This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/JpjcVvpsRev2p10C3LQaIJ0kCAk.roa
File:                     JpjcVvpsRev2p10C3LQaIJ0kCAk.roa (raw, json)
Hash identifier:          olGjGjOs+cbpB3gRjJy05Z6fBuTN4aPpcrK5updhkf8=
Subject key identifier:   26:98:DC:56:FA:6C:45:EB:F6:A7:5D:02:DC:B4:1A:20:9D:24:08:09
Certificate issuer:       /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial:       019B78352981F2BD088EA196E0A704D81B59
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/JpjcVvpsRev2p10C3LQaIJ0kCAk.roa
Signing time:             Thu 01 Jan 2026 06:18:28 +0000
ROA not before:           Thu 01 Jan 2026 06:18:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     328543
IP address blocks:        195.78.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:29:81:f2:bd:08:8e:a1:96:e0:a7:04:d8:1b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
        Validity
            Not Before: Jan  1 06:18:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2698dc56fa6c45ebf6a75d02dcb41a209d240809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:30:bd:5a:8c:45:be:a6:07:f2:34:e8:1c:9b:
                    98:55:06:02:06:8a:d1:b5:b4:36:0e:75:6e:f2:d7:
                    a0:2e:96:50:6c:9a:8a:bd:ff:55:c6:00:45:34:9a:
                    17:4d:e4:83:31:bc:e9:d4:5b:cc:18:74:a9:30:af:
                    7c:87:a7:d1:9c:c4:c9:67:9b:7b:c8:a5:62:07:09:
                    f9:96:db:5f:79:e4:c9:d8:7d:88:f0:0e:26:bb:7e:
                    07:ba:89:f1:11:8b:d5:0b:5b:3a:2d:c4:a5:05:80:
                    23:3c:95:b8:d8:11:30:89:83:eb:74:11:45:a0:e4:
                    e5:b0:d5:8d:d6:e0:14:07:09:ea:1b:eb:25:d8:ff:
                    df:fb:17:57:d9:fa:ca:34:21:0d:75:a3:c5:e9:ce:
                    7e:bf:93:39:cb:b8:89:0b:1e:b2:57:8c:68:7c:18:
                    da:70:69:74:3e:ae:a1:be:a9:d4:2e:c2:46:1a:51:
                    0f:fd:db:c4:e6:47:39:e0:99:6b:17:f7:65:72:f2:
                    bb:96:d0:e0:30:8c:67:de:75:c3:17:c9:42:5f:2d:
                    94:56:75:2f:fc:4a:00:c9:7f:5f:62:81:4b:19:db:
                    41:97:9f:8b:96:ad:ce:db:c1:89:3a:de:9a:f0:f0:
                    af:55:24:ca:86:02:e6:c5:ae:b6:eb:c0:37:9e:72:
                    90:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:98:DC:56:FA:6C:45:EB:F6:A7:5D:02:DC:B4:1A:20:9D:24:08:09
            X509v3 Authority Key Identifier:
                keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/JpjcVvpsRev2p10C3LQaIJ0kCAk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:59:bc:2e:03:f6:14:73:c4:7a:f5:55:cf:90:4f:1d:d1:85:
         a3:a0:c2:69:23:78:a3:e1:db:6d:53:50:6f:72:e5:4f:fb:d8:
         4e:4c:38:78:5f:5a:a3:ac:95:c3:e2:c4:b7:0d:b1:57:1c:8d:
         e3:a4:09:95:36:e6:51:16:3f:da:6e:b1:26:81:78:86:0f:72:
         dd:ef:fc:aa:0c:08:73:03:3b:4e:9e:24:ca:c2:c2:a4:01:b7:
         f2:f3:b3:68:72:41:68:74:70:ff:ba:7a:55:21:47:8a:29:d5:
         72:14:ce:f1:e9:f9:e7:ef:97:94:eb:8c:bd:47:5c:38:b9:cb:
         f0:80:ff:2c:68:eb:a8:d1:32:9d:e8:8e:3e:28:77:c8:78:f8:
         a3:e6:e0:c5:b1:87:1c:75:82:ce:f5:88:98:a2:a2:05:b5:1c:
         81:c4:dc:17:01:19:12:1b:b9:eb:e9:56:89:41:e9:7e:a1:18:
         02:75:a8:dc:96:1d:38:f0:ee:15:8f:53:89:e5:66:5c:4b:e9:
         3e:8b:a5:20:ec:9c:a5:f8:64:8f:b2:cb:0a:11:87:6c:91:4b:
         a2:1a:dd:f2:80:56:16:b7:49:46:db:1d:54:41:94:ee:0c:04:
         83:04:f2:f7:9c:5a:f2:21:02:25:b2:01:60:04:65:0a:ed:52:
         72:89:83:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NSmB8r0IjqGW4KcE2BtZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1
NjU0MmQwHhcNMjYwMTAxMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjk4ZGM1NmZhNmM0NWViZjZhNzVkMDJkY2I0MWEyMDlkMjQwODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzC9WoxFvqYH8jToHJuYVQYCBorR
tbQ2DnVu8tegLpZQbJqKvf9VxgBFNJoXTeSDMbzp1FvMGHSpMK98h6fRnMTJZ5t7
yKViBwn5lttfeeTJ2H2I8A4mu34HuonxEYvVC1s6LcSlBYAjPJW42BEwiYPrdBFF
oOTlsNWN1uAUBwnqG+sl2P/f+xdX2frKNCENdaPF6c5+v5M5y7iJCx6yV4xofBja
cGl0Pq6hvqnULsJGGlEP/dvE5kc54JlrF/dlcvK7ltDgMIxn3nXDF8lCXy2UVnUv
/EoAyX9fYoFLGdtBl5+Llq3O28GJOt6a8PCvVSTKhgLmxa6268A3nnKQ+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCaY3Fb6bEXr9qddAty0GiCdJAgJMB8GA1UdIwQY
MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt
YmQ1ZDNmMDBmYmIyLzEvSnBqY1Z2cHNSZXYycDEwQzNMUWFJSjBrQ0FrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy
LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw04wMA0G
CSqGSIb3DQEBCwUAA4IBAQBzWbwuA/YUc8R69VXPkE8d0YWjoMJpI3ij4dttU1Bv
cuVP+9hOTDh4X1qjrJXD4sS3DbFXHI3jpAmVNuZRFj/abrEmgXiGD3Ld7/yqDAhz
AztOniTKwsKkAbfy87NockFodHD/unpVIUeKKdVyFM7x6fnn75eU64y9R1w4ucvw
gP8saOuo0TKd6I4+KHfIePij5uDFsYccdYLO9YiYoqIFtRyBxNwXARkSG7nr6VaJ
Qel+oRgCdajclh048O4Vj1OJ5WZcS+k+i6Ug7Jyl+GSPsssKEYdskUuiGt3ygFYW
t0lG2x1UQZTuDASDBPL3nFryIQIlsgFgBGUK7VJyiYMp
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:18:14 2026 by rpki-client