This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/j9BouMciNW9kiR4MYbw5nEI18Lk.roa
File:                     j9BouMciNW9kiR4MYbw5nEI18Lk.roa (raw, json)
Hash identifier:          0POuwWC/mY+BSIA395HwTOeczjcetqnwxmUcBFaUV1o=
Subject key identifier:   8F:D0:68:B8:C7:22:35:6F:64:89:1E:0C:61:BC:39:9C:42:35:F0:B9
Certificate issuer:       /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial:       019B797E9A2CB9E45733AFE856D96B1F24D7
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/j9BouMciNW9kiR4MYbw5nEI18Lk.roa
Signing time:             Thu 01 Jan 2026 12:18:18 +0000
ROA not before:           Thu 01 Jan 2026 12:18:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62342
IP address blocks:        193.202.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:9a:2c:b9:e4:57:33:af:e8:56:d9:6b:1f:24:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
        Validity
            Not Before: Jan  1 12:18:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8fd068b8c722356f64891e0c61bc399c4235f0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:3b:fa:e2:79:12:97:e3:4a:ab:da:09:22:70:
                    2a:2e:80:6b:2c:9f:e2:f5:6b:23:90:7e:fd:24:e7:
                    06:27:7b:6b:d4:d7:ad:7a:da:cb:22:57:f1:eb:86:
                    48:f3:26:30:f0:20:0c:7d:9a:9b:ba:8f:83:04:b0:
                    5d:ce:24:15:10:56:fb:d7:8e:e4:2e:62:fd:1d:b9:
                    ef:9f:fd:82:68:c5:0c:be:45:03:39:a0:fe:19:57:
                    a1:67:e1:0a:b2:5b:cd:d7:69:59:ba:5a:02:c9:7a:
                    b0:47:01:2f:63:c1:e0:b7:7e:57:70:d4:f7:8f:9b:
                    f0:43:36:ac:c2:13:4f:8c:09:b0:9d:f9:23:e5:c7:
                    88:bd:28:21:4d:d6:31:8b:b5:ff:4b:19:f0:71:76:
                    83:68:95:1f:44:ec:f9:07:ac:ef:5b:ec:73:07:2e:
                    c8:93:56:61:a2:79:b1:bd:75:70:23:75:16:85:9d:
                    86:cd:48:9a:45:f8:6a:b2:e8:0e:bd:93:ca:66:14:
                    ca:3b:a5:25:88:85:ca:da:59:36:b8:23:a1:75:f4:
                    d4:7e:e5:57:d9:d5:ee:18:92:6f:89:e1:ef:f4:61:
                    19:82:0a:cd:45:7a:b6:32:54:bb:5d:ed:ba:3c:14:
                    fe:7b:e4:5a:9e:9d:aa:6d:90:76:ab:ee:28:a8:ee:
                    00:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D0:68:B8:C7:22:35:6F:64:89:1E:0C:61:BC:39:9C:42:35:F0:B9
            X509v3 Authority Key Identifier:
                keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/j9BouMciNW9kiR4MYbw5nEI18Lk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.202.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:a9:d0:99:4d:90:5b:5c:75:3e:91:27:fb:67:8c:be:9f:c9:
         7f:d4:a2:12:d9:bf:28:f2:85:5c:04:55:9d:56:7a:17:cc:f3:
         27:00:33:55:3f:94:77:cf:0f:5e:08:d3:9b:0e:40:34:5d:32:
         2b:a2:f4:b1:5a:2d:48:56:c2:66:6e:96:5e:0e:96:3c:a5:7d:
         e9:99:11:51:dc:e0:5f:fb:a4:2d:c7:16:63:54:bd:b2:c5:f8:
         e2:d3:8d:3e:81:58:d2:b7:c5:ea:6d:eb:2a:1f:8d:b2:f2:2a:
         2b:92:a4:1f:6a:0f:a3:eb:fe:6a:23:93:e5:f3:0d:a4:bb:e3:
         96:54:ca:fb:f7:cf:9f:60:27:9a:bf:11:30:f8:54:1c:2b:ca:
         64:c9:9f:2e:ee:00:3f:c7:3e:ca:93:aa:ed:e7:eb:e6:2b:c9:
         42:d5:3f:14:61:e2:c5:3a:24:25:00:72:e8:88:7c:13:47:25:
         1a:1a:16:46:05:1d:b7:37:5a:5f:9f:b1:6c:c9:cf:58:93:e1:
         62:15:1c:b1:06:e2:7b:24:33:52:73:f7:ff:84:c5:18:d5:0e:
         8f:0e:13:22:ac:ff:cd:de:0e:f6:45:e8:e3:b1:69:30:02:de:
         d3:8c:fc:30:97:80:9a:e1:af:6e:bd:9f:c2:6b:51:b6:cc:89:
         c4:6e:b3:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5fposueRXM6/oVtlrHyTXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZWQ2MjkzNWZiNDhhZjZlNDRjYmExOTQyNmVmYWI1MWYx
YzU0MTAwHhcNMjYwMTAxMTIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmQwNjhiOGM3MjIzNTZmNjQ4OTFlMGM2MWJjMzk5YzQyMzVmMGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Dv64nkSl+NKq9oJInAqLoBrLJ/i
9WsjkH79JOcGJ3tr1NetetrLIlfx64ZI8yYw8CAMfZqbuo+DBLBdziQVEFb7147k
LmL9Hbnvn/2CaMUMvkUDOaD+GVehZ+EKslvN12lZuloCyXqwRwEvY8Hgt35XcNT3
j5vwQzaswhNPjAmwnfkj5ceIvSghTdYxi7X/SxnwcXaDaJUfROz5B6zvW+xzBy7I
k1ZhonmxvXVwI3UWhZ2GzUiaRfhqsugOvZPKZhTKO6UliIXK2lk2uCOhdfTUfuVX
2dXuGJJvieHv9GEZggrNRXq2MlS7Xe26PBT+e+Ranp2qbZB2q+4oqO4ALwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI/QaLjHIjVvZIkeDGG8OZxCNfC5MB8GA1UdIwQY
MBaAFCvtYpNftIr25Ey6GUJu+rUfHFQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWIt
NDg0MDE0YTRkOTRlLzEvajlCb3VNY2lOVzlraVI0TVlidzVuRUkxOExrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWItNDg0MDE0YTRkOTRl
LzEvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcoWMA0G
CSqGSIb3DQEBCwUAA4IBAQC+qdCZTZBbXHU+kSf7Z4y+n8l/1KIS2b8o8oVcBFWd
VnoXzPMnADNVP5R3zw9eCNObDkA0XTIrovSxWi1IVsJmbpZeDpY8pX3pmRFR3OBf
+6QtxxZjVL2yxfji040+gVjSt8XqbesqH42y8iorkqQfag+j6/5qI5Pl8w2ku+OW
VMr798+fYCeavxEw+FQcK8pkyZ8u7gA/xz7Kk6rt5+vmK8lC1T8UYeLFOiQlAHLo
iHwTRyUaGhZGBR23N1pfn7Fsyc9Yk+FiFRyxBuJ7JDNSc/f/hMUY1Q6PDhMirP/N
3g72RejjsWkwAt7TjPwwl4Ca4a9uvZ/Ca1G2zInEbrNo
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:36:24 2026 by rpki-client