This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/jG4WSmG-xXEWodjP13_7K7HSQG8.roa
File:                     jG4WSmG-xXEWodjP13_7K7HSQG8.roa (raw, json)
Hash identifier:          CsZTy+c92ZJOl54ewvYtYiNxeF6FGAF7oJqgyUzk8Uk=
Subject key identifier:   8C:6E:16:4A:61:BE:C5:71:16:A1:D8:CF:D7:7F:FB:2B:B1:D2:40:6F
Certificate issuer:       /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Certificate serial:       019B7834DD5E777B997A962817FC5BB9A701
Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/jG4WSmG-xXEWodjP13_7K7HSQG8.roa
Signing time:             Thu 01 Jan 2026 06:18:09 +0000
ROA not before:           Thu 01 Jan 2026 06:18:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48281
IP address blocks:        185.128.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:dd:5e:77:7b:99:7a:96:28:17:fc:5b:b9:a7:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
        Validity
            Not Before: Jan  1 06:18:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8c6e164a61bec57116a1d8cfd77ffb2bb1d2406f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:51:3a:f1:00:2d:bb:00:a7:78:4d:8f:32:
                    d3:f2:78:8c:96:5c:d3:07:cc:4e:0a:6d:2c:87:57:
                    bc:b5:01:ac:37:7d:32:7b:c7:88:31:20:c1:90:62:
                    20:48:8d:d6:b5:73:dd:0d:b0:bc:fa:96:2f:bd:2f:
                    1c:61:25:1f:2e:48:b5:58:fc:10:90:69:bb:7e:e9:
                    14:94:79:d3:fa:bd:b1:40:3e:58:b8:fa:56:d8:e6:
                    04:58:42:35:94:1b:0c:bb:54:0f:62:c4:d1:23:fa:
                    14:cf:f3:f2:0f:b5:14:d9:5b:a9:cc:7e:dd:9f:86:
                    23:a4:4e:2d:88:c5:a2:36:cd:46:59:ed:90:f8:91:
                    dc:38:2e:13:34:54:b9:4d:72:17:88:08:34:b3:c6:
                    cc:4e:32:0d:56:06:5a:00:7e:a6:36:e6:15:3e:78:
                    ae:f8:76:fe:d6:2e:60:b2:8c:26:b7:a9:8f:39:e2:
                    bb:d2:56:be:b9:fc:14:fe:63:1c:26:a6:fb:62:cd:
                    8b:92:a3:66:35:33:a0:2a:dd:93:ce:07:87:a5:f0:
                    99:42:b7:1d:e4:66:10:13:8b:32:ac:62:1c:6f:7f:
                    18:01:34:9a:e4:6b:35:db:98:25:ce:16:95:11:24:
                    bb:26:7b:81:10:6e:c6:2d:c2:09:92:02:ac:82:82:
                    be:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6E:16:4A:61:BE:C5:71:16:A1:D8:CF:D7:7F:FB:2B:B1:D2:40:6F
            X509v3 Authority Key Identifier:
                keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/jG4WSmG-xXEWodjP13_7K7HSQG8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.128.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:98:61:9a:79:fc:d7:66:90:f2:1c:02:3a:f1:66:63:42:e0:
         b7:b1:a4:86:f2:08:f2:50:8b:cc:fd:5e:c1:9c:2c:07:4a:05:
         34:38:87:61:5b:86:a4:82:b8:9d:86:3e:31:d5:e7:18:0a:cd:
         e3:a7:2c:26:0b:63:5d:4b:07:73:1a:81:98:96:0f:33:6b:c6:
         48:87:6e:fc:38:60:ae:13:95:25:fa:53:7f:b5:c7:c3:2b:6c:
         b5:f9:99:50:c4:00:dd:4c:6a:95:5c:72:28:86:31:25:5f:2a:
         7f:2d:28:09:59:8a:5f:a9:aa:67:bd:85:b4:81:50:8f:23:fa:
         64:c7:ed:7e:02:1b:fb:a4:14:cb:f5:76:88:45:5c:69:67:45:
         1d:09:7e:d9:0e:dc:8d:fd:7f:7a:ec:75:eb:02:17:36:23:0f:
         1d:60:33:fc:55:c4:90:2c:3a:0c:35:c9:ce:be:2d:59:66:8b:
         f1:90:51:03:97:a1:2b:e4:4d:5e:f4:34:8d:1c:68:da:4b:1f:
         2d:db:40:fe:3a:61:b0:98:e8:2a:96:47:00:24:cc:e8:7f:89:
         ca:5c:dd:42:3c:d6:85:d3:0c:0e:a8:b6:3a:84:cf:8a:6c:1a:
         99:ec:c6:c0:f5:cd:c1:ee:19:e6:93:a7:4d:e6:45:26:93:c9:
         dd:fd:12:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NN1ed3uZepYoF/xbuacBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNGYxZTZiMDExZjRkNjMzMWExMjc5NTVhNTQ4ZmE1MDUy
NTgwYTUwHhcNMjYwMTAxMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzZlMTY0YTYxYmVjNTcxMTZhMWQ4Y2ZkNzdmZmIyYmIxZDI0MDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbNROvEALbsAp3hNjzLT8niMllzT
B8xOCm0sh1e8tQGsN30ye8eIMSDBkGIgSI3WtXPdDbC8+pYvvS8cYSUfLki1WPwQ
kGm7fukUlHnT+r2xQD5YuPpW2OYEWEI1lBsMu1QPYsTRI/oUz/PyD7UU2VupzH7d
n4YjpE4tiMWiNs1GWe2Q+JHcOC4TNFS5TXIXiAg0s8bMTjINVgZaAH6mNuYVPniu
+Hb+1i5gsowmt6mPOeK70la+ufwU/mMcJqb7Ys2LkqNmNTOgKt2TzgeHpfCZQrcd
5GYQE4syrGIcb38YATSa5Gs125glzhaVESS7JnuBEG7GLcIJkgKsgoK+OQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIxuFkphvsVxFqHYz9d/+yux0kBvMB8GA1UdIwQY
MBaAFLxPHmsBH01jMaEnlVpUj6UFJYClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkU4ZWF3RWZUV014b1NlVldsU1BwUVVsZ0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82NmEyMzctOWJjNS00YWJkLTliOGIt
YzU1NDc2NzU5ZDBjLzEvakc0V1NtRy14WEVXb2RqUDEzXzdLN0hTUUc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi82NmEyMzctOWJjNS00YWJkLTliOGItYzU1NDc2NzU5ZDBj
LzEvdkU4ZWF3RWZUV014b1NlVldsU1BwUVVsZ0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYCaMA0G
CSqGSIb3DQEBCwUAA4IBAQCkmGGaefzXZpDyHAI68WZjQuC3saSG8gjyUIvM/V7B
nCwHSgU0OIdhW4akgridhj4x1ecYCs3jpywmC2NdSwdzGoGYlg8za8ZIh278OGCu
E5Ul+lN/tcfDK2y1+ZlQxADdTGqVXHIohjElXyp/LSgJWYpfqapnvYW0gVCPI/pk
x+1+Ahv7pBTL9XaIRVxpZ0UdCX7ZDtyN/X967HXrAhc2Iw8dYDP8VcSQLDoMNcnO
vi1ZZovxkFEDl6Er5E1e9DSNHGjaSx8t20D+OmGwmOgqlkcAJMzof4nKXN1CPNaF
0wwOqLY6hM+KbBqZ7MbA9c3B7hnmk6dN5kUmk8nd/RIo
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:48:55 2026 by rpki-client