This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/J_4NzbDGUWUtUAumAH4qhCEqHsM.roa
File:                     J_4NzbDGUWUtUAumAH4qhCEqHsM.roa (raw, json)
Hash identifier:          zTyN8GQ8cWKwKUCuNPDPg8iSNZAxxiGcvMlzHM9FFkU=
Subject key identifier:   27:FE:0D:CD:B0:C6:51:65:2D:50:0B:A6:00:7E:2A:84:21:2A:1E:C3
Certificate issuer:       /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial:       019B7758D8012EEDAE2759C42A8FD3D0099D
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/J_4NzbDGUWUtUAumAH4qhCEqHsM.roa
Signing time:             Thu 01 Jan 2026 02:17:49 +0000
ROA not before:           Thu 01 Jan 2026 02:17:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215655
IP address blocks:        185.145.184.0/22 maxlen: 22
                          185.186.50.0/24 maxlen: 24
                          185.186.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 05:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:d8:01:2e:ed:ae:27:59:c4:2a:8f:d3:d0:09:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
        Validity
            Not Before: Jan  1 02:17:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=27fe0dcdb0c651652d500ba6007e2a84212a1ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:98:83:dc:a6:12:a5:ba:92:6f:07:27:2d:66:
                    09:92:7d:4f:99:78:78:c5:d3:7f:11:77:c0:85:d7:
                    8a:3d:02:32:c3:9e:e6:79:10:f8:4d:74:2c:13:96:
                    b8:dc:7a:0c:54:50:d3:b4:1b:9c:73:ea:04:1e:70:
                    e0:bf:46:62:76:ae:91:71:7b:d3:b2:29:23:75:ef:
                    01:23:81:80:75:c6:4c:02:84:28:72:2e:77:84:79:
                    9f:fc:e5:68:36:70:e5:0d:33:e9:f2:5d:1e:a5:f6:
                    70:33:b7:fa:02:c5:40:41:ea:97:7a:1e:ba:c3:83:
                    ab:d4:df:49:f9:bc:ba:81:31:f3:b8:58:24:0b:69:
                    5e:05:d4:5e:8d:b4:5b:3a:b6:12:79:b3:01:ca:bb:
                    7e:a8:09:0b:e8:77:19:1e:25:61:0b:50:7b:64:5b:
                    e6:fe:0d:fd:94:d4:2a:5e:41:26:d4:eb:85:c6:b3:
                    ce:5f:86:96:1f:85:fb:fa:4f:3e:64:0a:99:33:1d:
                    b8:8f:aa:38:66:0f:6b:ea:e8:b1:e4:e4:a6:6e:c8:
                    11:24:a1:3c:a7:ac:6a:9c:fe:79:07:72:61:f1:5f:
                    80:f3:99:09:b1:c3:f7:12:40:c1:6e:63:98:17:eb:
                    e1:e5:d9:09:f2:1a:2f:34:14:e2:1f:69:17:4b:0a:
                    ed:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FE:0D:CD:B0:C6:51:65:2D:50:0B:A6:00:7E:2A:84:21:2A:1E:C3
            X509v3 Authority Key Identifier:
                keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/J_4NzbDGUWUtUAumAH4qhCEqHsM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.145.184.0/22
                  185.186.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:c7:02:04:43:3b:76:b8:7b:26:31:32:26:7f:24:0f:0f:38:
         b5:c4:99:14:d0:95:73:89:29:0a:7a:64:6a:ba:06:dc:d8:76:
         c1:04:7d:4f:6a:a1:94:47:c4:1c:cc:c9:d8:83:5f:b0:eb:f1:
         d5:15:5b:e2:d7:d0:bf:3c:13:f9:e3:03:a9:b3:c5:e4:3c:d6:
         b3:c6:5d:53:51:53:60:3d:1d:78:f9:26:a3:17:2f:d0:aa:b2:
         28:8b:3a:98:38:78:e4:3d:2d:35:e9:06:65:c6:3a:b6:e9:a4:
         9e:77:67:d7:61:fb:07:8b:e1:3b:80:02:08:60:34:9a:1a:f1:
         31:51:2b:25:d8:b2:87:90:ab:e2:47:69:a3:e5:f2:7c:0a:ee:
         14:63:3b:9c:5a:95:12:b9:5c:ab:b3:a0:3d:d7:ae:8e:2e:e5:
         88:a9:da:5d:ad:2d:3b:d5:7b:ba:f8:40:fc:49:f0:4e:32:6a:
         69:8e:f1:5f:79:19:0b:14:10:58:89:e0:a3:15:a5:dd:28:39:
         a2:78:87:34:9b:c6:d3:74:af:09:36:2d:76:1e:10:8e:7c:58:
         96:bd:87:3e:e9:45:c0:c4:f9:59:41:e2:0c:95:05:52:f2:31:
         d7:ce:ca:2f:ca:4a:d7:28:03:9c:eb:56:51:1b:be:28:41:07:
         80:0e:33:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:40:07 2026 by rpki-client