This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/jXBLpOdrpSK1mQdwZkoyJdJEfVI.roa
File:                     jXBLpOdrpSK1mQdwZkoyJdJEfVI.roa (raw, json)
Hash identifier:          qJzUahRGOfAEVZDxyvqsA7Ss9HiymeHgWnFp8HMjVVs=
Subject key identifier:   8D:70:4B:A4:E7:6B:A5:22:B5:99:07:70:66:4A:32:25:D2:44:7D:52
Certificate issuer:       /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial:       019B78A331E8C9D9EE68BFE0C6B1EC43CEBF
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/jXBLpOdrpSK1mQdwZkoyJdJEfVI.roa
Signing time:             Thu 01 Jan 2026 08:18:39 +0000
ROA not before:           Thu 01 Jan 2026 08:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     398779
IP address blocks:        5.183.78.0/24 maxlen: 24
                          45.14.114.0/24 maxlen: 24
                          147.189.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:31:e8:c9:d9:ee:68:bf:e0:c6:b1:ec:43:ce:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
        Validity
            Not Before: Jan  1 08:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8d704ba4e76ba522b5990770664a3225d2447d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0e:14:e6:2e:1c:c1:4e:90:b6:82:75:12:95:
                    5c:da:fb:51:fc:2c:74:cd:3b:9e:38:75:29:33:49:
                    a5:cd:09:d6:8c:60:a3:29:e6:1d:29:b4:0a:4a:a6:
                    01:e2:f6:a8:0d:22:2c:40:36:fc:a3:ab:3f:ae:77:
                    aa:ee:1e:bf:7d:b0:d9:79:cc:8d:55:51:57:cf:5d:
                    27:96:93:a6:cd:69:39:85:69:7d:6d:31:c0:eb:e2:
                    b1:c1:e1:30:75:b1:04:a9:8e:46:90:1f:50:a5:36:
                    30:96:84:85:87:54:84:4e:fb:6d:4b:1d:c7:14:1b:
                    eb:ac:42:b4:09:a4:11:f4:38:28:35:a5:06:a6:65:
                    7e:91:e0:bc:2e:a8:66:13:d3:39:c3:ac:f8:3b:96:
                    37:d7:06:76:15:6a:91:fc:05:d7:96:7c:7d:e5:56:
                    51:df:49:76:d5:aa:1b:b9:1e:1b:1d:6a:30:07:f0:
                    02:f2:f1:56:39:1b:0b:c2:13:78:20:03:ff:26:2f:
                    19:63:86:bf:f0:ac:dc:d6:37:7e:e5:a6:94:22:86:
                    24:f1:72:47:d8:bc:19:7a:3b:e3:31:db:9d:c5:15:
                    b5:79:90:9f:8d:02:7c:52:36:6a:3b:1d:f8:e0:72:
                    86:8f:e6:e3:8c:6b:11:01:df:5c:49:96:61:34:fd:
                    2a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:70:4B:A4:E7:6B:A5:22:B5:99:07:70:66:4A:32:25:D2:44:7D:52
            X509v3 Authority Key Identifier:
                keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/jXBLpOdrpSK1mQdwZkoyJdJEfVI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.78.0/24
                  45.14.114.0/24
                  147.189.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:9e:25:6b:52:0a:00:dd:04:34:21:56:35:02:5d:25:5f:79:
         9a:be:39:e3:39:01:1f:2f:2f:f9:22:63:e5:92:1d:fd:0c:fa:
         59:2e:97:5e:ba:3f:54:0c:cd:90:d8:a9:01:81:79:e2:6b:a1:
         8d:5e:b1:b6:e9:c9:d2:8e:00:67:4c:9b:4b:95:3d:5e:9f:5d:
         c5:7d:48:86:05:8c:ea:d7:dc:37:df:64:14:a3:68:d7:df:c5:
         9c:b1:72:6c:c3:fc:ef:c6:1a:2f:4f:14:03:17:db:31:03:94:
         29:79:be:da:eb:d5:33:30:82:37:c6:e4:f9:71:b7:ef:f1:35:
         e0:13:a1:b3:d0:91:e2:2d:9e:61:27:d9:a2:87:2b:35:3f:5a:
         db:ca:67:39:02:33:d0:9c:99:e2:96:67:7f:da:77:39:52:77:
         02:3d:85:93:ca:66:7d:ad:72:a8:b4:c4:0f:5b:80:22:fd:ae:
         c3:7c:a0:e7:ba:20:06:d0:84:7a:79:8c:cd:ee:af:30:40:98:
         70:02:a1:47:4f:af:6b:a3:b1:ed:ee:a5:bb:b4:6c:3d:ac:11:
         2e:2a:98:c0:dd:fb:b2:fe:e7:f5:1c:3e:75:76:42:6b:1a:8b:
         9f:e6:b0:b9:52:5a:58:a3:0e:06:2e:0e:fa:05:da:99:6a:98:
         61:36:dc:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:36 2026 by rpki-client