This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/sjVifTsqCFnPEPjh_BafeqtcnzE.roa
File:                     sjVifTsqCFnPEPjh_BafeqtcnzE.roa (raw, json)
Hash identifier:          U+Qobqemfwl34W+0l2bHf3Kc8qUqCwokA6NOdvQQ/0U=
Subject key identifier:   B2:35:62:7D:3B:2A:08:59:CF:10:F8:E1:FC:16:9F:7A:AB:5C:9F:31
Certificate issuer:       /CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Certificate serial:       019B7AC89778A42405A2FC9344FFC0F86228
Authority key identifier: 13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/sjVifTsqCFnPEPjh_BafeqtcnzE.roa
Signing time:             Thu 01 Jan 2026 18:18:44 +0000
ROA not before:           Thu 01 Jan 2026 18:18:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     33925
IP address blocks:        195.177.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:97:78:a4:24:05:a2:fc:93:44:ff:c0:f8:62:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
        Validity
            Not Before: Jan  1 18:18:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b235627d3b2a0859cf10f8e1fc169f7aab5c9f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:0e:d0:ee:a0:0e:ce:ad:86:97:97:63:fc:
                    cc:0e:d6:6d:31:ba:17:70:06:4c:b8:3c:77:7d:01:
                    3b:f9:20:60:f4:07:d1:a4:36:ad:e3:de:e7:b6:9f:
                    6e:e9:51:b5:a7:d0:87:df:65:5a:60:06:b1:55:b4:
                    14:72:e8:3b:06:2e:0f:15:fb:11:9e:cd:62:8e:8d:
                    a3:54:69:5a:43:a8:b0:c2:10:8a:ca:ae:05:f1:cc:
                    02:5b:2d:cc:2a:78:13:cc:f8:48:3b:26:f4:b5:11:
                    18:af:ef:90:9a:71:70:52:60:b7:0f:5e:c1:2b:04:
                    b2:55:ac:42:cf:bc:c7:c9:97:6f:76:d4:87:54:80:
                    11:c5:3e:e1:16:0b:08:1c:37:70:22:f3:d6:54:30:
                    be:4e:de:9b:e1:b5:c0:ca:58:64:53:b6:73:72:e9:
                    b3:fc:db:36:0f:c4:5a:ed:b1:1c:03:12:50:55:57:
                    36:6d:c5:15:cd:ec:0a:9d:ee:3c:da:c0:de:ff:59:
                    0b:c4:d5:12:50:53:ef:bc:b1:db:60:43:8f:a6:52:
                    1f:df:04:e0:46:b9:f5:d3:85:48:c4:79:0c:58:8e:
                    38:50:45:0f:5e:c3:67:b3:d2:9c:37:74:53:01:a8:
                    37:76:fa:21:b2:90:23:ce:97:1a:26:20:c1:af:35:
                    5a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:35:62:7D:3B:2A:08:59:CF:10:F8:E1:FC:16:9F:7A:AB:5C:9F:31
            X509v3 Authority Key Identifier:
                keyid:13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/sjVifTsqCFnPEPjh_BafeqtcnzE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.177.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:1f:ff:cd:5f:a2:e4:77:2b:94:59:b6:bd:f7:ff:bd:a6:9d:
         a5:5f:67:25:6b:64:b9:cc:e9:ca:18:76:90:0d:2c:31:15:63:
         05:90:63:b4:20:03:f9:7b:4d:2e:a5:30:16:0f:1e:6c:f5:72:
         06:8a:2a:e7:95:68:dc:d2:99:0c:e2:76:80:f9:30:ca:9a:bb:
         fa:d0:9e:ee:33:3e:5b:da:ce:ff:64:f5:bf:94:f7:25:63:94:
         97:86:ed:85:41:8f:0d:62:6b:42:27:d7:35:5a:c6:06:8f:59:
         bc:c4:a7:ad:93:3d:5e:9b:73:a1:b5:8f:68:67:08:13:c8:21:
         28:13:36:f6:a0:ce:be:66:0b:8c:73:ce:8e:c5:5d:80:1e:77:
         0f:b6:24:88:cf:4e:60:c5:3f:db:2b:d3:88:06:03:dc:07:08:
         14:f1:5c:1f:2d:cb:2b:bf:0a:76:43:7c:08:29:15:9e:5b:88:
         94:d0:9b:f3:63:d9:8d:f8:21:43:5d:3e:e9:49:1e:85:a2:2f:
         9c:63:68:bb:0d:79:fa:3c:27:83:96:70:d6:70:24:b6:a9:2d:
         4f:71:46:50:d7:d3:12:29:e0:e7:86:08:a8:80:a1:ab:71:57:
         50:97:d0:f0:b5:f1:15:f8:61:c2:28:73:d9:57:4c:f1:f3:73:
         25:a9:7e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:12:55 2026 by rpki-client