This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/jPMCixDvfVo9glBXbNMOz86F-rU.roa
File:                     jPMCixDvfVo9glBXbNMOz86F-rU.roa (raw, json)
Hash identifier:          yq4kSM4l08bAj6xNIMbu+OFNBQBF0qIIeLACLieVs2o=
Subject key identifier:   8C:F3:02:8B:10:EF:7D:5A:3D:82:50:57:6C:D3:0E:CF:CE:85:FA:B5
Certificate issuer:       /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial:       019B76EBAA7F9B6A97E38FBEB3335D0DB4A4
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/jPMCixDvfVo9glBXbNMOz86F-rU.roa
Signing time:             Thu 01 Jan 2026 00:18:34 +0000
ROA not before:           Thu 01 Jan 2026 00:18:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208601
IP address blocks:        62.228.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:aa:7f:9b:6a:97:e3:8f:be:b3:33:5d:0d:b4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
        Validity
            Not Before: Jan  1 00:18:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8cf3028b10ef7d5a3d8250576cd30ecfce85fab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:4e:b6:af:02:ef:bc:0d:98:14:7c:78:5a:
                    90:5b:50:15:11:b1:ed:6e:ce:a1:82:82:a7:e5:82:
                    30:0f:d2:c3:08:af:5e:79:76:07:7f:d3:c0:0b:f9:
                    10:1c:e9:89:c1:89:d5:b8:39:18:c2:39:de:c0:69:
                    27:16:a9:1c:23:89:8d:1e:8d:2c:79:08:25:af:4e:
                    ee:7e:54:97:cf:a1:63:ce:21:0d:5b:d7:b6:34:fb:
                    73:a3:50:be:c8:9d:b2:e2:6e:37:9e:50:db:9c:dc:
                    6c:f4:b3:5e:6e:c8:19:c6:82:1f:69:b9:f6:23:e8:
                    4f:60:ea:b2:23:98:93:3a:d0:92:19:e1:cf:d6:67:
                    aa:b7:89:ea:c6:14:3b:38:37:27:a9:29:7e:d6:3e:
                    28:10:3f:b0:0c:82:ed:ab:c3:0d:16:3e:57:47:e8:
                    1b:20:15:83:a8:9f:37:a9:3e:12:8b:e0:13:af:02:
                    a3:cb:5e:a2:1e:f7:ad:67:b5:ca:95:5a:63:24:a9:
                    38:08:be:eb:e6:6a:05:6d:21:8a:95:80:c7:75:33:
                    6e:cc:20:05:ff:12:db:5f:d0:72:14:77:8d:8d:50:
                    06:98:33:e6:b9:5e:09:42:22:5d:74:56:4b:84:11:
                    e1:43:d3:5b:5b:18:63:47:77:96:cb:a4:89:83:8f:
                    ea:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F3:02:8B:10:EF:7D:5A:3D:82:50:57:6C:D3:0E:CF:CE:85:FA:B5
            X509v3 Authority Key Identifier:
                keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/jPMCixDvfVo9glBXbNMOz86F-rU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.228.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:49:c5:ca:15:fe:e2:bc:b7:c8:4a:f3:0e:57:54:7a:88:32:
         90:37:ab:b4:2e:12:ea:21:2a:17:dd:6a:75:56:8a:ff:3c:1c:
         6c:33:0d:8b:7d:c4:b1:b4:b5:1d:ee:2b:0a:6e:87:08:81:74:
         4b:33:56:87:50:c0:bf:57:ab:60:b1:82:76:7a:32:3c:1c:46:
         78:e0:f3:1b:5a:ea:0c:44:13:2e:44:dd:3f:29:f2:6f:d9:99:
         10:7a:df:68:a6:77:93:39:12:b8:4c:17:88:fc:1a:78:9b:f5:
         16:b7:45:04:1a:5d:1b:3e:2b:fb:a8:c1:b2:ce:c9:f2:f3:0e:
         50:1a:31:9d:43:ea:d8:8f:9e:ea:08:32:e5:29:2a:52:a6:3c:
         db:a4:0d:d4:6e:7f:1b:28:23:9a:c3:6a:e9:26:60:c1:e7:95:
         e0:c0:d6:86:93:42:b8:57:e0:f4:48:72:70:8d:ba:cc:a5:57:
         95:b0:4a:c2:20:ee:e5:08:db:da:2f:65:04:01:64:53:8e:e7:
         ae:cd:95:b5:f5:04:e2:a6:b3:ff:75:2a:c2:e8:31:a8:1c:ea:
         84:23:98:7b:b8:fa:d3:b7:1c:3a:8f:81:39:02:be:b6:76:49:
         ea:69:ef:a4:45:88:19:a9:ac:a2:56:f3:a7:90:d9:83:fe:79:
         4e:18:c4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:01:01 2026 by rpki-client