This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/jbel_872plfGoKA9YwYLfXTnbKA.roa
File:                     jbel_872plfGoKA9YwYLfXTnbKA.roa (raw, json)
Hash identifier:          uorV1dM+0LVUebt/LsRmXGvEIO0+6YrUmXE7E+mdUis=
Subject key identifier:   8D:B7:A5:FF:CE:F6:A6:57:C6:A0:A0:3D:63:06:0B:7D:74:E7:6C:A0
Certificate issuer:       /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial:       019B7C1276F3BB4001418E142E4136EA3453
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/jbel_872plfGoKA9YwYLfXTnbKA.roa
Signing time:             Fri 02 Jan 2026 00:19:03 +0000
ROA not before:           Fri 02 Jan 2026 00:19:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198394
IP address blocks:        80.84.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:76:f3:bb:40:01:41:8e:14:2e:41:36:ea:34:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
        Validity
            Not Before: Jan  2 00:19:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8db7a5ffcef6a657c6a0a03d63060b7d74e76ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:46:b1:81:66:a3:7e:22:f7:a9:22:a7:6a:
                    62:a8:31:ea:c9:40:a9:f4:d6:e5:65:8b:ca:f9:d1:
                    3b:b9:af:d5:be:c5:b6:f5:4f:8d:9d:a7:44:5b:a0:
                    43:d0:88:00:5e:e1:07:52:8b:85:7b:a9:11:cc:32:
                    0c:1c:37:90:36:8c:5f:be:bc:5d:74:91:a5:fc:83:
                    0b:8e:f7:c1:f2:05:00:61:9b:47:04:88:98:88:ac:
                    9b:3e:97:59:d8:6f:fa:ce:f8:bb:74:e2:74:42:8a:
                    37:4e:46:4d:3c:71:95:cf:bf:6f:21:59:8a:ed:d5:
                    17:54:7d:5c:52:fd:cd:40:81:af:b3:4e:83:90:34:
                    34:43:c5:f3:1c:51:7a:88:af:1f:ae:e2:d4:15:f8:
                    39:ea:7a:27:90:13:91:52:6e:c0:2b:45:0f:92:b2:
                    0f:02:95:02:0f:47:28:a0:59:c4:94:83:e1:17:d9:
                    a5:84:27:a0:01:14:b6:a6:30:f9:8b:34:d6:be:d5:
                    e9:c9:68:29:d5:b2:27:63:f2:c5:53:71:cb:96:a5:
                    81:73:ad:be:14:78:2d:02:bd:ba:a2:ed:2a:5d:01:
                    b1:cb:37:66:e6:00:dd:33:5f:e0:ee:9e:13:d2:cb:
                    b2:2f:fa:ff:f1:1a:80:29:36:5b:93:e1:d3:38:1c:
                    76:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B7:A5:FF:CE:F6:A6:57:C6:A0:A0:3D:63:06:0B:7D:74:E7:6C:A0
            X509v3 Authority Key Identifier:
                keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/jbel_872plfGoKA9YwYLfXTnbKA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.84.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:af:78:c8:3e:bb:19:58:8e:b6:18:54:5e:e6:ea:a0:80:dd:
         d3:ac:a9:89:27:8b:a6:bb:9a:ef:1a:54:ae:87:c8:65:58:21:
         59:1e:06:11:a9:f5:c6:73:7d:eb:7a:cb:08:b2:ef:5b:e7:2f:
         f7:fd:24:29:ac:ba:01:ee:48:48:97:58:7e:85:a4:d3:04:13:
         8b:1a:93:15:40:a3:ad:fb:1b:91:26:26:59:cd:ba:8e:00:62:
         26:3c:cb:79:20:75:34:f2:d1:79:4a:80:12:a5:9b:4a:c8:0a:
         75:a3:4c:d8:21:20:91:62:bd:df:cc:b5:48:a9:e3:c0:2f:a3:
         9a:ca:4a:10:8e:a1:d4:b1:44:d9:c9:e7:67:1a:38:d9:96:c6:
         31:ad:2d:c5:47:d8:3d:06:97:b0:cd:55:42:64:9c:45:0e:e5:
         b2:17:17:80:8d:3f:c4:b2:f3:3b:02:11:2c:fd:27:5e:87:15:
         12:67:da:64:b7:b8:4c:4d:4c:8b:32:76:36:52:ad:b1:da:93:
         09:3c:89:83:6e:5a:00:48:77:89:8c:00:4b:16:59:e2:a3:ac:
         5c:3d:f5:68:30:9e:e4:45:13:11:ab:6a:f3:5d:89:00:54:46:
         56:db:3a:3e:f2:7a:df:4f:63:da:a3:2c:47:f4:21:bb:e3:bd:
         86:cc:8c:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8Enbzu0ABQY4ULkE26jRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYmE3NzRiYTgyZmIwNDI3Zjc2NmU3ODNlNzcwZjRiZDk2
NDE2ZjkwHhcNMjYwMTAyMDAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGI3YTVmZmNlZjZhNjU3YzZhMGEwM2Q2MzA2MGI3ZDc0ZTc2Y2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaZGsYFmo34i96kip2piqDHqyUCp
9NblZYvK+dE7ua/VvsW29U+NnadEW6BD0IgAXuEHUouFe6kRzDIMHDeQNoxfvrxd
dJGl/IMLjvfB8gUAYZtHBIiYiKybPpdZ2G/6zvi7dOJ0Qoo3TkZNPHGVz79vIVmK
7dUXVH1cUv3NQIGvs06DkDQ0Q8XzHFF6iK8fruLUFfg56nonkBORUm7AK0UPkrIP
ApUCD0cooFnElIPhF9mlhCegARS2pjD5izTWvtXpyWgp1bInY/LFU3HLlqWBc62+
FHgtAr26ou0qXQGxyzdm5gDdM1/g7p4T0suyL/r/8RqAKTZbk+HTOBx2iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI23pf/O9qZXxqCgPWMGC31052ygMB8GA1UdIwQY
MBaAFOy6d0uoL7BCf3ZueD53D0vZZBb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84MTBjMTEtYTEwNS00ZGIxLWE2YjUt
MzkyYjg2M2M5ZjAzLzEvamJlbF84NzJwbGZHb0tBOVl3WUxmWFRuYktBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi84MTBjMTEtYTEwNS00ZGIxLWE2YjUtMzkyYjg2M2M5ZjAz
LzEvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFSSMA0G
CSqGSIb3DQEBCwUAA4IBAQBqr3jIPrsZWI62GFRe5uqggN3TrKmJJ4umu5rvGlSu
h8hlWCFZHgYRqfXGc33ressIsu9b5y/3/SQprLoB7khIl1h+haTTBBOLGpMVQKOt
+xuRJiZZzbqOAGImPMt5IHU08tF5SoASpZtKyAp1o0zYISCRYr3fzLVIqePAL6Oa
ykoQjqHUsUTZyednGjjZlsYxrS3FR9g9BpewzVVCZJxFDuWyFxeAjT/EsvM7AhEs
/SdehxUSZ9pkt7hMTUyLMnY2Uq2x2pMJPImDbloASHeJjABLFlnio6xcPfVoMJ7k
RRMRq2rzXYkAVEZW2zo+8nrfT2PaoyxH9CG7472GzIxR
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:59:37 2026 by rpki-client