This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/JslllbuBBWaveRZsknAxYhnBPhA.roa
File:                     JslllbuBBWaveRZsknAxYhnBPhA.roa (raw, json)
Hash identifier:          ZPZhBFxLc530f+/x6pzNFu+JLtKsp65XN0aOwL7Kaj4=
Subject key identifier:   26:C9:65:95:BB:81:05:66:AF:79:16:6C:92:70:31:62:19:C1:3E:10
Certificate issuer:       /CN=e91ef22adaa16d53dcf637c569f4131f26215b91
Certificate serial:       019B7A5A99185987BE0A580393C4F3DB0C4A
Authority key identifier: E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/JslllbuBBWaveRZsknAxYhnBPhA.roa
Signing time:             Thu 01 Jan 2026 16:18:36 +0000
ROA not before:           Thu 01 Jan 2026 16:18:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216139
IP address blocks:        88.210.20.0/23 maxlen: 24
                          130.49.160.0/22 maxlen: 24
                          185.216.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:99:18:59:87:be:0a:58:03:93:c4:f3:db:0c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e91ef22adaa16d53dcf637c569f4131f26215b91
        Validity
            Not Before: Jan  1 16:18:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=26c96595bb810566af79166c9270316219c13e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:14:b9:b3:85:23:9e:cc:48:8d:e8:f6:63:32:
                    f2:66:7e:9f:4b:f5:a1:18:e5:ed:bf:bc:16:21:5c:
                    af:86:69:28:4a:88:af:07:fa:56:57:18:2a:2e:e5:
                    94:1d:e1:ba:4e:0a:8b:c3:34:0f:68:f3:53:a4:75:
                    34:91:2b:a1:cb:3b:3d:81:65:81:cd:99:8f:17:a5:
                    55:e2:4c:c6:76:85:05:c7:0f:27:62:c1:3d:09:c7:
                    af:47:b0:93:c3:1d:27:92:13:b0:0f:38:7f:dd:5d:
                    1f:c6:98:30:f8:36:3c:de:80:ff:92:88:d6:d1:c6:
                    fe:78:02:b9:6e:32:8f:d8:a9:85:80:4b:d7:4f:a8:
                    34:a0:07:52:36:40:13:d3:4e:4b:07:c6:ac:c6:39:
                    06:cd:53:7c:34:40:40:9f:0b:58:d1:ec:49:12:f5:
                    89:9a:33:26:8c:f5:ea:d9:70:5b:7f:6e:ff:bf:99:
                    1a:18:ed:40:79:c9:64:f5:63:92:93:4c:97:72:53:
                    50:08:40:14:fe:bc:eb:18:ff:f5:19:57:48:65:3a:
                    eb:4b:46:c8:6b:9d:31:0d:a1:dd:d5:ce:82:15:4f:
                    ca:be:18:2d:02:de:a1:27:07:52:18:33:20:09:b6:
                    cf:7c:5b:bc:9e:41:7d:82:dd:c1:c3:be:27:3f:e2:
                    d6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C9:65:95:BB:81:05:66:AF:79:16:6C:92:70:31:62:19:C1:3E:10
            X509v3 Authority Key Identifier:
                keyid:E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/JslllbuBBWaveRZsknAxYhnBPhA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.210.20.0/23
                  130.49.160.0/22
                  185.216.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:c5:1d:17:68:04:a5:7c:93:00:75:1e:ce:2d:21:c2:01:57:
         82:47:5e:99:d9:62:08:de:29:f8:b5:db:ee:61:7d:2b:b6:50:
         81:53:50:a1:45:1c:d7:3e:38:97:b6:7c:0c:73:94:ab:0c:63:
         b9:e9:89:66:61:21:bc:22:c1:b2:36:2d:74:92:fe:bc:df:d0:
         7e:1b:57:e4:e2:dd:36:05:2d:51:78:f1:a6:b7:b2:ee:0f:6e:
         4c:29:42:58:7f:df:a3:20:3c:8a:64:86:ad:49:1b:0c:0d:ab:
         55:a5:82:c5:cc:45:53:84:de:70:24:03:4d:c0:7c:a1:7b:15:
         d2:d6:09:d9:3e:68:9c:12:bc:8e:12:8c:c7:9c:45:03:43:f3:
         31:83:4e:e4:2e:fa:0d:47:b3:0a:3d:b9:ae:db:ad:38:b0:8b:
         76:b6:d0:1f:47:1c:09:62:d4:d8:4e:f8:76:d8:a4:e9:8d:df:
         f8:ce:3c:1d:50:71:09:d6:40:ef:67:ec:c7:03:24:7c:33:99:
         03:c4:e2:1b:6e:41:7c:df:5e:86:ae:eb:48:ca:85:76:b2:9e:
         f3:28:63:f9:47:b4:6f:c2:46:37:03:4b:2e:56:92:68:ba:79:
         64:56:51:f7:37:ad:a4:64:4e:78:71:ec:13:81:e1:2f:96:de:
         ad:4d:74:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:16:10 2026 by rpki-client