This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/JOGLGMeeIhLZyrqKrSQvitYx3gE.roa
File:                     JOGLGMeeIhLZyrqKrSQvitYx3gE.roa (raw, json)
Hash identifier:          rIepwbyFrt40XcXdnXtrMH+SOHeI5RBBG2uhOtl2jXU=
Subject key identifier:   24:E1:8B:18:C7:9E:22:12:D9:CA:BA:8A:AD:24:2F:8A:D6:31:DE:01
Certificate issuer:       /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial:       019B76EAE69B1C602A9949CA40BFD701201E
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/JOGLGMeeIhLZyrqKrSQvitYx3gE.roa
Signing time:             Thu 01 Jan 2026 00:17:44 +0000
ROA not before:           Thu 01 Jan 2026 00:17:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8491
IP address blocks:        81.95.32.0/20 maxlen: 24
                          81.95.42.0/24 maxlen: 24
                          81.95.46.0/24 maxlen: 24
                          82.194.224.0/19 maxlen: 24
                          82.194.232.0/24 maxlen: 24
                          82.194.237.0/24 maxlen: 24
                          87.238.96.0/21 maxlen: 21
                          87.238.101.0/24 maxlen: 24
                          89.188.160.0/19 maxlen: 19
                          2a03:8640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:e6:9b:1c:60:2a:99:49:ca:40:bf:d7:01:20:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
        Validity
            Not Before: Jan  1 00:17:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=24e18b18c79e2212d9caba8aad242f8ad631de01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:03:c7:f3:28:00:c9:6d:29:b0:1f:f9:b9:5c:
                    3b:72:c9:7d:36:85:95:b3:a5:0e:9b:a2:04:e1:b6:
                    dd:98:5e:46:dd:69:3c:1d:c3:7d:94:80:6f:0b:38:
                    cd:61:29:2e:94:1e:e2:5f:43:46:0e:91:e0:ff:26:
                    10:bb:2c:50:9a:1e:91:65:f2:ce:99:d3:ee:7e:95:
                    04:e1:94:fb:74:cd:45:88:77:0e:93:6d:a9:8c:08:
                    6f:f7:d1:b3:ea:b7:69:27:b8:5a:56:d7:b6:a5:39:
                    a0:35:67:63:0d:9a:b1:f6:d0:be:4d:1e:b8:6a:94:
                    63:52:03:b0:d8:2d:32:b0:77:43:19:3b:33:c7:35:
                    2e:13:2d:15:50:1e:4a:8f:f0:39:d0:bb:41:5a:7b:
                    df:e7:99:e1:f3:29:04:33:18:f2:81:99:ff:68:21:
                    f5:88:36:7b:51:27:4e:00:b8:39:a3:49:5f:a7:2b:
                    12:a1:ae:26:27:23:dc:80:ad:12:49:04:fc:32:29:
                    2c:b9:9f:e3:62:bd:c8:45:08:ac:a3:12:0e:af:02:
                    8a:e4:16:6d:bc:b7:4c:8f:7f:e2:3e:f5:ae:5f:99:
                    5c:ef:45:b3:34:aa:57:03:e1:9e:06:25:1f:f3:cf:
                    14:76:58:1d:c9:e1:56:50:84:a0:57:30:28:06:31:
                    fb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E1:8B:18:C7:9E:22:12:D9:CA:BA:8A:AD:24:2F:8A:D6:31:DE:01
            X509v3 Authority Key Identifier:
                keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/JOGLGMeeIhLZyrqKrSQvitYx3gE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.95.32.0/20
                  82.194.224.0/19
                  87.238.96.0/21
                  89.188.160.0/19
                IPv6:
                  2a03:8640::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:9e:8f:7a:2f:ba:13:29:f0:06:b7:b8:3e:26:86:08:74:34:
         20:96:44:ea:03:00:ce:48:f0:4f:8f:fa:e1:f7:f4:8c:6f:71:
         1b:b9:27:6a:d8:31:60:03:cf:62:2f:e6:83:22:15:c5:33:71:
         1e:8e:53:bf:49:14:b5:5b:c6:ff:bc:ac:ad:07:69:0a:bf:51:
         1a:9d:37:f4:d5:2e:78:d3:ec:b7:88:86:e2:58:62:3c:87:11:
         9d:19:c3:ee:dc:3b:44:5a:46:85:3d:8b:18:9d:00:88:2e:5a:
         98:94:81:ed:ef:ca:a7:51:c9:6b:1f:5f:83:1b:6a:6e:01:2f:
         c9:3c:a4:e6:3f:18:14:4b:41:62:20:9e:3d:6c:86:85:47:87:
         a1:a2:e8:85:a5:d4:bc:c0:d6:c6:7e:5f:8e:31:78:79:f4:e5:
         d3:3e:07:2f:c0:20:1e:6e:05:a9:5c:70:37:aa:bb:df:72:fb:
         8e:ae:7a:16:7d:d8:b7:95:e1:5d:21:e4:5a:96:88:a0:4f:a1:
         3f:fb:c8:d8:6b:b8:83:16:65:99:1f:ba:0b:2a:57:2c:1f:34:
         49:ec:36:cc:71:94:75:e1:21:4c:ed:90:17:cb:cf:8e:06:e3:
         06:7f:22:1d:3a:e2:8b:0d:39:0a:e4:7c:e2:95:40:2d:fd:c3:
         9b:ec:c7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:39:18 2026 by rpki-client