This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/jnbS6eM3y8l2eIAi24P02_6sYnE.roa
File:                     jnbS6eM3y8l2eIAi24P02_6sYnE.roa (raw, json)
Hash identifier:          oehLYvqq0N9O64TqK28Nu+Air9RUEnLzPzRmB5KAv7U=
Subject key identifier:   8E:76:D2:E9:E3:37:CB:C9:76:78:80:22:DB:83:F4:DB:FE:AC:62:71
Certificate issuer:       /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial:       019B78354B3477F0D4DA142645C9B772A187
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/jnbS6eM3y8l2eIAi24P02_6sYnE.roa
Signing time:             Thu 01 Jan 2026 06:18:37 +0000
ROA not before:           Thu 01 Jan 2026 06:18:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208746
IP address blocks:        193.56.233.0/24 maxlen: 24
                          193.56.235.0/24 maxlen: 24
                          193.56.236.0/24 maxlen: 24
                          193.56.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:4b:34:77:f0:d4:da:14:26:45:c9:b7:72:a1:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
        Validity
            Not Before: Jan  1 06:18:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8e76d2e9e337cbc976788022db83f4dbfeac6271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0b:63:7d:7d:3e:19:18:8c:44:4b:47:ba:9b:
                    4c:bf:99:14:67:40:4f:a4:36:ea:a4:a9:43:37:86:
                    3b:36:ef:a8:ad:6e:b0:d4:07:7d:09:ea:71:89:df:
                    be:fd:d6:cb:d7:51:48:49:a5:8a:fc:c1:91:93:a3:
                    27:40:de:48:1d:20:18:26:9b:ef:28:78:4c:53:dd:
                    4c:fa:94:bd:1d:bb:91:b1:c2:e6:10:28:fc:0f:d2:
                    87:c7:10:53:72:dc:4b:e1:07:3f:0b:a7:0c:2e:41:
                    2b:55:2b:65:25:c7:15:ed:45:df:a3:ae:b3:a5:80:
                    e4:7f:9e:78:9b:51:3b:cf:44:23:8b:b2:fb:f4:1c:
                    e1:e1:04:33:40:ea:30:e1:92:91:7e:e9:c3:bc:e1:
                    a5:36:8f:c1:ec:0a:f0:c5:73:13:a4:24:73:d4:ef:
                    a9:16:4b:38:23:7b:4f:86:f0:b7:7f:8f:91:2a:09:
                    53:63:88:38:f2:9f:39:19:bf:94:5d:c9:56:37:23:
                    33:99:46:2f:2e:06:c7:2e:4e:ef:4b:ea:b7:61:39:
                    93:03:bd:d5:71:48:5f:28:45:a1:69:b5:08:95:a6:
                    d7:92:33:e3:2f:02:f5:1d:e2:5f:c5:a2:19:14:13:
                    e6:ba:bd:4a:64:52:3b:e0:af:23:21:7e:37:d5:48:
                    14:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:76:D2:E9:E3:37:CB:C9:76:78:80:22:DB:83:F4:DB:FE:AC:62:71
            X509v3 Authority Key Identifier:
                keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/jnbS6eM3y8l2eIAi24P02_6sYnE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.56.233.0/24
                  193.56.235.0-193.56.237.255

