This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/JleZX8if8WA6QvsWXYtqxQfBCcs.roa
File:                     JleZX8if8WA6QvsWXYtqxQfBCcs.roa (raw, json)
Hash identifier:          1ll4zDHOZ05sGRKZZ3BGPEykyJEMaM9UeWgswVdnjIU=
Subject key identifier:   26:57:99:5F:C8:9F:F1:60:3A:42:FB:16:5D:8B:6A:C5:07:C1:09:CB
Certificate issuer:       /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial:       019B7EA7094BC137140B43BDB03AF3974954
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/JleZX8if8WA6QvsWXYtqxQfBCcs.roa
Signing time:             Fri 02 Jan 2026 12:20:34 +0000
ROA not before:           Fri 02 Jan 2026 12:20:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200993
IP address blocks:        2a01:ecc0:6f4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a7:09:4b:c1:37:14:0b:43:bd:b0:3a:f3:97:49:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
        Validity
            Not Before: Jan  2 12:20:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2657995fc89ff1603a42fb165d8b6ac507c109cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1c:33:56:3f:1b:0d:08:61:eb:d1:d5:c9:48:
                    29:19:ce:44:e7:df:61:1a:2c:0a:87:4c:59:c4:ab:
                    be:b3:a6:03:ee:bc:34:8c:b5:13:af:cd:25:e7:d9:
                    77:97:2b:f0:45:b7:eb:cf:e6:ef:8c:2b:f3:3e:3d:
                    c2:1c:fd:30:23:3e:30:42:cb:c0:63:bd:8c:ad:01:
                    74:52:73:a2:26:21:28:f9:8e:cb:35:c9:c2:b7:db:
                    81:8a:38:3f:d3:14:a2:ef:3a:aa:e6:92:9b:35:00:
                    40:82:7d:70:cc:9c:42:f5:5d:e6:40:7e:37:be:a4:
                    2b:a2:a8:12:10:53:2e:0f:ff:37:6f:d3:b9:2c:b0:
                    ec:56:ae:59:fc:a1:f8:43:9c:26:bd:d1:21:d2:a7:
                    31:eb:de:89:15:38:e7:e4:7b:c1:01:97:cf:eb:0c:
                    e4:79:bf:cd:3a:3a:59:65:a9:da:16:77:36:06:52:
                    ff:64:ed:e9:06:78:61:bd:32:20:f0:99:ff:b7:7a:
                    d4:d1:5e:f7:f9:9d:1f:36:d4:9b:68:97:d2:a9:2f:
                    15:6d:e2:aa:7b:b3:a4:e7:54:c2:8d:5e:35:b8:53:
                    ee:78:3b:1a:03:6d:55:c5:79:ef:7a:72:24:35:14:
                    73:b1:50:29:c2:cb:94:e1:c5:25:78:25:18:13:fb:
                    0b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:57:99:5F:C8:9F:F1:60:3A:42:FB:16:5D:8B:6A:C5:07:C1:09:CB
            X509v3 Authority Key Identifier:
                keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/JleZX8if8WA6QvsWXYtqxQfBCcs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:ecc0:6f4::/46

    Signature Algorithm: sha256WithRSAEncryption
         81:8c:9b:86:54:5e:1b:ef:f6:c5:70:8d:cd:6a:a8:ed:90:ad:
         f3:c7:1f:ca:a5:0c:52:a0:07:62:9d:d9:b5:54:1e:6f:d0:79:
         a0:f1:b6:c6:6b:8a:94:52:58:32:fd:63:8e:11:67:45:2c:c7:
         47:03:5a:a0:7f:a2:a8:be:6c:ba:ad:a3:59:b9:98:53:3b:10:
         3e:e5:a3:44:fb:85:c8:f9:37:c9:1f:1f:40:3b:8c:05:ae:40:
         36:18:4e:9f:1c:64:e4:45:be:58:72:45:ad:97:a0:c1:46:67:
         c0:7c:6c:73:99:17:17:4a:b9:36:bd:bd:dd:62:d0:67:ed:bf:
         34:ae:4a:8c:d3:13:33:bb:ce:69:a0:b0:e3:80:f3:e8:58:00:
         32:98:02:81:91:65:4d:e8:16:2a:5c:0c:9c:55:0e:79:48:6b:
         05:92:a8:c0:5a:54:54:3b:1c:63:5f:70:9d:1a:3b:6a:6b:f8:
         b9:cc:00:f7:ca:f6:b4:d6:bc:60:ae:a7:b6:3d:2c:e1:5e:dc:
         a9:6c:31:1f:b2:74:d0:bb:4e:26:5f:55:1b:5b:18:ba:bf:53:
         00:a0:95:fb:c0:94:ab:07:50:86:a1:cc:ba:2b:e2:f1:7f:42:
         45:d8:ab:fd:29:a3:06:c0:6a:98:b0:5b:4c:2b:4f:14:e1:e4:
         41:a7:5a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:47:55 2026 by rpki-client