This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/JWbtobpI47VXCFWlAi9tqrIVRvw.roa
File:                     JWbtobpI47VXCFWlAi9tqrIVRvw.roa (raw, json)
Hash identifier:          ucrMEatOyob1z9bYCx6s8YshkLw5O6g2pTzQdQKb/BI=
Subject key identifier:   25:66:ED:A1:BA:48:E3:B5:57:08:55:A5:02:2F:6D:AA:B2:15:46:FC
Certificate issuer:       /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial:       019B7BA3B36C65B2D8FEC4CF593E3AB22896
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/JWbtobpI47VXCFWlAi9tqrIVRvw.roa
Signing time:             Thu 01 Jan 2026 22:18:04 +0000
ROA not before:           Thu 01 Jan 2026 22:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214785
IP address blocks:        185.202.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:b3:6c:65:b2:d8:fe:c4:cf:59:3e:3a:b2:28:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
        Validity
            Not Before: Jan  1 22:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2566eda1ba48e3b5570855a5022f6daab21546fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:d9:a2:da:f0:51:44:1f:b4:9b:69:4e:9a:
                    ce:1e:61:83:57:32:db:f2:8f:6d:16:e6:c8:61:56:
                    f9:df:53:68:6a:b1:11:15:1c:18:16:94:96:f4:d0:
                    70:69:51:16:26:49:08:f3:bf:23:b1:10:2f:6b:45:
                    e1:54:a8:ac:34:85:1b:38:ba:2f:33:d9:97:26:23:
                    ec:7f:18:64:b6:b4:99:f0:fa:69:de:1e:56:3b:98:
                    cc:cf:7d:c1:09:f9:20:f6:0a:5d:ae:7e:91:8e:b3:
                    90:63:97:c5:2a:54:49:df:3a:f1:e2:56:9a:c1:55:
                    fb:c0:f2:09:d1:71:6c:45:51:8f:67:cb:e7:b3:d0:
                    83:2e:b4:ae:5c:56:94:7c:23:dc:8b:e7:b0:fc:7f:
                    17:74:a7:d4:de:c3:b2:c4:a0:0a:82:3b:4f:e6:38:
                    86:d3:1c:b1:36:70:6d:53:c8:df:8b:3d:3b:3a:e3:
                    5d:12:d4:9f:1b:26:42:f4:e9:d3:50:a9:23:c6:d0:
                    85:7e:53:78:45:da:5f:6f:f7:d6:11:70:49:c7:d4:
                    41:58:44:a8:67:fa:08:fd:19:a1:f6:fc:24:90:fc:
                    c7:e9:56:10:4b:77:4a:8a:b1:31:ac:0f:d3:e5:46:
                    6a:f6:63:e1:dd:6f:cd:7e:7a:33:97:6e:14:5b:37:
                    5a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:66:ED:A1:BA:48:E3:B5:57:08:55:A5:02:2F:6D:AA:B2:15:46:FC
            X509v3 Authority Key Identifier:
                keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/JWbtobpI47VXCFWlAi9tqrIVRvw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:4f:de:41:10:88:96:df:67:23:2a:d4:98:53:5f:75:a9:2e:
         f9:2d:f6:fd:3d:42:fc:1f:43:cf:27:b4:4b:96:eb:13:7f:bb:
         c7:8d:b0:5a:a5:a2:37:a2:0b:55:e3:57:bb:9b:e8:fe:93:75:
         d0:ae:52:fe:18:aa:99:71:26:61:70:ed:2b:a8:1b:7d:0a:d0:
         12:8f:52:7f:50:7b:83:5a:90:38:20:ef:1a:f1:3a:e5:3c:c6:
         31:d2:58:2b:df:df:25:4a:ce:a9:83:1c:2a:56:c0:3e:43:0b:
         51:39:b1:c8:e7:c9:cc:a5:fc:d4:f8:84:75:ef:41:6d:04:3d:
         fa:e9:2b:11:b6:a5:cb:4b:ce:c3:0e:64:73:9f:72:9e:62:30:
         51:48:12:66:bb:ed:41:ff:a5:ed:ad:d2:39:24:3f:56:0b:8c:
         04:92:65:bd:ef:be:86:c7:03:90:0e:c0:08:de:89:9a:db:48:
         4c:95:37:c9:ec:56:fc:9a:1c:2a:9d:f3:88:9e:94:23:42:cb:
         e4:d2:4d:d3:19:44:8b:c1:6f:2c:bf:4e:0d:77:21:5e:34:76:
         e4:a7:cd:c7:02:93:42:75:5d:98:aa:d6:21:8e:bd:ec:e1:96:
         73:fe:8b:75:3d:f4:d9:c7:9e:9a:16:05:aa:a9:7c:df:ae:f3:
         55:08:73:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:37:16 2026 by rpki-client