This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_j7u6JiV20Qt7AkbBxyfkOjhZuU.roa
File:                     _j7u6JiV20Qt7AkbBxyfkOjhZuU.roa (raw, json)
Hash identifier:          Prkds3r1rBjyiavjxJu0B1hrmWzVsGK4yQ/GRGvaHk8=
Subject key identifier:   FE:3E:EE:E8:98:95:DB:44:2D:EC:09:1B:07:1C:9F:90:E8:E1:66:E5
Certificate issuer:       /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial:       019B7F14A2B174A521F3AF93B81435534AE1
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_j7u6JiV20Qt7AkbBxyfkOjhZuU.roa
Signing time:             Fri 02 Jan 2026 14:20:17 +0000
ROA not before:           Fri 02 Jan 2026 14:20:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     12469
IP address blocks:        194.45.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:a2:b1:74:a5:21:f3:af:93:b8:14:35:53:4a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
        Validity
            Not Before: Jan  2 14:20:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fe3eeee89895db442dec091b071c9f90e8e166e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:f0:d5:37:00:9a:7e:45:31:0c:4e:85:e4:
                    92:3b:cf:f3:20:09:04:08:72:f5:19:1f:ce:97:78:
                    44:b2:74:de:6b:40:41:21:47:76:d9:df:f3:69:6c:
                    81:19:21:4c:c1:a0:7a:33:d4:92:48:23:dd:fc:85:
                    53:77:f6:20:54:50:28:9f:21:a2:e0:42:46:0f:33:
                    54:71:1b:74:e5:ad:3b:3a:e6:49:b8:45:cc:17:d7:
                    ae:86:1f:64:66:4d:c7:9d:96:97:67:1b:2a:2a:5c:
                    3e:3f:72:da:20:74:56:9d:b4:9a:aa:43:8a:e9:1c:
                    80:ae:f8:d7:2b:35:12:1b:7e:ba:12:fa:a2:6f:30:
                    ab:46:35:9f:cf:ad:54:a0:e9:80:14:df:c8:ed:8b:
                    1c:61:58:c1:59:54:04:4e:01:45:f6:07:04:f8:b8:
                    d1:21:22:1b:71:af:3a:13:89:3f:1e:41:24:83:3a:
                    c5:0b:58:03:eb:b5:2d:da:fa:e2:f5:2d:89:92:42:
                    12:54:fe:9b:4b:22:05:2e:db:d9:17:5d:4d:0f:48:
                    94:d4:38:07:a2:1b:64:43:a4:f9:a4:63:9c:b6:93:
                    4d:8b:c8:d7:4f:db:09:c7:a8:b6:fd:81:2c:3a:16:
                    1a:b4:19:ba:5f:c8:9a:d9:49:61:11:09:d7:e5:ab:
                    e3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3E:EE:E8:98:95:DB:44:2D:EC:09:1B:07:1C:9F:90:E8:E1:66:E5
            X509v3 Authority Key Identifier:
                keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_j7u6JiV20Qt7AkbBxyfkOjhZuU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.45.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:44:8c:21:13:4d:d5:cc:ea:2f:e9:36:8b:67:06:ca:cb:a2:
         40:a3:cf:46:62:57:d3:ef:a9:a9:9f:38:77:d7:f0:95:d8:a8:
         66:bc:d3:e4:78:4e:20:9c:89:cf:a3:d5:9d:8c:4d:81:b4:53:
         64:c2:9e:9e:3d:f9:2c:a6:d5:25:6e:0b:b9:59:41:68:2a:7c:
         a2:cf:9d:fb:68:b2:d4:f3:af:6c:93:48:31:16:4e:e8:e9:73:
         78:14:48:67:1a:2b:31:c9:bd:ec:da:1e:5c:d7:1a:c1:9d:90:
         79:04:79:0f:22:c2:41:58:8d:03:72:87:86:10:24:60:77:14:
         90:15:42:d3:b1:4a:75:ba:e4:66:97:91:61:11:2a:43:bd:c3:
         d5:10:db:d0:d7:0e:4e:e6:63:84:01:18:72:59:bb:f7:99:b5:
         f2:29:a9:54:b1:2a:17:49:79:b1:d5:14:01:fc:1b:73:03:53:
         e1:73:fa:6f:6d:0d:39:72:6e:f7:e9:57:eb:8a:b7:95:c2:0b:
         52:41:68:30:d5:9a:5c:51:5d:90:9a:d3:9e:b9:55:6e:2a:32:
         80:5f:02:d3:9f:7e:68:05:bc:0e:ba:15:d3:4e:5a:13:85:ff:
         02:f4:7d:b0:5a:00:61:7e:0f:bb:73:84:58:1a:e1:4e:e7:95:
         5a:22:86:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:22:38 2026 by rpki-client