This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/JsIYFyLR74GQysEIqnGykpSJQUI.roa
File:                     JsIYFyLR74GQysEIqnGykpSJQUI.roa (raw, json)
Hash identifier:          iaHnb3OAMXTWsBgbEKrwhuTvCOgUBCodv1kDk+4mavA=
Subject key identifier:   26:C2:18:17:22:D1:EF:81:90:CA:C1:08:AA:71:B2:92:94:89:41:42
Certificate issuer:       /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial:       019B7F15FF0D56075CE581B436BD709CFB8F
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/JsIYFyLR74GQysEIqnGykpSJQUI.roa
Signing time:             Fri 02 Jan 2026 14:21:46 +0000
ROA not before:           Fri 02 Jan 2026 14:21:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34396
IP address blocks:        195.200.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:ff:0d:56:07:5c:e5:81:b4:36:bd:70:9c:fb:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
        Validity
            Not Before: Jan  2 14:21:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=26c2181722d1ef8190cac108aa71b29294894142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2c:32:a3:f8:6b:2c:a0:86:58:50:d5:8d:43:
                    6d:28:bf:7b:cf:84:b5:96:f9:b7:61:db:36:9a:5c:
                    64:58:71:83:a8:af:0b:d2:bf:cb:77:87:40:3e:57:
                    da:9e:4b:87:fe:7b:44:c4:76:81:ca:7d:a4:f3:80:
                    e5:ea:80:30:52:ab:6f:d1:d1:d6:56:02:f3:63:32:
                    bf:bb:09:a2:7d:ee:1f:55:d6:55:b8:15:4a:0d:96:
                    51:02:9f:85:e7:48:32:a8:2b:c9:80:e5:ee:47:5f:
                    63:8f:29:76:1c:e3:59:f7:84:51:c3:29:a4:08:0a:
                    13:8b:d7:31:12:e7:48:fe:13:f2:b5:f9:ae:19:02:
                    cb:9b:cd:9b:d1:bc:9e:04:bd:29:b7:31:8b:dd:a7:
                    db:8a:68:78:4e:b8:a3:67:53:22:c3:d8:e3:a8:6f:
                    79:7f:55:7e:38:8f:e9:7d:ad:94:23:6e:7a:2d:89:
                    87:74:00:7a:aa:6d:22:11:ca:e7:dc:26:9b:29:81:
                    3a:6c:7a:c2:c9:ea:a2:5d:7e:fb:84:d8:d7:56:b2:
                    f4:5e:e0:5a:e0:52:b0:62:0e:fb:61:f0:43:cf:60:
                    9c:67:19:f7:35:68:43:0d:85:2d:f9:2b:7b:db:2d:
                    20:6f:13:7c:31:e5:c3:be:9e:bf:31:71:ae:ec:e9:
                    1c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C2:18:17:22:D1:EF:81:90:CA:C1:08:AA:71:B2:92:94:89:41:42
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/JsIYFyLR74GQysEIqnGykpSJQUI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.200.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:dc:3d:64:91:c3:5f:21:b8:f7:5c:8f:af:d3:82:32:d9:fc:
         7e:2e:6d:1e:4d:28:e0:ba:2b:a5:98:57:5d:fb:8d:91:94:28:
         58:29:8d:dc:14:6f:7d:0e:b5:e4:3a:e2:6a:20:72:83:84:75:
         d7:6e:52:aa:e4:cd:c7:5e:c6:82:79:05:38:0d:72:09:7c:3e:
         f3:2b:65:c6:77:9e:82:da:f6:cb:7d:8d:f7:ef:96:ce:70:d5:
         30:5e:c5:0e:95:53:f9:fb:9a:83:0a:10:b6:b7:c7:c7:41:41:
         1a:23:46:bb:2e:4f:c7:90:18:36:4e:b3:fa:4e:a7:3a:6b:95:
         1f:49:17:40:34:ca:19:2b:64:fe:70:19:3d:52:7c:71:5f:11:
         06:37:b2:c3:ac:14:90:aa:8d:88:a1:c0:04:33:00:6b:57:22:
         37:57:8a:39:af:ea:3b:01:c6:71:67:80:f1:a6:5d:51:eb:6c:
         72:ca:f5:be:27:b6:10:2f:b8:c2:7a:e5:85:47:52:e7:4f:13:
         06:41:1d:b7:a8:16:e0:ff:ab:56:6a:16:f8:7d:c5:35:a1:75:
         c2:7f:86:9c:bb:cd:21:24:76:61:a8:8f:f0:ce:09:b3:3b:a6:
         e9:77:13:f1:b4:14:db:b8:ca:7d:19:e7:8b:04:f7:16:03:a8:
         fb:16:ca:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:40:16 2026 by rpki-client