This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/sWc0x8xdprid2J0LIhsIpRR0BBk.roa
File:                     sWc0x8xdprid2J0LIhsIpRR0BBk.roa (raw, json)
Hash identifier:          MM549Xitzolq2k3RRgaWuIzqMTH1U55wOE7cKGGNAZg=
Subject key identifier:   B1:67:34:C7:CC:5D:A6:B8:9D:D8:9D:0B:22:1B:08:A5:14:74:04:19
Certificate issuer:       /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial:       019B7D5CC9A5E860ECB1263435BBFB407DEB
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/sWc0x8xdprid2J0LIhsIpRR0BBk.roa
Signing time:             Fri 02 Jan 2026 06:19:51 +0000
ROA not before:           Fri 02 Jan 2026 06:19:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39227
IP address blocks:        2a00:1f78:fffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:c9:a5:e8:60:ec:b1:26:34:35:bb:fb:40:7d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
        Validity
            Not Before: Jan  2 06:19:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b16734c7cc5da6b89dd89d0b221b08a514740419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:46:a6:f7:24:d8:52:cf:78:62:d0:15:e0:
                    1c:ee:36:b5:97:ce:d0:f7:4c:bf:77:58:4c:9e:32:
                    eb:6f:64:39:6f:ea:19:79:4f:86:7c:0c:b3:88:26:
                    db:7b:68:85:f2:0d:9b:5e:7b:01:2a:13:46:bc:4d:
                    b2:2b:d0:ed:77:79:51:71:37:21:2c:0d:2a:c3:59:
                    dc:83:2a:fe:c4:cc:b9:d4:b1:a1:9b:71:36:7d:db:
                    56:6e:f7:d0:5b:79:ef:c7:f8:78:fa:96:04:59:e7:
                    95:82:51:28:c7:9e:a9:ea:a5:c2:99:9f:4f:db:8c:
                    a1:cd:f2:24:5a:32:6d:16:4f:e1:70:fa:97:f9:05:
                    e5:4a:bd:d3:95:3e:ea:0d:61:47:a7:f3:85:3b:07:
                    52:6f:f8:ae:a4:fd:00:72:66:58:2a:61:c2:7c:01:
                    8b:db:19:1d:95:16:76:a0:e2:37:13:7a:7c:39:73:
                    78:9a:69:9c:7a:75:09:99:8b:cf:61:17:df:00:25:
                    a7:a0:12:b7:a7:81:0f:6a:77:5b:8d:4c:8c:78:eb:
                    0e:00:ec:a0:ad:9e:ea:0f:5b:16:9c:5c:88:3d:6e:
                    16:ed:d9:8a:dd:32:38:31:2c:37:b4:83:e9:42:16:
                    dc:84:da:06:4a:60:53:8c:df:e0:7a:f4:9b:ed:61:
                    53:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:67:34:C7:CC:5D:A6:B8:9D:D8:9D:0B:22:1B:08:A5:14:74:04:19
            X509v3 Authority Key Identifier:
                keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/sWc0x8xdprid2J0LIhsIpRR0BBk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:1f78:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:08:fd:e6:8a:71:c7:82:7b:34:e2:d8:e5:df:ca:a1:22:cf:
         96:e8:5c:a2:e0:7f:58:d0:8d:7b:54:b3:88:bd:b0:45:44:d5:
         09:d9:b1:a2:23:9b:66:a1:a8:14:33:ca:fd:ac:27:d1:57:09:
         1f:16:57:cd:95:bd:08:5a:6e:ca:e5:29:9e:c5:db:6c:17:53:
         30:b2:2c:56:6d:40:4c:51:41:e7:05:a6:cf:22:5c:56:b0:49:
         34:ca:36:81:ea:81:b0:f4:01:d0:5d:98:39:0c:9f:da:62:3b:
         b9:96:03:8a:a0:d7:c7:f7:78:b0:38:d5:10:a6:7c:70:39:c5:
         40:b6:1e:f7:a0:40:15:ae:5f:db:16:58:68:57:c3:8b:36:c9:
         c9:2a:c1:45:98:62:96:00:e8:e7:7d:bd:eb:6e:f0:98:be:1e:
         65:6e:d9:c4:6d:38:8a:25:12:d2:53:78:7a:9a:dc:e2:39:cd:
         66:49:f3:6f:a1:05:26:e9:70:af:93:59:3c:87:15:b7:f2:4a:
         9c:d0:a8:67:b3:a9:b2:ff:77:2e:25:71:8e:22:70:cf:77:d3:
         87:82:d8:c6:c5:56:8a:37:c5:ed:93:b0:cb:3c:ae:fc:66:7f:
         a6:d5:c1:d2:b1:f7:7e:88:7f:3a:9e:50:2d:8c:32:71:a3:f9:
         b9:c7:98:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:23:42 2026 by rpki-client