This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/JpmAbUUjgdGj6qAIyyJytHhitKc.roa
File:                     JpmAbUUjgdGj6qAIyyJytHhitKc.roa (raw, json)
Hash identifier:          CcEuObSxm5FzQn0dVTtYmBf1361NVKZ22QzUQfSvlR8=
Subject key identifier:   26:99:80:6D:45:23:81:D1:A3:EA:A0:08:CB:22:72:B4:78:62:B4:A7
Certificate issuer:       /CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Certificate serial:       019B7C1287F37F6CBCC8BA86D94E70F2FC78
Authority key identifier: 82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/JpmAbUUjgdGj6qAIyyJytHhitKc.roa
Signing time:             Fri 02 Jan 2026 00:19:07 +0000
ROA not before:           Fri 02 Jan 2026 00:19:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47576
IP address blocks:        89.207.144.0/22 maxlen: 22
                          185.251.96.0/22 maxlen: 22
                          2a02:2410::/32 maxlen: 32
                          2a0c:18c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:87:f3:7f:6c:bc:c8:ba:86:d9:4e:70:f2:fc:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
        Validity
            Not Before: Jan  2 00:19:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2699806d452381d1a3eaa008cb2272b47862b4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:45:40:d5:4d:76:0b:47:0e:24:a2:21:e6:fd:
                    7a:47:c1:54:2f:55:9f:aa:c0:cf:fe:35:1c:b6:34:
                    d6:c1:16:7d:38:e3:02:01:5f:93:99:1e:10:93:5b:
                    ff:49:91:13:a2:8b:28:c5:34:bb:95:ee:7e:e2:e6:
                    b1:6b:39:9d:a3:3e:e9:b1:10:a9:43:7c:64:53:fb:
                    46:a3:b8:7d:83:8d:3a:7b:db:43:68:9c:5c:b1:93:
                    13:c3:be:74:fe:d7:81:de:e2:84:98:b0:3c:bc:64:
                    b8:a8:2a:18:7d:8b:45:da:61:37:8e:55:b6:71:6a:
                    e0:d4:cc:ce:9b:db:85:0a:42:9b:b3:6b:18:af:8e:
                    78:27:ba:a4:8e:61:c0:de:d8:3d:de:a0:46:4b:04:
                    d9:43:b9:9c:6b:85:a4:0e:6a:70:95:77:d9:50:42:
                    80:a9:7a:3a:d4:d1:a6:d2:61:85:10:0e:84:d6:5f:
                    bf:85:bd:28:71:78:dd:df:16:d1:44:15:03:1c:16:
                    18:87:d8:bc:c9:df:ce:36:84:9d:b1:26:da:56:c8:
                    17:58:17:b8:52:ff:9e:a6:23:b4:72:d6:9a:16:78:
                    90:01:d1:bb:b3:d9:6b:96:96:86:de:d6:8f:cb:97:
                    2a:51:21:1b:8e:e3:47:11:85:14:5e:bf:c4:80:0c:
                    cd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:99:80:6D:45:23:81:D1:A3:EA:A0:08:CB:22:72:B4:78:62:B4:A7
            X509v3 Authority Key Identifier:
                keyid:82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/JpmAbUUjgdGj6qAIyyJytHhitKc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.207.144.0/22
                  185.251.96.0/22
                IPv6:
                  2a02:2410::/32
                  2a0c:18c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:6d:26:fc:a6:5f:bd:aa:be:82:f8:f4:3c:eb:9b:22:fc:03:
         8f:54:61:78:c9:32:e1:07:78:f4:16:52:47:25:35:38:54:34:
         1f:5c:18:08:df:a1:a9:dd:e1:57:8b:9a:8d:65:d5:8d:69:7c:
         ba:df:64:ee:d9:16:79:fa:e0:8f:94:8d:d6:ea:ce:a8:3c:21:
         ef:7a:6b:fd:71:92:9a:2b:07:ad:51:5e:bf:fe:f3:28:ae:7f:
         41:c8:17:76:a0:86:c7:b3:cc:c0:11:7f:65:5e:4d:a5:6e:fe:
         e4:44:f9:d8:01:61:d9:56:38:54:5d:0e:a4:33:a4:21:6a:f0:
         b2:e0:09:45:3e:0a:ab:c7:32:0a:2d:54:b6:4f:6a:fc:24:d1:
         5a:af:f1:fc:b0:aa:ae:80:46:30:cd:6a:a1:c2:4f:e0:58:91:
         4d:d0:c0:be:bd:97:9c:b0:aa:a4:6f:f8:44:c8:23:82:c9:00:
         bb:12:e6:8f:fb:af:64:71:a9:2f:71:8a:04:78:86:e3:48:05:
         ff:d8:94:c3:6d:a8:12:c6:87:ec:aa:c4:c5:2d:d9:c2:27:ca:
         65:85:03:2a:38:d9:38:b1:a9:6c:ce:82:86:2c:72:8e:a5:6f:
         7d:30:32:d0:2e:5a:f1:c8:6a:1b:ac:a0:7a:ce:5a:c1:33:60:
         8f:52:10:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:36:46 2026 by rpki-client