This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/RJf7_BZh630LGIaBvGR48OfaOYM.roa
File:                     RJf7_BZh630LGIaBvGR48OfaOYM.roa (raw, json)
Hash identifier:          vStLRSl6R9d4MF0nfflCotGK33XI7Q9JgJmQ0UQ6+co=
Subject key identifier:   44:97:FB:FC:16:61:EB:7D:0B:18:86:81:BC:64:78:F0:E7:DA:39:83
Certificate issuer:       /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial:       019B76EB9F1F30DA5C0301F946D7A4B0436A
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/RJf7_BZh630LGIaBvGR48OfaOYM.roa
Signing time:             Thu 01 Jan 2026 00:18:31 +0000
ROA not before:           Thu 01 Jan 2026 00:18:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213222
IP address blocks:        103.231.136.0/24 maxlen: 24
                          103.231.137.0/24 maxlen: 24
                          103.231.138.0/24 maxlen: 24
                          185.137.108.0/24 maxlen: 24
                          185.137.109.0/24 maxlen: 24
                          185.137.110.0/24 maxlen: 24
                          185.137.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:9f:1f:30:da:5c:03:01:f9:46:d7:a4:b0:43:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
        Validity
            Not Before: Jan  1 00:18:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4497fbfc1661eb7d0b188681bc6478f0e7da3983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:15:7a:9b:d4:f3:57:ac:b7:22:30:c8:ea:43:
                    15:14:b8:3f:a1:d4:5c:d7:a6:d9:6b:59:50:bc:19:
                    c5:be:2f:5f:c1:6f:bb:d7:cc:e9:48:a9:03:f4:e4:
                    f8:b9:ce:0a:b7:15:01:f9:44:4a:2b:c1:52:ee:6d:
                    59:db:91:68:9d:84:e8:31:96:5e:e6:02:98:b1:58:
                    16:7e:98:e6:46:87:da:a4:f1:52:7c:f2:e8:82:38:
                    64:9f:53:e6:b4:72:3e:ad:fc:56:6b:a0:92:c4:85:
                    b3:bb:45:4c:89:f4:e3:a7:d7:09:6e:5a:7a:7a:16:
                    d9:55:92:f5:6d:3b:f5:9e:b1:b7:be:60:4c:bb:e0:
                    ac:d9:a0:7a:a9:e4:23:3b:33:98:39:40:ad:8d:aa:
                    fe:dd:9d:d4:1b:14:1c:c8:9c:00:39:8a:5a:66:07:
                    6a:2e:61:d7:12:7f:b4:63:ed:16:3d:81:52:c3:fe:
                    ee:ef:9f:8b:68:c0:8c:03:74:14:99:3c:6c:d7:23:
                    e0:64:b9:58:26:5b:0f:04:86:e3:e4:4a:37:88:ac:
                    e7:ae:ef:ec:cf:6b:a4:81:47:fc:fd:22:ee:dc:52:
                    36:05:a5:5b:63:98:71:b6:55:f5:25:46:00:ef:a4:
                    52:6c:3f:eb:a9:3e:6d:58:ba:e4:67:81:80:6d:97:
                    6d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:97:FB:FC:16:61:EB:7D:0B:18:86:81:BC:64:78:F0:E7:DA:39:83
            X509v3 Authority Key Identifier:
                keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/RJf7_BZh630LGIaBvGR48OfaOYM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.136.0-103.231.138.255
                  185.137.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:1e:7b:3b:32:b1:9a:fb:ff:c2:f2:1c:b6:8f:22:67:ad:3d:
         19:ad:3f:ab:40:e8:7d:9c:aa:f9:ab:0c:9b:2a:a1:43:f6:5a:
         31:e6:94:35:6a:2e:e3:00:c5:b1:b7:94:ae:db:3d:57:04:b7:
         93:9b:78:57:87:1c:cb:f6:10:79:7c:88:79:92:da:1d:ed:31:
         4b:f9:09:80:20:77:81:42:af:80:a7:94:8f:80:86:c9:7f:55:
         54:04:61:d7:bb:37:a0:00:81:ee:b5:58:b9:94:c3:6c:d0:12:
         75:f3:90:a0:2b:8f:2e:7d:cc:9b:aa:a1:fe:ea:43:03:db:57:
         0d:26:46:c0:ba:ca:69:6b:7c:65:8c:cb:c4:b3:e2:31:b5:13:
         2e:b3:c3:7c:e3:b6:1b:d7:ac:6c:ff:cd:c5:d6:9c:e1:24:da:
         05:71:95:9e:d9:9c:b1:8f:d2:cf:7f:a4:57:15:77:6d:16:c9:
         e5:c8:81:dd:e8:bb:82:88:7a:b0:1d:15:ef:90:30:33:30:12:
         24:d3:91:e2:2b:73:ac:b0:b0:b7:cb:bf:47:85:ad:35:05:58:
         66:57:91:3d:1e:6a:45:28:c3:75:ad:f3:f6:12:8a:74:96:6d:
         d2:00:3c:22:2e:0c:63:16:31:82:6a:4a:f7:0c:32:51:3a:cc:
         80:cc:9a:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:03:22 2026 by rpki-client