This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/JeLE7WUu6LtNls_s6nCOOIC9pOA.roa
File:                     JeLE7WUu6LtNls_s6nCOOIC9pOA.roa (raw, json)
Hash identifier:          Mkr+eVg4WLRYazKNuaLpdJQ0Vwc9H2J7Vgf0WluRsEU=
Subject key identifier:   25:E2:C4:ED:65:2E:E8:BB:4D:96:CF:EC:EA:70:8E:38:80:BD:A4:E0
Certificate issuer:       /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial:       019B7AC94F464994D5F0563BDA7A1F27DA4F
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/JeLE7WUu6LtNls_s6nCOOIC9pOA.roa
Signing time:             Thu 01 Jan 2026 18:19:31 +0000
ROA not before:           Thu 01 Jan 2026 18:19:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202654
IP address blocks:        5.59.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 08:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:4f:46:49:94:d5:f0:56:3b:da:7a:1f:27:da:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
        Validity
            Not Before: Jan  1 18:19:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=25e2c4ed652ee8bb4d96cfecea708e3880bda4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:60:0f:e3:68:f9:63:42:9d:cf:c9:2f:c2:c7:
                    ef:ff:6a:41:20:7b:c4:ce:e1:f8:dd:82:d7:b1:a5:
                    46:db:53:4f:da:59:97:c1:52:72:84:ab:00:bb:81:
                    fd:e0:99:ef:4a:32:89:cf:68:1c:91:71:48:39:3d:
                    2a:15:7e:18:be:df:fc:64:11:35:7a:30:d7:e4:7a:
                    40:a3:ff:6d:1c:f1:f4:99:a0:2d:63:a5:3c:16:f0:
                    5b:57:86:a1:07:d0:dd:46:e8:7b:7e:39:7c:3f:fd:
                    12:6d:10:1f:72:b2:50:97:79:74:60:b3:0d:7e:a2:
                    98:de:9b:40:c1:c0:5c:f7:59:c9:31:f8:0d:ae:47:
                    c5:d6:6e:c7:5c:22:c9:00:b9:fb:ad:94:6a:8c:6b:
                    cf:a0:9a:b9:b6:53:3c:31:47:a6:fe:93:85:a7:81:
                    d3:6c:ed:d7:11:0c:d0:d0:89:81:cd:86:b9:c3:14:
                    d8:da:ef:27:93:47:1a:56:e0:78:04:2f:ed:a2:f7:
                    06:89:b8:28:92:3b:9f:95:47:f0:d0:e0:67:d0:1a:
                    5a:97:e3:e8:64:26:f6:87:57:0e:c4:81:fe:ea:54:
                    16:92:31:00:3d:34:fd:79:8c:01:8f:6e:f5:c3:f1:
                    e3:51:4b:ff:b6:d8:d3:e1:c5:73:a6:63:57:81:78:
                    d6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E2:C4:ED:65:2E:E8:BB:4D:96:CF:EC:EA:70:8E:38:80:BD:A4:E0
            X509v3 Authority Key Identifier:
                keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/JeLE7WUu6LtNls_s6nCOOIC9pOA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.59.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:ee:d7:cd:e2:2c:e3:5d:3b:d6:f3:c7:5e:fd:e9:e0:2b:61:
         12:66:5d:32:d2:04:77:37:5e:01:7b:15:e4:b1:70:c6:fd:ea:
         a9:e9:d9:e5:87:32:2b:c5:c1:2c:c4:f9:a8:8b:a4:68:43:27:
         43:62:13:b5:d4:84:5b:58:82:d3:fe:11:19:19:66:ec:c5:7f:
         f6:b1:95:24:1a:79:f0:f4:ce:ab:aa:7d:c2:03:e4:ee:07:c4:
         80:7d:e3:ea:00:17:b1:ca:f2:0c:49:8a:1d:a1:3c:90:82:c7:
         ce:31:ff:d9:75:37:46:cf:5c:9a:39:32:b5:1a:ec:f0:de:c4:
         bd:51:60:59:52:16:29:1c:fb:c1:63:f3:e0:53:94:c8:39:2b:
         15:c1:92:63:0a:ad:62:16:aa:a4:88:3c:5f:26:13:66:36:2c:
         73:bd:48:1c:33:78:0e:f2:b3:69:26:87:bd:df:72:9d:aa:88:
         bd:f1:75:dd:40:50:84:95:1d:bb:6b:14:fa:81:f7:21:79:45:
         ac:a3:fe:29:2e:d9:b0:15:95:62:ee:9a:97:e2:2b:40:7b:59:
         46:f7:e1:bc:50:23:92:9a:7e:1c:ca:0b:1b:2d:f7:bd:e2:6c:
         94:c5:2a:9d:8d:96:23:fa:1e:e5:9b:f2:15:ee:7c:97:1e:3e:
         f2:3c:5f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:17:48 2026 by rpki-client