This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/a_JeuiZjb_A9jIUoJNFCsdyE2LU.roa
File:                     a_JeuiZjb_A9jIUoJNFCsdyE2LU.roa (raw, json)
Hash identifier:          1t3bwzQMJzq4XFVJW9/kvGIHOhZEhjPqK7BQuk4SeFA=
Subject key identifier:   6B:F2:5E:BA:26:63:6F:F0:3D:8C:85:28:24:D1:42:B1:DC:84:D8:B5
Certificate issuer:       /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial:       019B79100AAB4FF7CD14CBEC4F48B54EFDD4
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/a_JeuiZjb_A9jIUoJNFCsdyE2LU.roa
Signing time:             Thu 01 Jan 2026 10:17:33 +0000
ROA not before:           Thu 01 Jan 2026 10:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49972
IP address blocks:        194.32.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:0a:ab:4f:f7:cd:14:cb:ec:4f:48:b5:4e:fd:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
        Validity
            Not Before: Jan  1 10:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6bf25eba26636ff03d8c852824d142b1dc84d8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:21:bc:55:9b:34:29:e8:db:6a:5a:f4:ca:5a:
                    93:0d:24:64:9b:08:71:b3:b3:57:44:18:88:d7:ca:
                    31:dc:c6:fe:76:bc:b4:91:58:42:f5:97:ae:e6:14:
                    ec:d9:11:5d:23:b0:a4:d2:7a:df:e4:0c:12:41:98:
                    e8:98:3c:05:c8:4e:6b:e8:23:d5:6e:61:d4:9c:bb:
                    06:da:85:9b:76:b5:a7:34:26:ed:61:0c:61:7f:e7:
                    83:5a:05:2e:a9:af:3d:2a:c8:d8:9a:1b:4d:a4:6e:
                    51:48:d4:35:c0:b6:be:ea:c0:b4:d3:23:8c:4a:e2:
                    9a:e0:ff:5a:54:bc:66:f3:d9:1c:e0:a3:32:bd:41:
                    f6:d8:a1:81:b2:5f:e3:a5:0d:a4:7b:01:00:40:38:
                    51:fc:60:b7:38:39:55:86:54:8b:c3:db:9d:3c:d1:
                    31:df:5d:af:6b:97:5e:d6:56:fd:d3:c9:bb:f5:d1:
                    49:ab:80:8e:91:9c:b6:cd:3f:67:c3:c0:c3:86:bd:
                    33:8c:42:cb:00:77:f8:37:fe:00:40:bd:3a:ea:63:
                    ec:44:6b:cd:b1:8d:ff:c0:c9:ac:92:19:37:f7:50:
                    c6:ff:b5:d4:80:0a:1b:16:cf:17:54:c5:45:27:6d:
                    aa:03:cd:5f:15:e5:81:da:6d:66:94:78:f8:f6:bf:
                    57:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F2:5E:BA:26:63:6F:F0:3D:8C:85:28:24:D1:42:B1:DC:84:D8:B5
            X509v3 Authority Key Identifier:
                keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/a_JeuiZjb_A9jIUoJNFCsdyE2LU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.32.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:39:99:1b:05:10:56:de:90:f6:a1:09:7d:f2:72:9f:bb:c2:
         f6:42:d9:d3:39:90:b2:70:1d:02:0a:d1:92:25:23:86:f4:bd:
         fb:f5:28:08:c6:a5:db:5b:88:ba:20:c8:18:77:f7:fc:f5:83:
         92:2c:5f:82:13:5e:f5:f8:69:60:1f:88:da:9d:9a:fa:11:3e:
         79:84:83:f5:3e:66:cd:59:67:df:63:8b:77:39:c8:e4:95:4b:
         b7:99:34:c6:01:01:bf:dc:18:14:46:64:a7:8b:d8:21:80:83:
         be:ca:5d:02:e3:d3:27:81:3e:04:4d:5b:a0:51:de:91:c8:64:
         ac:8e:1e:e3:d7:b7:72:34:b1:ce:17:2f:5b:b1:29:7d:7d:bc:
         0e:9c:5c:de:f7:11:2f:dd:65:bb:93:47:eb:4c:c5:1d:15:65:
         3d:11:5f:9f:b4:5c:a7:01:f6:25:e8:b8:06:5c:89:45:07:e5:
         ca:5c:5f:50:d8:46:a6:69:fd:15:75:1d:5f:eb:63:11:68:96:
         c6:dd:7a:92:b9:34:31:9b:de:68:16:73:f2:58:e5:4e:a0:32:
         8d:33:97:65:c2:96:09:15:92:36:5f:da:a0:f8:a2:8a:aa:17:
         09:b8:74:a5:05:cc:77:a4:1c:f4:36:68:64:06:3f:eb:6b:b9:
         16:ab:bd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:20:20 2026 by rpki-client