This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/J6RUNAmoogv7zgMLcCOwk_cTSbw.roa
File:                     J6RUNAmoogv7zgMLcCOwk_cTSbw.roa (raw, json)
Hash identifier:          g+8OdmE2eYFbsqzauS740Ewhw4IU7T/U1OEITUeBDc4=
Subject key identifier:   27:A4:54:34:09:A8:A2:0B:FB:CE:03:0B:70:23:B0:93:F7:13:49:BC
Certificate issuer:       /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial:       019B7C8050C5290F36F8A48A0AA776612503
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/J6RUNAmoogv7zgMLcCOwk_cTSbw.roa
Signing time:             Fri 02 Jan 2026 02:19:02 +0000
ROA not before:           Fri 02 Jan 2026 02:19:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212052
IP address blocks:        91.228.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:50:c5:29:0f:36:f8:a4:8a:0a:a7:76:61:25:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
        Validity
            Not Before: Jan  2 02:19:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=27a4543409a8a20bfbce030b7023b093f71349bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3c:0b:ab:69:96:9b:9e:f5:97:2f:61:8e:eb:
                    c0:b9:4a:89:a2:59:85:6e:59:37:0e:1f:b4:5e:79:
                    88:59:88:b7:83:16:81:89:8c:b0:63:d0:4f:3d:47:
                    84:61:28:2a:8e:68:7f:84:d9:6f:84:ab:4d:c7:4c:
                    1a:12:99:2d:be:e9:83:5e:6b:26:fc:a8:b5:c2:ca:
                    dd:af:b7:08:fc:d8:79:3b:66:f0:d2:cf:de:65:3e:
                    90:ad:4a:ee:80:24:75:6f:e1:a2:d7:f1:35:ba:9d:
                    d2:6b:5f:42:11:22:a0:12:87:a4:28:ed:1e:16:0b:
                    c6:1d:e1:8a:e4:70:5c:74:1a:aa:7f:e1:da:ef:ca:
                    d6:61:de:e0:b6:d7:f9:6f:89:18:b5:4f:5a:00:ca:
                    21:6f:db:eb:50:bd:8e:3b:16:0c:a2:d5:54:6d:13:
                    19:39:53:b9:3e:52:00:84:9c:4e:1e:47:64:8b:b1:
                    b3:24:35:62:aa:f5:50:ff:89:4f:9d:bb:ae:ea:fc:
                    76:05:19:63:84:85:f1:52:c9:a4:d9:46:f7:44:67:
                    ac:dd:0c:32:69:66:6d:b5:e2:19:70:c2:74:52:73:
                    66:03:8c:18:7f:2c:7c:9d:75:41:a7:57:e9:aa:1c:
                    1a:97:71:1d:1e:c4:d3:5b:e5:73:aa:b1:2d:0b:19:
                    bf:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A4:54:34:09:A8:A2:0B:FB:CE:03:0B:70:23:B0:93:F7:13:49:BC
            X509v3 Authority Key Identifier:
                keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/J6RUNAmoogv7zgMLcCOwk_cTSbw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.228.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:1f:33:b5:3b:c6:29:c1:62:47:1f:e5:35:51:ab:6e:de:1d:
         5e:fe:33:50:ef:64:11:d9:dc:46:a6:82:af:ee:c7:50:e6:1c:
         09:43:bd:ba:33:c7:66:df:09:fa:cf:53:54:c8:20:0e:11:ae:
         5d:3d:fe:76:af:bb:00:e1:77:ea:ce:f4:dd:e0:87:ae:9a:b5:
         61:f2:79:04:f3:28:69:db:28:c0:59:9a:66:c4:61:85:c9:71:
         4b:3a:b4:92:e2:99:67:29:31:06:8f:ba:15:ac:a8:94:b7:52:
         6f:b9:7e:6a:15:02:a9:91:b7:41:c2:19:c8:75:54:ce:3d:de:
         a3:51:85:af:c7:bf:ac:b5:d8:3e:56:b3:10:4c:7f:d0:bc:fe:
         4d:72:62:bd:0f:1a:9d:b6:c1:82:49:0b:3a:2c:e1:29:5a:33:
         16:06:48:ac:04:2f:50:af:80:b8:e6:de:4a:ba:01:f6:bf:89:
         ac:07:38:94:cb:f7:6f:da:32:2c:25:61:34:3f:3b:1f:bd:17:
         a7:e2:d4:87:34:c5:62:5f:30:14:0c:2b:b9:e2:fe:fb:74:8f:
         2d:7c:72:de:fe:a5:94:15:cb:6f:53:84:01:8f:1d:77:df:08:
         bb:02:d8:1f:10:aa:a7:32:a5:77:bc:d4:9a:53:30:50:e9:a9:
         a7:20:7b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:48:41 2026 by rpki-client