This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JidcxRkCrdrJ_5vVZPYviUhm27w.roa
File:                     JidcxRkCrdrJ_5vVZPYviUhm27w.roa (raw, json)
Hash identifier:          tL1fQW1AuQOqp4LmjbEVMkyn7/PWCnXdM9mAryPLsvA=
Subject key identifier:   26:27:5C:C5:19:02:AD:DA:C9:FF:9B:D5:64:F6:2F:89:48:66:DB:BC
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       019B7F84CD971D89309C103A7557B8744D2A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JidcxRkCrdrJ_5vVZPYviUhm27w.roa
Signing time:             Fri 02 Jan 2026 16:22:48 +0000
ROA not before:           Fri 02 Jan 2026 16:22:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58347
IP address blocks:        31.148.248.0/23 maxlen: 24
                          93.170.5.0/24 maxlen: 24
                          95.46.159.0/24 maxlen: 24
                          95.47.36.0/22 maxlen: 24
                          95.47.234.0/23 maxlen: 24
                          95.47.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:cd:97:1d:89:30:9c:10:3a:75:57:b8:74:4d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 16:22:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=26275cc51902addac9ff9bd564f62f894866dbbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:01:52:3c:23:e6:54:b5:4d:fc:f4:5b:79:5e:
                    e8:09:6c:c8:ed:ea:72:7c:ce:fe:62:91:11:43:56:
                    9b:6c:6d:39:85:8d:f8:f2:0c:85:88:5f:67:42:cd:
                    c6:80:5a:ef:3f:d5:9c:29:43:4b:9c:a6:e9:f4:9a:
                    64:8f:85:60:0c:4b:ed:33:7c:89:fe:ae:26:d0:98:
                    d3:64:d3:fb:c7:ad:6d:e8:26:70:a5:b4:3e:96:56:
                    ef:38:db:2e:aa:d3:a8:40:62:83:95:7c:ea:77:a2:
                    b6:8b:98:f5:da:e2:77:33:39:00:45:3a:44:e2:de:
                    fe:c1:58:3b:65:88:c7:6a:99:88:9f:ab:7f:e6:e2:
                    ca:06:d1:ee:e6:5a:94:82:4c:50:fc:40:51:5e:58:
                    3c:1a:cb:52:33:37:2a:56:77:18:a9:97:33:88:2b:
                    73:7e:31:a9:8c:37:44:dd:34:b2:2d:13:3b:9c:89:
                    cf:e2:f8:e5:31:59:48:64:10:df:1e:fa:5f:4e:ff:
                    95:4a:09:43:9b:9c:76:3f:7f:42:44:85:6f:24:f4:
                    40:69:62:a0:af:7e:38:01:5e:83:47:19:f7:87:6d:
                    ce:ae:40:aa:d7:f8:f1:b5:88:55:3c:c7:a9:6b:bf:
                    03:10:b3:b7:8b:41:a2:c2:67:c9:a7:7c:74:27:03:
                    56:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:27:5C:C5:19:02:AD:DA:C9:FF:9B:D5:64:F6:2F:89:48:66:DB:BC
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JidcxRkCrdrJ_5vVZPYviUhm27w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.148.248.0/23
                  93.170.5.0/24
                  95.46.159.0/24
                  95.47.36.0/22
                  95.47.234.0/23
                  95.47.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:a3:76:18:6a:29:0a:7d:f9:06:2f:78:9d:7e:46:81:ff:e5:
         fe:88:46:39:78:b8:12:83:2b:36:31:b8:b1:dc:92:f7:30:99:
         d1:27:cb:82:85:2f:44:25:79:c7:fc:4a:16:af:41:ca:49:a1:
         af:7f:8c:45:16:94:3b:a0:be:03:a7:55:88:62:6c:75:48:41:
         97:7b:7d:61:94:72:9c:cc:1d:92:e1:63:7c:16:3d:5c:19:75:
         9f:3b:f6:38:22:ac:9c:74:f6:0a:4d:ed:68:ac:c8:17:ae:b0:
         5a:2c:9c:51:a3:dc:14:eb:5f:ea:f4:5c:52:d6:9b:a7:03:a3:
         90:15:7d:de:e7:cc:fc:2f:17:b9:76:a5:a8:8e:40:c6:c2:a4:
         7e:02:1f:8e:ab:a1:0f:da:b7:62:9f:e0:f1:7d:3b:93:e9:22:
         ef:7d:29:30:d2:37:cd:32:ba:e5:60:95:c6:88:47:8d:99:63:
         ad:25:3a:e0:27:7b:44:8a:e6:21:be:e2:4b:27:18:96:41:64:
         85:db:5d:16:d5:af:d8:10:48:af:bd:c4:99:67:08:83:8d:bd:
         c9:08:71:e2:98:9a:fc:ec:c1:74:4d:0a:04:d0:7f:b5:21:90:
         fc:e5:1e:62:0e:e8:db:3c:38:3a:7e:90:3e:90:a3:c9:e8:18:
         5a:14:9f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:39 2026 by rpki-client