This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/JJdlcP00n-vl-IODJxuYk18Mdzo.roa
File:                     JJdlcP00n-vl-IODJxuYk18Mdzo.roa (raw, json)
Hash identifier:          T/3imsOsQ3xZAtHnp5SO5AhI5eSsZh1hN11G3K1ZGXU=
Subject key identifier:   24:97:65:70:FD:34:9F:EB:E5:F8:83:83:27:1B:98:93:5F:0C:77:3A
Certificate issuer:       /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial:       019B7F15136CAF955A2E23B5D8C671376245
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/JJdlcP00n-vl-IODJxuYk18Mdzo.roa
Signing time:             Fri 02 Jan 2026 14:20:46 +0000
ROA not before:           Fri 02 Jan 2026 14:20:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210456
IP address blocks:        2a14:c380:510::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:13:6c:af:95:5a:2e:23:b5:d8:c6:71:37:62:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
        Validity
            Not Before: Jan  2 14:20:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=24976570fd349febe5f88383271b98935f0c773a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:48:8f:75:ea:4c:f2:c9:6a:21:92:52:a2:
                    85:0c:33:a0:27:e0:ef:64:38:bc:29:d4:a8:d5:04:
                    38:89:42:c6:6c:7a:82:08:18:6a:21:6f:02:c4:56:
                    6f:10:dc:e6:ff:e7:92:31:3a:1e:95:94:b8:69:a4:
                    a5:d2:7b:7c:e2:7c:39:64:26:b9:5c:37:ed:f4:a6:
                    aa:23:6a:b2:7f:67:11:bc:1c:60:3b:c0:f0:b3:4d:
                    e2:e1:52:e1:27:44:57:00:86:81:48:92:c8:88:93:
                    d8:42:41:77:be:a4:90:80:80:fc:92:6d:81:f8:88:
                    dd:ae:76:9c:d3:4a:0b:f1:6f:fb:b6:2e:24:d6:7d:
                    ae:6f:e6:07:8a:5f:b1:1d:a1:b2:f5:4f:ad:df:63:
                    72:39:d1:74:85:60:ed:c0:c1:70:b8:2e:de:d5:2c:
                    3c:4e:df:e0:8a:a7:d9:bd:ab:6a:88:cf:59:ef:ea:
                    89:34:6d:be:71:a3:9a:26:cb:82:aa:3b:f3:62:22:
                    39:0a:b4:e7:22:ca:e3:31:ee:e0:be:2b:6e:ec:d7:
                    c1:2a:90:22:9a:55:90:f3:fc:51:66:1e:61:7f:ad:
                    58:a9:1f:05:6b:ee:17:6b:7e:c1:ed:31:4e:40:e9:
                    39:f0:b4:a5:9c:14:19:c1:0e:db:88:bf:10:fb:0b:
                    74:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:97:65:70:FD:34:9F:EB:E5:F8:83:83:27:1B:98:93:5F:0C:77:3A
            X509v3 Authority Key Identifier:
                keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/JJdlcP00n-vl-IODJxuYk18Mdzo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:c380:510::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:38:b4:0a:99:5b:e3:e7:ea:02:1b:0a:c0:a9:c1:bd:20:64:
         e4:78:0b:3b:8c:13:3c:75:dc:8c:91:a2:45:02:da:39:fa:a4:
         8d:89:f5:78:50:8e:df:60:ef:a9:36:e4:87:a5:3f:1e:7d:cd:
         c2:d6:93:80:46:8f:f5:a4:50:e8:31:64:53:14:4f:e5:df:0b:
         6a:a0:ec:e6:8e:e7:de:30:a3:17:bb:c2:77:8a:b5:27:72:61:
         51:07:c4:dd:38:16:c1:99:fb:0e:7a:ba:c8:2e:41:c6:e1:c1:
         d9:f9:41:87:03:bd:5f:8b:b2:4b:bd:c0:b2:cc:04:fc:bf:f9:
         72:8e:c9:98:58:9e:f9:ee:9b:9d:50:75:6a:93:0a:66:79:9f:
         63:68:f0:ec:82:66:90:df:2e:d7:c5:7e:85:7f:32:d2:83:f8:
         45:5b:71:22:50:b6:18:0b:c7:4f:9e:1f:ef:7b:53:8b:a7:44:
         ee:0e:f9:e9:68:fd:66:ae:de:63:40:92:6a:58:4d:ca:64:e4:
         d4:b6:b3:0b:27:fe:1c:8c:55:d6:54:05:70:38:60:51:73:4f:
         74:da:d3:1d:f1:1d:6c:20:7f:09:ea:70:3b:26:98:67:40:f9:
         ce:11:7e:16:9b:e1:9c:f0:ce:88:05:b1:20:e2:53:f3:8d:19:
         84:ad:56:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:17:43 2026 by rpki-client