This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/_jxRz5ghYR51tj3YSDdV5TBQiG8.roa
File:                     _jxRz5ghYR51tj3YSDdV5TBQiG8.roa (raw, json)
Hash identifier:          K4LNK7CDIvQy9c2kyItt4EUemEz66wPe77r3oLdb6Qw=
Subject key identifier:   FE:3C:51:CF:98:21:61:1E:75:B6:3D:D8:48:37:55:E5:30:50:88:6F
Certificate issuer:       /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial:       019B7C123C8AE9673F6942D111DC0CED5FFF
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/_jxRz5ghYR51tj3YSDdV5TBQiG8.roa
Signing time:             Fri 02 Jan 2026 00:18:48 +0000
ROA not before:           Fri 02 Jan 2026 00:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215977
IP address blocks:        193.140.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:3c:8a:e9:67:3f:69:42:d1:11:dc:0c:ed:5f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
        Validity
            Not Before: Jan  2 00:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fe3c51cf9821611e75b63dd8483755e53050886f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4e:3f:10:10:4d:ec:3d:42:4a:0b:a7:22:5a:
                    3a:ac:69:c7:3e:3b:ab:29:e9:6c:52:88:48:1a:c0:
                    6e:05:fe:d6:77:40:26:60:f6:2e:a7:31:39:07:e6:
                    b9:97:03:52:3e:aa:f8:81:90:67:38:95:8c:f7:03:
                    e0:1f:7f:9e:84:ab:08:3d:5b:d6:89:cd:ff:56:91:
                    e9:de:eb:16:7a:b7:75:64:63:9a:e6:48:65:74:0f:
                    ab:01:bb:e3:7b:2d:10:b3:46:f3:31:2f:62:d7:0b:
                    52:b3:68:18:58:eb:97:8e:da:45:37:aa:2f:88:84:
                    4d:09:d6:cb:dc:83:5c:e3:e8:17:20:9a:36:a4:c3:
                    92:7e:5e:98:d0:88:43:e9:f3:06:23:21:6c:e0:f5:
                    74:80:03:3a:68:66:90:21:2f:41:37:36:6c:db:76:
                    b2:ae:a3:c4:1c:1b:8d:79:94:c4:d3:23:9d:f6:7b:
                    ee:9c:c4:28:bc:5d:63:f3:4b:02:51:48:34:d5:45:
                    18:3f:44:96:7e:bd:8a:fd:59:42:5c:f6:9b:2f:54:
                    1e:34:7f:af:17:e0:cb:07:29:f5:f2:92:aa:6c:be:
                    da:0b:b8:82:4b:23:8e:66:dd:8e:55:d2:c7:e8:c3:
                    2f:4f:8e:47:b2:9f:7e:d0:99:74:d6:62:b9:ff:fb:
                    e1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3C:51:CF:98:21:61:1E:75:B6:3D:D8:48:37:55:E5:30:50:88:6F
            X509v3 Authority Key Identifier:
                keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/_jxRz5ghYR51tj3YSDdV5TBQiG8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.140.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:46:68:d6:ae:40:91:59:a7:52:5d:0d:5c:76:88:19:5a:6b:
         3b:86:4e:28:f2:0d:ac:b6:6f:9d:11:eb:3c:0f:d7:f1:27:82:
         df:cd:a2:7e:c4:ac:16:df:cb:ac:36:9b:ca:3e:8b:51:8b:e0:
         ef:f7:1a:ef:05:c1:d6:20:fb:aa:c4:90:b3:f2:31:b3:db:0d:
         d4:58:29:0a:64:15:9d:e3:a1:6b:2b:9f:46:61:f8:4e:d2:86:
         7d:af:43:e7:5c:e3:bf:22:03:c5:f8:78:f3:2e:0f:17:6c:40:
         e1:48:e4:1c:cd:79:0f:42:8f:dd:14:8e:3e:af:87:56:26:ee:
         c9:c5:d1:0d:b1:e0:84:f9:fb:6b:ee:11:23:27:57:93:1d:41:
         b7:af:d0:a2:8f:c3:0b:85:97:65:ad:80:a8:62:0c:39:f6:43:
         d0:12:80:45:b4:50:27:30:97:e7:4f:0c:25:38:03:e1:25:c7:
         81:31:fc:15:57:e3:77:1b:70:b3:83:f6:fd:cf:f3:f0:26:76:
         b0:02:b3:86:15:d6:90:d9:bf:78:3f:8f:2a:02:91:94:d5:00:
         57:81:97:21:ba:29:ed:24:e3:4d:ae:62:13:5a:49:0d:a5:5f:
         51:f8:24:46:48:fc:39:a2:5c:4a:d4:b8:af:f2:07:23:ee:dc:
         2f:ce:7d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:06:27 2026 by rpki-client