This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/djBGBe9HqvFt7_WabJRUgnTlUhU.roa
File:                     djBGBe9HqvFt7_WabJRUgnTlUhU.roa (raw, json)
Hash identifier:          n0zVn2aXvua0NDEZjxIxFHxOhEeyIZrC4KOQSbouI7k=
Subject key identifier:   76:30:46:05:EF:47:AA:F1:6D:EF:F5:9A:6C:94:54:82:74:E5:52:15
Certificate issuer:       /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial:       019B797EEB6FB417D2F5FB7B380E4CFC8AB9
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/djBGBe9HqvFt7_WabJRUgnTlUhU.roa
Signing time:             Thu 01 Jan 2026 12:18:39 +0000
ROA not before:           Thu 01 Jan 2026 12:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39405
IP address blocks:        185.118.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:eb:6f:b4:17:d2:f5:fb:7b:38:0e:4c:fc:8a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
        Validity
            Not Before: Jan  1 12:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=76304605ef47aaf16deff59a6c94548274e55215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:d6:b8:c2:59:b9:58:56:45:06:ef:31:e5:
                    d0:c7:a4:7b:f3:7d:93:56:14:77:37:f0:f1:dc:a4:
                    bf:3f:cd:a6:e4:76:40:72:86:ad:73:b6:ee:88:b2:
                    e0:04:5e:78:3b:eb:fc:14:9f:a5:b9:41:08:ca:69:
                    21:40:4a:61:51:8f:76:29:07:83:9f:51:5a:18:f9:
                    3f:81:80:8d:14:6f:e3:16:fa:40:97:c2:4c:69:f3:
                    22:88:a7:12:aa:6d:6d:2a:e7:56:30:e3:14:bf:8b:
                    e9:15:f3:6b:28:59:c6:97:8b:21:e4:f7:3d:75:ec:
                    f6:94:36:fe:b9:6f:c3:74:ee:57:5e:1c:ec:2c:d1:
                    c3:4b:96:4d:be:ac:91:9e:35:79:f9:6d:be:06:dd:
                    0e:11:8d:6f:c8:ba:a2:4f:c1:ae:d0:d8:7f:c7:c5:
                    c5:7d:21:d4:91:88:a4:d0:7c:c9:39:bf:25:76:aa:
                    b5:aa:22:34:89:df:55:c9:f9:6b:2e:bb:70:2c:10:
                    63:b6:ea:9a:0a:4a:b8:7c:a6:77:d0:c9:b5:a3:07:
                    19:c7:35:26:49:82:be:27:d5:95:90:90:d6:1e:30:
                    b8:48:83:0e:5c:86:14:bd:1d:8c:96:97:f8:ad:9f:
                    9a:66:4e:a1:2e:b2:7d:41:1e:e2:ed:a8:4d:60:c9:
                    63:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:30:46:05:EF:47:AA:F1:6D:EF:F5:9A:6C:94:54:82:74:E5:52:15
            X509v3 Authority Key Identifier:
                keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/djBGBe9HqvFt7_WabJRUgnTlUhU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.118.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:08:e6:e1:9b:48:0e:62:c0:9b:3b:0c:fe:35:4f:02:c3:8c:
         34:e6:ca:50:58:4f:47:5e:7b:d7:a5:26:bd:e1:e7:26:bc:dd:
         ed:bc:0c:11:de:56:fd:31:93:1f:1d:c3:e4:a9:32:57:ba:94:
         f7:85:de:23:e1:b4:8a:72:d4:86:59:5b:89:f2:86:1b:dc:dd:
         ea:75:e4:c1:ea:e1:c3:92:ca:ae:e6:cf:ba:9e:47:49:0c:56:
         91:85:ef:5c:93:1a:2c:e4:f6:95:95:75:45:b5:db:0a:63:3f:
         be:1d:a8:cf:b6:3a:8d:ed:be:f7:fd:01:51:31:6b:53:04:7b:
         1d:cc:01:9d:b9:28:cd:3b:58:ad:a1:57:b9:63:56:1b:7b:08:
         5d:4a:90:92:8a:ae:01:93:ba:47:1b:b1:fe:8b:b3:f2:5f:fe:
         03:35:b7:7f:49:84:d5:02:fe:ed:e9:1c:9f:b5:87:6f:6b:22:
         03:01:e1:91:0c:1b:10:7a:0d:29:21:4a:a8:f8:56:56:c0:e9:
         6a:ba:77:65:f4:3f:0c:54:7a:9e:03:fb:a8:6a:b8:1a:f3:17:
         ec:28:d6:c7:c5:f6:92:4d:e6:16:0e:fe:d6:f5:1e:17:ff:06:
         7c:23:26:0b:71:24:aa:a0:fd:90:65:82:5f:b5:42:37:5a:c7:
         d2:c7:59:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5futvtBfS9ft7OA5M/Iq5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOTYzZjBlNjdmNGQ4OTNjZjNkNzAxYTIzNjEwZTZmMzg5
NTkyNjAwHhcNMjYwMTAxMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjMwNDYwNWVmNDdhYWYxNmRlZmY1OWE2Yzk0NTQ4Mjc0ZTU1MjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp7WuMJZuVhWRQbvMeXQx6R7832T
VhR3N/Dx3KS/P82m5HZAcoatc7buiLLgBF54O+v8FJ+luUEIymkhQEphUY92KQeD
n1FaGPk/gYCNFG/jFvpAl8JMafMiiKcSqm1tKudWMOMUv4vpFfNrKFnGl4sh5Pc9
dez2lDb+uW/DdO5XXhzsLNHDS5ZNvqyRnjV5+W2+Bt0OEY1vyLqiT8Gu0Nh/x8XF
fSHUkYik0HzJOb8ldqq1qiI0id9VyflrLrtwLBBjtuqaCkq4fKZ30Mm1owcZxzUm
SYK+J9WVkJDWHjC4SIMOXIYUvR2Mlpf4rZ+aZk6hLrJ9QR7i7ahNYMljaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHYwRgXvR6rxbe/1mmyUVIJ05VIVMB8GA1UdIwQY
MBaAFFCWPw5n9NiTzz1wGiNhDm84lZJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZTU4ZDUtMTI2YS00NGFhLWFhMDgt
MGYzYzE2NThkMGI3LzEvZGpCR0JlOUhxdkZ0N19XYWJKUlVnblRsVWhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jZTU4ZDUtMTI2YS00NGFhLWFhMDgtMGYzYzE2NThkMGI3
LzEvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXZ3MA0G
CSqGSIb3DQEBCwUAA4IBAQAwCObhm0gOYsCbOwz+NU8Cw4w05spQWE9HXnvXpSa9
4ecmvN3tvAwR3lb9MZMfHcPkqTJXupT3hd4j4bSKctSGWVuJ8oYb3N3qdeTB6uHD
ksqu5s+6nkdJDFaRhe9ckxos5PaVlXVFtdsKYz++HajPtjqN7b73/QFRMWtTBHsd
zAGduSjNO1itoVe5Y1YbewhdSpCSiq4Bk7pHG7H+i7PyX/4DNbd/SYTVAv7t6Ryf
tYdvayIDAeGRDBsQeg0pIUqo+FZWwOlqundl9D8MVHqeA/uoarga8xfsKNbHxfaS
TeYWDv7W9R4X/wZ8IyYLcSSqoP2QZYJftUI3WsfSx1lJ
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:32:46 2026 by rpki-client