This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/jxMci4uR19nM2XEmI-5bNnfDE8U.roa
File:                     jxMci4uR19nM2XEmI-5bNnfDE8U.roa (raw, json)
Hash identifier:          i/z/qU/89+IjNfI98UYZUsV3qHWNwE2F/6Xdi9EHRgk=
Subject key identifier:   8F:13:1C:8B:8B:91:D7:D9:CC:D9:71:26:23:EE:5B:36:77:C3:13:C5
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       019B77C773EAA581BCE70BB59783EEFF4511
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/jxMci4uR19nM2XEmI-5bNnfDE8U.roa
Signing time:             Thu 01 Jan 2026 04:18:38 +0000
ROA not before:           Thu 01 Jan 2026 04:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198821
IP address blocks:        5.8.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:73:ea:a5:81:bc:e7:0b:b5:97:83:ee:ff:45:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Jan  1 04:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8f131c8b8b91d7d9ccd9712623ee5b3677c313c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:28:b8:14:5a:b5:8d:13:33:cc:8e:52:b8:c0:
                    cc:5e:49:dc:29:cf:02:93:56:39:87:9a:26:30:53:
                    9d:8c:54:e0:eb:31:60:23:3a:b4:1d:ba:99:15:da:
                    b6:b6:4f:ec:83:bc:8f:4e:13:ca:7d:25:5a:d7:20:
                    8f:f2:c2:d3:67:6a:0e:cc:16:b7:d2:67:f0:96:66:
                    ff:51:14:2d:fb:5b:92:fa:3c:bd:13:30:c9:74:aa:
                    d3:28:eb:a3:68:25:5b:36:4c:55:09:b8:93:73:12:
                    0b:b8:5d:8d:22:1f:70:a6:df:f1:94:1d:15:4b:3b:
                    25:b5:68:b7:ac:87:26:39:10:91:37:ce:fc:25:a8:
                    fc:5a:32:68:3b:04:52:4b:c4:ae:1c:9b:27:c3:ce:
                    d1:11:57:0d:f3:e7:78:93:a6:82:a9:84:ec:85:36:
                    7a:28:43:b8:97:d8:0e:7c:10:a2:1f:fc:42:c3:5b:
                    66:13:b4:0e:71:ec:9c:20:c2:d0:00:d6:0f:1d:e4:
                    b6:bd:68:71:f7:ac:a5:6b:68:b8:30:f8:a4:71:19:
                    8e:04:1d:9c:ec:6c:47:2a:2e:68:3f:31:42:48:f8:
                    49:61:64:8e:f0:1b:3c:3e:ae:b6:61:94:c2:8a:70:
                    1a:fd:04:02:e3:c4:f7:0b:ca:89:3b:50:34:e6:96:
                    e8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:13:1C:8B:8B:91:D7:D9:CC:D9:71:26:23:EE:5B:36:77:C3:13:C5
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/jxMci4uR19nM2XEmI-5bNnfDE8U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.8.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:45:b4:36:b1:66:17:2a:17:45:85:96:c9:a0:19:ac:9b:ce:
         04:5d:e0:92:9c:0f:36:98:45:55:33:94:c6:e8:84:47:90:4d:
         77:0c:dc:e9:f0:6b:b4:ad:a0:df:90:23:e4:3b:2e:94:2e:0c:
         ea:13:c7:87:43:ee:2b:bc:73:66:f0:0e:43:f3:7e:77:5b:b2:
         de:5a:ad:6b:1e:65:34:0e:ff:35:fa:c3:92:25:4b:5c:31:a8:
         9e:4c:97:b3:6d:99:0d:09:f6:28:06:1c:74:0b:e3:83:2c:16:
         6c:98:ef:c9:52:34:6a:bd:52:3b:e1:b8:88:66:5d:c0:a9:36:
         4e:36:44:ea:90:bb:cf:d3:ff:6c:7b:bf:d6:af:7c:dc:9c:5a:
         ee:0c:aa:6b:0e:3d:97:f8:ca:27:0f:74:01:6e:cd:7b:a7:75:
         41:ce:8c:0a:5d:3e:7d:34:18:ac:68:41:30:28:27:15:84:96:
         64:98:09:41:43:db:df:44:a6:89:e7:7f:e3:5a:02:18:d9:b0:
         60:ba:04:3b:61:b4:86:f2:6f:a3:c3:c5:ec:8b:8e:a2:af:9e:
         f0:05:50:30:ba:9d:4f:ab:a6:49:2f:94:1c:16:04:cc:3b:32:
         32:62:b9:74:47:11:ae:45:9c:33:1d:fa:dd:44:df:ac:bd:65:
         a2:56:8b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:47:47 2026 by rpki-client