This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/JFY54QWecCHKfWOIhQ6eHfwQTI8.roa
File:                     JFY54QWecCHKfWOIhQ6eHfwQTI8.roa (raw, json)
Hash identifier:          c6DsCEx7huHmXsJraso36n2V45N6eM42EXKuT1wNzh8=
Subject key identifier:   24:56:39:E1:05:9E:70:21:CA:7D:63:88:85:0E:9E:1D:FC:10:4C:8F
Certificate issuer:       /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial:       019B7B358C8A2F22432137930BF27E96CDB7
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/JFY54QWecCHKfWOIhQ6eHfwQTI8.roa
Signing time:             Thu 01 Jan 2026 20:17:45 +0000
ROA not before:           Thu 01 Jan 2026 20:17:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213489
IP address blocks:        188.124.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:8c:8a:2f:22:43:21:37:93:0b:f2:7e:96:cd:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
        Validity
            Not Before: Jan  1 20:17:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=245639e1059e7021ca7d6388850e9e1dfc104c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:38:26:d2:23:30:ce:93:0f:68:d6:67:15:
                    5a:8e:1d:62:55:e9:95:1d:ba:a6:5a:f5:5b:33:ba:
                    d3:41:4f:79:d4:5a:44:b6:43:61:ac:0e:a1:3a:35:
                    97:3b:c0:fe:50:2c:52:e5:3c:b5:19:cb:b0:49:83:
                    7f:8a:8d:09:c5:48:aa:0d:f9:5a:dc:0c:1d:85:a7:
                    84:23:68:db:f4:d8:2e:38:4e:98:ef:ba:a7:34:59:
                    c9:4e:94:bf:69:18:31:18:2e:6c:2e:e7:6e:3e:01:
                    ef:d1:7d:11:f6:e1:2e:bd:42:df:e4:2f:85:68:9c:
                    ce:bc:14:c9:ae:ce:08:e8:1f:23:ac:e2:a3:76:98:
                    03:06:b3:89:e0:5e:e1:5d:b1:e5:fb:c7:e2:1b:56:
                    9b:4a:47:cb:52:63:25:a2:8a:48:50:80:5f:95:3c:
                    bf:ae:b7:37:b5:16:2f:5a:b0:e1:9b:37:45:2c:f8:
                    97:db:c5:bd:7a:00:f9:a8:ea:cf:b5:91:e2:14:d3:
                    87:70:2f:62:57:d5:57:ce:df:76:a3:1d:30:f9:e9:
                    fb:39:0a:11:64:6e:00:57:3a:45:b8:f6:a2:3a:d1:
                    db:4f:d8:9c:11:d9:6b:67:5c:8d:31:c1:82:78:08:
                    3e:8b:1c:4a:44:af:52:0b:ef:94:0f:a1:1c:71:33:
                    44:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:56:39:E1:05:9E:70:21:CA:7D:63:88:85:0E:9E:1D:FC:10:4C:8F
            X509v3 Authority Key Identifier:
                keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/JFY54QWecCHKfWOIhQ6eHfwQTI8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.124.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:4f:aa:36:7d:72:d4:29:06:f2:44:a1:e4:99:0e:25:ef:5a:
         88:12:b8:76:dc:f2:52:7b:e5:ac:2c:2b:f1:44:73:15:df:14:
         50:3c:fd:91:67:35:1f:5b:07:6a:f6:0c:ac:74:12:bb:43:58:
         b4:04:5c:cd:20:87:ea:b4:04:83:78:27:d9:eb:53:f1:69:32:
         11:40:35:1a:72:21:a3:2a:65:d2:85:33:7f:80:18:66:4e:22:
         b6:84:76:97:06:42:92:fb:c2:22:b4:25:b1:9d:e8:6e:8c:91:
         17:72:98:33:6e:ae:aa:42:04:6a:f8:9b:17:30:c4:e3:12:f9:
         78:5c:28:4f:73:8d:a9:79:2a:15:37:92:18:bb:64:ef:72:67:
         b6:15:b1:72:4d:6e:a2:05:c8:bf:96:1d:ac:8c:18:8e:b8:a2:
         bd:75:62:d6:d7:ef:6a:24:a1:51:ea:17:ce:9b:02:24:d8:73:
         a0:68:4b:75:de:80:33:f0:19:9a:b8:08:50:36:cb:53:1c:99:
         07:c6:77:2c:13:26:fd:8b:74:99:ac:57:ec:ed:1e:47:72:41:
         65:fa:7e:a4:8c:81:e9:7b:f5:d2:0f:7f:0e:6c:33:bd:eb:e5:
         8b:7a:ae:a4:79:4f:47:01:cc:8c:d2:6c:81:65:ba:4a:79:03:
         bf:56:1a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:07:31 2026 by rpki-client