This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/JvYuNd51thIM0_PpN5rrqN-qA3c.roa
File:                     JvYuNd51thIM0_PpN5rrqN-qA3c.roa (raw, json)
Hash identifier:          jxaxaHKzCd+Oi4exX3d2cHyHGVuQRbjPaeI/ES/giRQ=
Subject key identifier:   26:F6:2E:35:DE:75:B6:12:0C:D3:F3:E9:37:9A:EB:A8:DF:AA:03:77
Certificate issuer:       /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial:       019B7AC7E860A44FBDD100B9F1364A3FCD26
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/JvYuNd51thIM0_PpN5rrqN-qA3c.roa
Signing time:             Thu 01 Jan 2026 18:18:00 +0000
ROA not before:           Thu 01 Jan 2026 18:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     1149
IP address blocks:        145.100.118.0/23 maxlen: 24
                          145.116.218.0/23 maxlen: 24
                          2001:610:9000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:e8:60:a4:4f:bd:d1:00:b9:f1:36:4a:3f:cd:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
        Validity
            Not Before: Jan  1 18:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=26f62e35de75b6120cd3f3e9379aeba8dfaa0377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fc:61:67:dd:a1:de:fb:66:ab:5a:5e:63:6d:
                    fe:1b:51:8e:0c:98:63:fc:85:89:99:bb:c3:4f:40:
                    3c:3e:18:e8:e0:55:70:68:fc:62:bf:0e:28:cc:ac:
                    33:38:16:f1:ca:49:ae:36:c5:29:8e:24:c6:ad:fa:
                    b5:b3:bc:e4:dc:c4:d6:32:e0:78:51:9d:29:47:39:
                    93:e2:a7:ce:0d:cc:a4:1b:0d:e0:dd:71:7c:c2:18:
                    f8:a2:2f:bc:09:a8:f6:09:33:51:28:f4:0b:3f:32:
                    25:f2:e8:cd:c1:fb:67:5b:bd:8c:c7:41:82:8d:c6:
                    b7:54:62:da:d1:0f:40:97:f4:bd:9c:51:fe:ad:40:
                    f2:2d:54:09:59:e4:3c:e8:5f:ae:1e:b2:65:f9:6e:
                    8f:2d:a7:b1:f7:3e:d6:10:c2:92:07:14:c2:5a:23:
                    37:d7:00:cd:4e:58:10:98:6e:e3:49:50:9e:5e:5e:
                    b6:d9:2e:6f:97:e0:29:32:78:90:85:80:8d:fd:7b:
                    2a:d4:a1:33:46:95:c6:95:fe:70:aa:b9:e0:5f:94:
                    7e:ee:79:a8:04:8a:93:77:5a:8a:4d:be:df:6b:a0:
                    d2:4e:96:cd:c0:75:1e:73:01:a0:58:39:7e:c6:6b:
                    77:d0:31:e5:98:79:a6:90:a7:8c:3a:b8:ad:e8:e4:
                    75:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F6:2E:35:DE:75:B6:12:0C:D3:F3:E9:37:9A:EB:A8:DF:AA:03:77
            X509v3 Authority Key Identifier:
                keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/JvYuNd51thIM0_PpN5rrqN-qA3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.100.118.0/23
                  145.116.218.0/23
                IPv6:
                  2001:610:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:c7:04:3d:7e:f8:79:01:7a:c1:c8:84:a3:69:c2:ec:1b:43:
         6d:52:69:d6:c6:83:1c:ec:36:1b:9e:a7:be:ce:79:c0:5d:6e:
         0c:2b:cd:96:bf:c7:10:53:be:e2:b3:38:cf:67:3d:e7:0d:3a:
         5c:2a:f5:c9:b3:cf:57:36:4e:51:88:94:61:ba:be:46:bb:07:
         c3:c4:bf:28:0d:63:8b:4b:05:3a:40:a8:63:2d:ab:ab:63:bc:
         2f:d3:99:3a:0c:fa:10:0f:df:9e:17:9e:90:77:5f:ef:e6:02:
         16:21:4c:7d:70:f1:f4:bc:01:e1:6a:b8:a7:1c:15:9c:5e:05:
         ae:68:c3:cd:bf:87:03:fa:60:75:cb:ac:97:3d:36:29:4d:4d:
         21:ce:73:47:c9:59:ae:c8:8d:b7:86:ed:8e:92:fa:93:9d:7d:
         35:0a:03:ec:11:c5:51:0e:f1:7a:a1:f6:f4:9f:1c:84:bb:e6:
         1c:3a:c7:81:04:51:66:2c:49:b7:cc:6d:0b:91:f7:43:f3:ce:
         54:7d:a3:7f:17:c5:57:84:7e:8b:39:c8:b3:15:13:be:67:fd:
         0a:8b:26:51:3a:4f:49:c7:94:05:a7:fb:b1:36:eb:7b:5f:fe:
         33:a7:89:2a:1a:2e:e4:a7:ae:41:1c:96:02:a7:ef:b0:08:fa:
         6c:e4:99:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:17:17 2026 by rpki-client