This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jJ3iBMsrV4WrcYaVoCwtgvKSMik.roa
File:                     jJ3iBMsrV4WrcYaVoCwtgvKSMik.roa (raw, json)
Hash identifier:          JyB3VBljqjnVhW3q2qpc1RWIEob+iAtHO2A+PDdzJ64=
Subject key identifier:   8C:9D:E2:04:CB:2B:57:85:AB:71:86:95:A0:2C:2D:82:F2:92:32:29
Certificate issuer:       /CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Certificate serial:       019B78A256049946E0A9FB9E0B4766B73D95
Authority key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jJ3iBMsrV4WrcYaVoCwtgvKSMik.roa
Signing time:             Thu 01 Jan 2026 08:17:43 +0000
ROA not before:           Thu 01 Jan 2026 08:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34762
IP address blocks:        62.193.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:56:04:99:46:e0:a9:fb:9e:0b:47:66:b7:3d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
        Validity
            Not Before: Jan  1 08:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8c9de204cb2b5785ab718695a02c2d82f2923229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d7:31:2e:ee:7b:38:29:e3:b9:66:e6:44:4d:
                    f8:b6:b8:99:fd:22:67:21:ce:f1:5d:19:47:6f:91:
                    fe:37:6f:a6:4e:bc:bd:88:20:25:49:1a:63:51:41:
                    71:1f:78:45:42:a3:71:bd:21:8d:66:f9:79:93:f0:
                    97:61:00:66:bc:65:77:8b:fc:89:32:4e:81:80:72:
                    f4:95:ba:6b:98:c5:a9:60:80:e3:01:23:f9:e0:e3:
                    24:5a:fa:15:0f:b4:6b:ae:2e:09:4d:4f:9f:86:b8:
                    83:54:0d:02:f9:7b:13:27:66:d3:2e:56:80:24:37:
                    10:58:fe:1c:b2:c3:46:30:d6:9e:33:d5:a1:1f:e7:
                    17:72:ef:77:3f:56:90:a9:59:38:54:7e:9c:eb:13:
                    be:87:ad:e0:01:ad:a9:12:0b:df:cc:d1:d3:29:56:
                    e4:b7:03:42:8a:53:65:3e:b3:9f:b6:91:43:9e:98:
                    40:e6:0f:f6:55:43:75:9e:ca:1e:c1:7c:6d:37:21:
                    0f:ef:7a:c3:64:ed:c4:42:7a:05:69:85:75:12:7a:
                    6d:5c:24:92:66:23:65:04:0f:44:24:5e:ea:79:f1:
                    4a:ef:67:f5:53:50:ef:fb:8f:39:19:dc:25:df:d7:
                    a6:c6:45:23:e7:99:c0:fa:47:14:f0:c4:27:24:1c:
                    1c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9D:E2:04:CB:2B:57:85:AB:71:86:95:A0:2C:2D:82:F2:92:32:29
            X509v3 Authority Key Identifier:
                keyid:8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jJ3iBMsrV4WrcYaVoCwtgvKSMik.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.193.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:1f:d2:a8:01:8d:66:d6:9c:da:a8:a6:b3:f0:27:f2:a5:52:
         c4:d9:96:c6:e8:8a:bf:3a:48:1d:26:1c:95:f1:46:8b:e4:d0:
         b5:1f:e3:bc:3c:13:6b:92:49:12:e3:d4:f0:51:dc:62:86:6f:
         8a:fc:9b:32:6e:3a:3b:1e:57:a1:6b:69:1c:62:aa:1a:3e:ed:
         5c:dc:f8:b3:f7:9d:9b:04:2a:b1:07:eb:01:9b:98:e5:da:e7:
         23:7a:54:20:57:e9:7d:d7:12:ab:3b:9d:fb:8f:a3:e2:fe:15:
         94:48:55:05:81:b7:b7:94:e4:97:5a:c5:3e:1c:55:3c:49:60:
         94:89:38:1c:9a:bd:18:59:82:0f:08:68:09:97:8c:0e:f9:81:
         ae:8a:aa:21:18:8e:7c:5d:ff:75:5c:6a:cd:f6:f1:b4:73:f8:
         57:a2:90:9d:25:a7:f4:f7:2a:de:65:17:24:70:57:24:90:c3:
         53:96:62:e7:09:7b:d0:7d:7a:cb:a5:f6:6c:b7:c6:af:b2:a3:
         7d:cf:86:c2:90:8f:c4:9c:b8:5a:8a:05:6d:8e:fc:21:2b:5a:
         2f:b2:49:cf:a4:97:25:95:e6:1a:89:5f:6c:43:d7:60:55:12:
         e7:cb:e5:42:82:2f:ea:ef:f3:c2:da:f0:7e:ea:55:cf:ac:5c:
         32:87:1d:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4olYEmUbgqfueC0dmtz2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlOGU5NzdhYmVmYTJhMWY5OTVlODljOTQ3ZmVmZDQ2MzZi
Nzk2MWMwHhcNMjYwMTAxMDgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzlkZTIwNGNiMmI1Nzg1YWI3MTg2OTVhMDJjMmQ4MmYyOTIzMjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdcxLu57OCnjuWbmRE34triZ/SJn
Ic7xXRlHb5H+N2+mTry9iCAlSRpjUUFxH3hFQqNxvSGNZvl5k/CXYQBmvGV3i/yJ
Mk6BgHL0lbprmMWpYIDjASP54OMkWvoVD7Rrri4JTU+fhriDVA0C+XsTJ2bTLlaA
JDcQWP4cssNGMNaeM9WhH+cXcu93P1aQqVk4VH6c6xO+h63gAa2pEgvfzNHTKVbk
twNCilNlPrOftpFDnphA5g/2VUN1nsoewXxtNyEP73rDZO3EQnoFaYV1EnptXCSS
ZiNlBA9EJF7qefFK72f1U1Dv+485Gdwl39emxkUj55nA+kcU8MQnJBwc+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIyd4gTLK1eFq3GGlaAsLYLykjIpMB8GA1UdIwQY
MBaAFI6Ol3q++iofmV6JyUf+/UY2t5YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam82WGVyNzZLaC1aWG9uSlJfNzlSamEzbGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mM2Q1NzItM2RjNy00YjQ2LTkyNjkt
M2MzMGEwYWQxM2Y2LzEvakozaUJNc3JWNFdyY1lhVm9Dd3RndktTTWlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mM2Q1NzItM2RjNy00YjQ2LTkyNjktM2MzMGEwYWQxM2Y2
LzEvam82WGVyNzZLaC1aWG9uSlJfNzlSamEzbGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPsHAMA0G
CSqGSIb3DQEBCwUAA4IBAQBoH9KoAY1m1pzaqKaz8CfypVLE2ZbG6Iq/OkgdJhyV
8UaL5NC1H+O8PBNrkkkS49TwUdxihm+K/Jsybjo7Hleha2kcYqoaPu1c3Piz952b
BCqxB+sBm5jl2ucjelQgV+l91xKrO537j6Pi/hWUSFUFgbe3lOSXWsU+HFU8SWCU
iTgcmr0YWYIPCGgJl4wO+YGuiqohGI58Xf91XGrN9vG0c/hXopCdJaf09yreZRck
cFckkMNTlmLnCXvQfXrLpfZst8avsqN9z4bCkI/EnLhaigVtjvwhK1ovsknPpJcl
leYaiV9sQ9dgVRLny+VCgi/q7/PC2vB+6lXPrFwyhx1Z
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:42:56 2026 by rpki-client