This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jaBG7e9Cb4KBqFZY1U62rAci_ls.roa
File:                     jaBG7e9Cb4KBqFZY1U62rAci_ls.roa (raw, json)
Hash identifier:          FJmJRU9u8joLPmDJQpVlYHO82qpK/PwuXfnAZz3bSv4=
Subject key identifier:   8D:A0:46:ED:EF:42:6F:82:81:A8:56:58:D5:4E:B6:AC:07:22:FE:5B
Certificate issuer:       /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial:       019B7C118AFD860ED3ADC5DE46ED4C3F34F9
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jaBG7e9Cb4KBqFZY1U62rAci_ls.roa
Signing time:             Fri 02 Jan 2026 00:18:03 +0000
ROA not before:           Fri 02 Jan 2026 00:18:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215939
IP address blocks:        46.151.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:11:8a:fd:86:0e:d3:ad:c5:de:46:ed:4c:3f:34:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
        Validity
            Not Before: Jan  2 00:18:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8da046edef426f8281a85658d54eb6ac0722fe5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:27:a6:5e:ed:04:02:f8:3b:5f:be:d4:e8:a6:
                    aa:c6:9f:19:8c:77:b4:d1:7d:9e:74:4f:87:7a:45:
                    5a:d4:be:ab:b9:ab:c6:95:1a:f2:4d:20:8e:19:37:
                    cd:54:92:ca:2d:82:e8:c8:cf:e3:00:e0:9f:6d:e0:
                    2d:ff:22:20:77:c9:61:06:33:76:80:fe:fd:56:45:
                    44:67:84:36:48:16:01:fe:c3:2b:a7:3a:69:67:58:
                    ca:03:c9:38:df:bc:64:89:b4:0d:39:d2:46:67:49:
                    5b:26:b2:1f:9c:7c:d1:0c:be:7f:2c:28:ea:02:e4:
                    b1:a8:20:f2:fa:99:03:89:48:b7:df:63:c7:a1:c0:
                    44:3e:6f:d0:2e:27:47:99:e7:ab:0e:7b:47:56:fd:
                    2f:21:62:82:54:f4:f8:48:a7:1e:d3:be:16:af:a6:
                    d0:8f:50:27:cd:b3:87:01:9e:b8:7d:e1:a1:85:11:
                    70:0c:87:8e:12:00:e5:c6:2e:05:29:44:38:57:8c:
                    be:3c:77:9f:4c:2c:a2:71:97:94:0f:89:33:c8:48:
                    bb:aa:a5:17:bd:67:0b:ee:11:ca:2e:b6:b7:cd:53:
                    64:b2:1a:af:f5:60:31:24:10:90:ae:c3:fb:45:64:
                    be:b6:08:00:ad:64:f8:8c:79:b3:28:54:d4:73:59:
                    7a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A0:46:ED:EF:42:6F:82:81:A8:56:58:D5:4E:B6:AC:07:22:FE:5B
            X509v3 Authority Key Identifier:
                keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jaBG7e9Cb4KBqFZY1U62rAci_ls.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.151.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:04:32:07:6e:27:16:72:29:43:da:15:5f:24:d2:e0:b1:03:
         cc:35:a3:31:65:b1:85:9d:6f:5e:7a:94:c4:a4:0d:a0:c1:32:
         49:06:c6:33:20:7c:b7:02:e1:76:aa:24:7f:cc:47:9f:70:82:
         7e:b7:04:69:28:52:f8:6e:77:54:99:65:92:07:05:b6:91:49:
         10:37:6b:06:08:ae:44:61:c4:c4:37:5e:ca:67:f0:0a:3d:5c:
         58:d6:ba:ef:29:e1:b9:42:fd:13:d0:1a:07:bb:7c:64:5f:0d:
         1a:e4:2e:fe:81:d0:4d:2a:cd:9f:39:07:59:00:7c:d4:bc:9c:
         b1:a4:1c:46:a9:e7:22:7a:a5:77:a4:88:1b:72:a9:22:9b:f2:
         b5:5f:c1:9a:f7:1f:d1:f9:ce:3b:27:05:65:1d:07:2d:6b:4a:
         5c:52:55:44:5d:93:81:14:d7:1e:13:02:5c:9f:d7:46:e4:a5:
         75:2b:d0:e4:a2:32:36:62:9d:84:b7:3d:c9:3b:fb:75:f0:3f:
         99:ae:d3:46:a0:a9:1b:40:43:14:c4:1e:53:d0:aa:da:64:be:
         e4:1d:0d:0f:73:3a:40:e7:ef:9d:b2:49:e3:10:6f:2d:3f:0e:
         18:04:a4:76:23:5d:fa:f4:6f:df:5f:ec:58:49:0d:da:93:e0:
         b0:02:3c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:47:39 2026 by rpki-client