2b:1d:a7:2b:cc:72:48:ea:82:c3:82:
                    02:4e:fe:af:46:72:e2:00:8e:81:b1:41:fa:6b:6b:
                    95:3e:d2:24:28:6b:c5:ee:4d:c3:2c:f1:a0:b7:11:
                    85:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FF:D8:00:1C:D2:32:87:56:B6:57:21:32:1F:FD:22:73:3A:D2:0C
            X509v3 Authority Key Identifier:
                keyid:D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/jv_YABzSModWtlchMh_9InM60gw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:a7c0:1026::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:d4:b7:fa:a1:d2:84:a6:04:d8:b1:1f:52:c6:be:39:74:27:
         c3:72:00:44:68:f9:ce:81:e0:73:99:4b:ef:cd:75:a3:fe:3b:
         7a:4e:a9:ea:41:29:51:ca:9c:fa:a3:26:55:bf:ad:f5:0c:e6:
         35:ab:f4:72:7a:a1:a3:6e:5a:41:6a:cd:4d:18:71:80:21:3b:
         95:43:18:70:4f:5d:26:18:ed:9d:e5:49:40:0f:4f:87:64:ce:
         8e:f7:a6:83:07:ac:16:c6:5d:56:75:a4:f7:2a:52:c3:1a:f2:
         c0:ac:1d:32:84:f8:5f:30:f0:2e:4a:7a:17:16:1f:c0:a1:7b:
         bb:92:d4:44:fa:17:46:2c:bd:1f:42:9d:09:d8:16:39:ee:11:
         c1:7e:2d:ca:bd:ad:b2:d7:e1:7a:c6:2c:5d:c8:53:2a:9e:bf:
         c9:f7:17:02:41:25:81:9c:1b:8f:73:17:d7:45:f7:e1:e1:72:
         0b:53:dd:a3:22:d1:45:8a:3d:79:15:a5:53:3c:05:4a:48:af:
         82:a8:e8:24:05:a9:9a:21:e0:5a:be:c3:4b:dc:59:2f:8d:de:
         2d:14:33:1b:dc:23:a9:d2:06:94:8c:e6:04:bf:a9:b2:4c:19:
         6c:c3:c4:2c:94:7b:3a:0b:db:fe:b1:ad:e8:8f:70:db:74:42:
         71:a1:65:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:38:38 2026 by rpki-client