This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/je_dZ3uZwgn_oNlxsf8-FTUq220.roa
File:                     je_dZ3uZwgn_oNlxsf8-FTUq220.roa (raw, json)
Hash identifier:          ypEWzWUb+UjYyAsZX+8LRu9EB7C2RkmFTCbcPYB408Y=
Subject key identifier:   8D:EF:DD:67:7B:99:C2:09:FF:A0:D9:71:B1:FF:3E:15:35:2A:DB:6D
Certificate issuer:       /CN=c53f0adaeafb40c772459e939354f6be453f158f
Certificate serial:       019B7CEDBCEF7B08B401CFAEA4C705871DBC
Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/je_dZ3uZwgn_oNlxsf8-FTUq220.roa
Signing time:             Fri 02 Jan 2026 04:18:33 +0000
ROA not before:           Fri 02 Jan 2026 04:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56910
IP address blocks:        185.106.38.0/24 maxlen: 24
                          185.106.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:bc:ef:7b:08:b4:01:cf:ae:a4:c7:05:87:1d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f
        Validity
            Not Before: Jan  2 04:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8defdd677b99c209ffa0d971b1ff3e15352adb6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:5f:31:8b:b8:fd:7f:a7:bf:ca:c9:9b:f1:
                    a9:98:f9:9b:e8:84:e8:a5:5d:0e:5e:07:a7:93:f1:
                    34:39:4e:ed:f3:81:6c:0d:c0:7e:89:e6:73:2f:31:
                    60:14:ce:8c:8e:bc:f2:bc:0b:6f:0b:ec:46:49:53:
                    42:5e:71:af:4a:be:bd:55:02:41:80:ba:73:df:74:
                    f1:94:e8:ab:c4:c1:ab:00:69:3d:79:12:83:71:83:
                    fa:da:04:94:07:ee:ab:11:7b:45:92:f9:bd:cf:13:
                    31:6d:e8:73:a5:a6:78:8e:0c:83:af:93:ba:91:fe:
                    a3:58:8e:7c:23:3b:c4:5a:91:d5:13:49:8b:0a:49:
                    e4:75:57:d3:86:23:a9:16:9c:06:3c:f9:31:c6:ca:
                    d6:bf:10:7e:65:ba:73:cf:b4:c7:59:49:11:fa:41:
                    21:6d:a8:b2:0f:9a:55:a2:bd:59:6a:51:39:42:bb:
                    9b:8e:d4:0b:3f:b3:89:87:b8:3d:9d:82:86:8d:43:
                    96:a4:f7:76:1b:b4:02:1b:3c:12:e9:06:37:3e:10:
                    5f:53:4d:41:f2:c1:15:50:73:cc:d1:dd:d3:67:68:
                    e5:a2:2e:28:3f:3d:d3:05:70:39:6c:53:26:c0:66:
                    59:9c:83:2b:c8:95:fb:ca:a9:23:34:67:65:66:0c:
                    f9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EF:DD:67:7B:99:C2:09:FF:A0:D9:71:B1:FF:3E:15:35:2A:DB:6D
            X509v3 Authority Key Identifier:
                keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/je_dZ3uZwgn_oNlxsf8-FTUq220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.106.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:e9:88:c6:9a:32:c0:ba:ce:d8:81:af:0d:0a:fd:10:c9:27:
         bb:72:ed:e9:e2:79:6c:e5:f2:41:b1:91:9e:33:c9:62:85:ac:
         8a:f8:9a:66:80:f5:be:c8:1d:62:69:79:90:62:c4:3f:aa:91:
         38:81:18:1d:16:6c:28:00:f0:ea:f3:62:d1:11:33:25:9f:e9:
         5a:4e:b7:b6:a1:d1:ae:cc:68:c0:60:dd:4f:1f:97:f6:2e:61:
         ba:b8:25:cb:83:eb:61:f9:22:2c:fe:79:a0:45:66:91:de:7c:
         ad:fb:d1:24:05:f9:a3:c6:f1:5f:5d:b8:9a:a7:51:8e:5b:22:
         0d:72:91:56:44:cc:ca:a4:f4:fc:62:1a:a9:0a:cc:ef:a5:77:
         4e:38:cd:f4:b0:78:b2:62:e0:68:bf:fb:3b:06:83:6d:01:27:
         93:e9:86:22:ac:5a:c7:dc:17:dd:13:3e:99:3b:1c:8a:65:50:
         6d:8a:97:7b:a9:ac:58:db:26:b8:63:6d:f3:e7:75:11:f7:a5:
         be:6f:a8:2e:04:f5:08:28:5f:2f:7f:77:4a:a0:3d:18:d7:5d:
         6f:80:6a:f0:7a:4a:4c:ca:ba:6b:e8:76:27:6c:b4:c4:7b:5a:
         e9:0b:fe:0b:43:24:c3:d7:c6:60:78:d6:18:a2:1f:a6:54:8f:
         f0:82:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:20:56 2026 by rpki-client