This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/j51-vhqySrtPDmWytRuJdkGEvC8.roa
File:                     j51-vhqySrtPDmWytRuJdkGEvC8.roa (raw, json)
Hash identifier:          hWPfWXr9RPCgElnT55rpdjybwa6yeKeJ6tIi6IBtbEE=
Subject key identifier:   8F:9D:7E:BE:1A:B2:4A:BB:4F:0E:65:B2:B5:1B:89:76:41:84:BC:2F
Certificate issuer:       /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial:       019B7AC88C4C6E75E17DCBB87F59D32F1314
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/j51-vhqySrtPDmWytRuJdkGEvC8.roa
Signing time:             Thu 01 Jan 2026 18:18:41 +0000
ROA not before:           Thu 01 Jan 2026 18:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16276
IP address blocks:        185.12.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:8c:4c:6e:75:e1:7d:cb:b8:7f:59:d3:2f:13:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
        Validity
            Not Before: Jan  1 18:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8f9d7ebe1ab24abb4f0e65b2b51b89764184bc2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:46:04:e0:9d:82:90:36:5d:7e:d8:fc:ab:be:
                    ae:e4:d5:bd:bc:89:39:16:b5:ad:a7:36:a0:1c:2b:
                    ef:3c:80:9e:1c:8f:7c:cd:2c:ab:c9:f1:83:c3:36:
                    66:13:4f:9b:73:7a:fa:d4:8e:65:7f:2f:6e:9d:9c:
                    8f:23:b2:67:a8:a5:2b:11:60:75:f1:e3:ba:73:bf:
                    a9:76:1f:26:02:1c:6e:73:7f:d5:ff:8c:fd:04:67:
                    7b:ed:fe:68:d6:16:40:69:e0:a8:9e:b5:2d:e2:74:
                    76:d4:a5:80:41:c5:b3:58:c9:41:59:8e:b5:c9:a9:
                    95:4b:bf:a1:e6:9a:a8:e7:2b:97:41:00:4d:5d:89:
                    58:00:d7:e1:ae:3e:f6:f2:c1:c7:27:2b:68:d1:3b:
                    55:56:bc:06:0f:a1:e9:17:df:1c:30:65:49:4d:a8:
                    19:9f:be:6c:7e:47:af:d4:0f:f4:e7:f9:c0:f6:26:
                    86:80:68:b6:a2:08:2e:f6:9c:98:01:5a:f6:d9:4f:
                    2f:fd:a5:4b:f2:b0:1e:53:9a:03:2c:cc:98:a1:61:
                    12:88:3b:f4:34:ad:9a:b0:62:6a:08:5a:71:b5:09:
                    2e:39:54:2d:c5:dd:ae:0d:de:b2:53:23:d1:d5:b3:
                    54:c4:31:aa:99:68:42:48:8b:e1:f5:fb:58:bb:93:
                    90:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9D:7E:BE:1A:B2:4A:BB:4F:0E:65:B2:B5:1B:89:76:41:84:BC:2F
            X509v3 Authority Key Identifier:
                keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/j51-vhqySrtPDmWytRuJdkGEvC8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.12.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:c3:76:1c:36:38:42:b3:d3:14:f5:8f:81:b5:30:da:f5:c1:
         00:75:43:e5:7d:59:1f:8e:30:11:4d:e6:b3:d0:e1:27:95:b8:
         85:d5:4c:19:b6:ac:66:9c:42:87:8b:1a:2f:18:c3:66:49:16:
         c1:a7:60:45:3f:d7:47:3a:62:06:98:d5:ee:37:75:f4:d3:9e:
         54:1a:74:94:f8:ac:42:90:f0:46:64:70:ba:46:c5:76:95:6b:
         b2:c6:2c:75:53:3b:ed:20:2b:44:14:21:3a:45:92:23:d9:dc:
         a1:85:da:58:b5:69:08:22:3e:ce:83:b4:9f:db:de:f9:fd:2b:
         5c:51:42:a0:a5:25:da:38:04:23:8f:2d:aa:38:83:c2:ae:9e:
         57:86:07:f5:47:13:4c:57:09:af:3e:91:09:c0:49:03:d7:c2:
         a3:1b:85:84:97:ac:f3:42:f7:ed:0f:44:22:5c:1b:d3:2c:85:
         e6:ff:1c:b5:1b:79:0a:41:3c:4e:06:3b:2c:a7:38:4f:e2:38:
         34:76:41:ca:a3:20:b5:19:62:ac:3d:65:94:4b:2a:ab:f0:5f:
         c8:09:ea:43:1c:07:bb:fa:be:a5:58:bc:6d:4b:80:8e:53:4c:
         79:9d:c7:88:0b:74:fe:7a:55:d7:d8:77:8d:ee:a0:cf:80:f2:
         90:01:6d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:19:07 2026 by rpki-client