This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JwgnOTRAlCXt1K7at1wAyMz7bd8.roa
File:                     JwgnOTRAlCXt1K7at1wAyMz7bd8.roa (raw, json)
Hash identifier:          lBC8tzOboiP4jQAHCC/omLvaunl3BvP+L/B2M2ocu+A=
Subject key identifier:   27:08:27:39:34:40:94:25:ED:D4:AE:DA:B7:5C:00:C8:CC:FB:6D:DF
Certificate issuer:       /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial:       019A95F9F4FE5FAB2DEB385495E00321FDD4
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JwgnOTRAlCXt1K7at1wAyMz7bd8.roa
Signing time:             Tue 18 Nov 2025 07:59:37 +0000
ROA not before:           Tue 18 Nov 2025 07:59:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206596
IP address blocks:        185.181.180.0/22 maxlen: 22
                          185.181.180.0/23 maxlen: 23
                          185.181.180.0/24 maxlen: 24
                          185.181.180.0/25 maxlen: 25
                          185.181.180.128/25 maxlen: 25
                          185.181.181.0/24 maxlen: 24
                          185.181.182.0/23 maxlen: 23
                          185.181.182.0/24 maxlen: 24
                          185.181.183.0/24 maxlen: 24
                          2a06:1cc0::/48 maxlen: 48
                          2a06:1cc0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:95:f9:f4:fe:5f:ab:2d:eb:38:54:95:e0:03:21:fd:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
        Validity
            Not Before: Nov 18 07:59:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2708273934409425edd4aedab75c00c8ccfb6ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:46:99:fe:93:b7:c6:61:09:13:76:7d:4a:a3:
                    31:90:e0:cc:e9:27:d3:fb:16:ee:70:30:67:7e:03:
                    97:56:fd:8e:9f:cc:f4:59:6e:93:e5:6e:57:62:e3:
                    a8:22:ab:00:3c:d1:a7:bf:d3:40:da:ae:b0:59:48:
                    2f:31:58:0f:a2:fd:8a:a5:f8:fa:92:ae:79:73:51:
                    34:f1:69:ad:bc:d4:58:50:51:98:50:e3:b6:a4:32:
                    01:4d:3a:0e:c0:72:9a:32:17:82:ad:af:17:e0:65:
                    ad:50:e6:12:f6:5a:4f:87:d7:83:f4:7a:77:38:6c:
                    88:b4:bd:84:30:82:86:d7:40:3d:3e:da:30:20:60:
                    d7:34:fc:be:f3:af:96:2f:6f:4e:19:1c:ee:14:02:
                    5f:57:af:cb:70:f0:01:11:1f:cc:85:53:8d:e2:b2:
                    72:c5:08:9c:90:06:1b:9b:c8:45:4e:bb:be:cf:16:
                    39:64:d8:ee:6a:60:19:a0:17:f2:0b:13:e3:d7:bb:
                    32:5d:60:63:8e:da:c6:81:26:d3:a6:ee:2f:8a:f9:
                    8f:26:3a:5d:9b:b3:85:52:e1:b4:e9:d4:28:68:b5:
                    75:0e:0a:43:c1:d7:86:2f:00:97:a0:2a:f8:2d:f7:
                    8b:91:78:46:d5:59:f1:dd:75:3d:d3:57:79:63:ad:
                    26:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:08:27:39:34:40:94:25:ED:D4:AE:DA:B7:5C:00:C8:CC:FB:6D:DF
            X509v3 Authority Key Identifier:
                keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JwgnOTRAlCXt1K7at1wAyMz7bd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.181.180.0/22
                IPv6:
                  2a06:1cc0::/47

    Signature Algorithm: sha256WithRSAEncryption
         14:62:03:0f:e0:36:57:e1:80:53:7a:ac:53:b3:be:81:2b:1a:
         d8:5d:28:03:02:4f:37:18:7d:5d:a3:d2:0f:e7:3a:36:a3:fe:
         c4:96:e0:c0:08:6e:7e:b5:82:0b:d3:e8:d1:f1:45:33:7e:6d:
         39:1f:11:e4:2b:05:85:ec:50:c2:4c:28:69:51:17:f8:00:90:
         fc:18:f6:bb:9c:10:9d:57:bd:1f:53:dd:08:f0:4e:76:a6:02:
         b6:cd:48:20:c2:43:c0:ac:d1:5f:f5:20:36:00:67:74:9d:53:
         93:55:26:4a:c1:53:58:a6:bc:0b:bb:67:62:b6:01:04:c0:5f:
         16:5d:43:49:3a:97:ea:c1:9b:80:65:69:de:62:96:69:e8:8e:
         b0:5b:67:d9:81:39:b4:84:6a:50:cd:fe:f7:94:5d:3d:47:84:
         a1:e3:8c:28:5e:96:79:64:aa:52:45:d0:c4:af:6a:17:91:36:
         1e:c2:b2:9b:a7:ca:ae:a6:e1:ec:3f:2b:3c:1b:8b:51:55:28:
         4c:a8:39:1f:56:11:f8:e1:be:1c:bf:04:8d:db:56:f5:d1:a1:
         82:ba:80:46:77:dd:dd:ef:03:a4:04:49:9f:d4:8e:75:d1:58:
         e0:77:52:c7:54:ea:91:df:c1:b0:52:7a:cc:84:c4:2d:83:c7:
         ec:30:3f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:47:01 2025 by rpki-client