    Signature Algorithm: sha256WithRSAEncryption
         31:a9:ab:29:e5:b0:69:c7:cd:da:9d:d6:b2:f6:71:d5:f6:10:
         fd:f5:1e:38:bb:ee:98:37:dc:3b:89:51:31:c1:cb:da:c3:3e:
         5d:50:72:b0:70:14:1d:fb:66:bf:0f:f0:43:1d:2c:37:7a:e8:
         d7:16:29:c3:ab:e4:bd:39:40:1b:af:89:da:8d:7a:96:0d:14:
         69:45:4c:c3:66:38:67:98:62:60:1b:f3:cb:83:e5:c6:30:d2:
         e3:d2:54:3e:e6:e7:03:40:28:b6:93:84:c9:ce:99:b8:5d:73:
         57:33:f1:c9:30:8d:43:c8:8c:4e:4e:6f:cd:65:2a:29:61:88:
         34:de:ce:14:db:eb:fb:77:ed:41:a4:40:48:66:be:d8:60:f9:
         7b:25:6f:05:4f:dc:1f:b0:7a:af:a8:4f:3d:b9:33:0d:49:65:
         2a:a5:f1:3d:3e:03:b3:46:af:96:b2:3a:42:17:2d:ac:9c:cc:
         45:4e:b5:ad:37:13:3d:88:ab:79:93:90:55:93:34:0b:9b:56:
         a1:d9:71:e5:cb:44:bd:78:84:c3:84:2f:5c:d4:3b:e1:2d:41:
         13:b0:b1:d6:8a:12:22:f9:06:c1:ea:b4:3d:34:bf:48:c6:91:
         71:43:05:17:12:97:05:2f:a3:16:61:6c:5e:a1:4e:bf:c5:f3:
         86:e8:d2:5c
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZt4NUs0d/DU2hQmRcm3cqGHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzAwYjk2ZTlhN2EwZjlkYjg5YmY1ZTE4MTE1YjEyYTNl
ZjE2OTIwHhcNMjYwMTAxMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTc2ZDJlOWUzMzdjYmM5NzY3ODgwMjJkYjgzZjRkYmZlYWM2MjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wtjfX0+GRiMREtHuptMv5kUZ0BP
pDbqpKlDN4Y7Nu+orW6w1Ad9Cepxid++/dbL11FISaWK/MGRk6MnQN5IHSAYJpvv
KHhMU91M+pS9HbuRscLmECj8D9KHxxBTctxL4Qc/C6cMLkErVStlJccV7UXfo66z
pYDkf554m1E7z0Qji7L79Bzh4QQzQOow4ZKRfunDvOGlNo/B7ArwxXMTpCRz1O+p
Fks4I3tPhvC3f4+RKglTY4g48p85Gb+UXclWNyMzmUYvLgbHLk7vS+q3YTmTA73V
cUhfKEWhabUIlabXkjPjLwL1HeJfxaIZFBPmur1KZFI74K8jIX431UgUUwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFI520unjN8vJdniAItuD9Nv+rGJxMB8GA1UdIwQY
MBaAFNxwC5bpp6D524m/XhgRWxKj7xaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hBTGx1bW5vUG5iaWI5ZUdCRmJFcVB2RnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zY2VkZmUtMDI2Yy00ZDc4LWI4Yzgt
NTI1MjMwZTIwNjgxLzEvam5iUzZlTTN5OGwyZUlBaTI0UDAyXzZzWW5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8zY2VkZmUtMDI2Yy00ZDc4LWI4YzgtNTI1MjMwZTIwNjgx
LzEvM0hBTGx1bW5vUG5iaWI5ZUdCRmJFcVB2RnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAwTjpMAwD
BADBOOsDBAHBOOwwDQYJKoZIhvcNAQELBQADggEBADGpqynlsGnHzdqd1rL2cdX2
EP31Hji77pg33DuJUTHBy9rDPl1QcrBwFB37Zr8P8EMdLDd66NcWKcOr5L05QBuv
idqNepYNFGlFTMNmOGeYYmAb88uD5cYw0uPSVD7m5wNAKLaThMnOmbhdc1cz8ckw
jUPIjE5Ob81lKilhiDTezhTb6/t37UGkQEhmvthg+XslbwVP3B+weq+oTz25Mw1J
ZSql8T0+A7NGr5ayOkIXLayczEVOta03Ez2Iq3mTkFWTNAubVqHZceXLRL14hMOE
L1zUO+EtQROwsdaKEiL5BsHqtD00v0jGkXFDBRcSlwUvoxZhbF6hTr/F84bo0lw=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:06:54 2026 by rpki-client