This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/JdkIQygmhQqcLnZC2_hEonjSX5Q.roa
File:                     JdkIQygmhQqcLnZC2_hEonjSX5Q.roa (raw, json)
Hash identifier:          S2ckYV6ssSGLHtxoF3cPRRAOhiSavGP1nolNPr7KzVg=
Subject key identifier:   25:D9:08:43:28:26:85:0A:9C:2E:76:42:DB:F8:44:A2:78:D2:5F:94
Certificate issuer:       /CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
Certificate serial:       019B7E385FD41C6696B070AA3984E615E90C
Authority key identifier: A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/JdkIQygmhQqcLnZC2_hEonjSX5Q.roa
Signing time:             Fri 02 Jan 2026 10:19:42 +0000
ROA not before:           Fri 02 Jan 2026 10:19:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61438
IP address blocks:        194.110.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:5f:d4:1c:66:96:b0:70:aa:39:84:e6:15:e9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
        Validity
            Not Before: Jan  2 10:19:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=25d908432826850a9c2e7642dbf844a278d25f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b2:8e:1d:ea:6f:b6:27:cd:e5:07:40:1e:b7:
                    21:25:16:17:cb:b9:52:88:55:59:c8:64:74:61:88:
                    b8:8a:f7:11:c9:b1:23:e2:2b:9c:e0:8a:62:52:8b:
                    cd:53:c2:2f:7f:b3:cc:7c:aa:0f:95:54:c5:c9:d4:
                    bc:ae:7b:50:5d:32:06:5c:47:bf:30:ec:8a:40:d6:
                    e5:06:79:30:97:9a:e5:11:8b:68:6e:a7:86:3e:81:
                    e5:98:aa:ed:f2:f5:f9:35:d0:30:7f:5c:5b:2d:39:
                    09:af:f4:7b:2a:56:88:96:fc:21:75:69:bb:3b:4d:
                    eb:49:c5:47:d0:b3:41:b0:6e:a2:bd:b8:e9:c1:e2:
                    92:b0:4a:c0:d6:d4:df:96:9c:ef:24:be:76:df:ba:
                    c4:f1:da:30:90:2b:7e:5b:3b:2b:c1:bb:36:f0:21:
                    b2:6c:5a:94:4b:3c:70:95:40:e6:6f:94:5d:a8:71:
                    29:77:04:b5:f9:0a:3c:f1:d7:23:5e:55:bc:2b:f9:
                    ff:fd:28:f2:3a:ab:1f:50:8a:ad:73:86:d0:49:78:
                    a9:c5:07:c2:76:6e:84:2e:ff:84:e7:11:b2:ac:3b:
                    f3:b8:86:7f:a7:29:c6:a8:d3:73:25:3f:c2:8b:53:
                    3b:00:08:a5:3d:51:6d:21:0f:a5:8b:a9:f6:40:ae:
                    b1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D9:08:43:28:26:85:0A:9C:2E:76:42:DB:F8:44:A2:78:D2:5F:94
            X509v3 Authority Key Identifier:
                keyid:A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/JdkIQygmhQqcLnZC2_hEonjSX5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:4c:f4:e6:69:b0:5f:c1:64:c0:6c:83:30:4b:73:1e:2e:37:
         58:25:dc:42:19:21:c6:25:87:56:7a:9e:4b:1c:4e:52:d3:25:
         32:7d:0f:d0:f4:12:7f:06:2a:82:84:48:6b:d0:7e:c9:81:b8:
         e0:fc:e9:06:4c:01:72:59:9b:a1:77:0e:1f:ca:97:fb:d9:6c:
         3e:3d:dc:e9:23:47:d0:75:69:d8:67:28:70:34:f5:17:d2:f5:
         10:93:10:8c:75:48:6b:6e:5c:7f:3c:9b:66:f3:b3:cc:87:d5:
         41:af:7f:27:3e:ff:c2:de:be:4c:3f:91:7e:6a:c8:be:8a:c1:
         96:c5:af:3f:0f:43:e5:e5:46:2b:93:ef:5b:d8:98:7f:8f:80:
         e0:db:bf:96:8b:af:e8:8b:58:06:99:f6:01:5c:fe:30:75:c3:
         da:08:c0:f5:cb:2d:ea:ca:aa:3e:ea:fc:bc:b3:9a:d7:16:60:
         64:1c:46:53:37:92:41:f7:9e:fb:c1:85:25:11:a1:a2:8f:7f:
         a2:6e:56:19:d5:28:a1:11:da:a4:0e:af:81:7c:fd:42:7e:8e:
         2a:1b:3d:53:14:82:d3:b1:ca:76:7f:39:52:9f:98:fa:a1:1f:
         29:fa:90:58:d7:63:9a:52:a7:db:b4:e5:52:2f:08:34:14:bd:
         57:47:c7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:25:04 2026 by rpki-client