This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/MDOYojRzK_b13iyI5P24Yv-1OfI.roa
File:                     MDOYojRzK_b13iyI5P24Yv-1OfI.roa (raw, json)
Hash identifier:          9C3SntnocakqcNtFoy8WdbT469VxGnuBBybMiDuCskI=
Subject key identifier:   30:33:98:A2:34:73:2B:F6:F5:DE:2C:88:E4:FD:B8:62:FF:B5:39:F2
Certificate issuer:       /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial:       019B77C674862D740FA485014113770BD3AA
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/MDOYojRzK_b13iyI5P24Yv-1OfI.roa
Signing time:             Thu 01 Jan 2026 04:17:33 +0000
ROA not before:           Thu 01 Jan 2026 04:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     396982
IP address blocks:        185.82.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 21:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:74:86:2d:74:0f:a4:85:01:41:13:77:0b:d3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9585c19915455835457413ef222a7d375b29901d
        Validity
            Not Before: Jan  1 04:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=303398a234732bf6f5de2c88e4fdb862ffb539f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:a4:41:55:6e:c2:e2:ba:5c:13:05:eb:e1:
                    c3:01:ea:14:62:ca:2f:e5:ff:09:21:3b:59:0d:79:
                    be:ba:03:57:42:4a:82:b8:3a:e1:47:20:2c:48:49:
                    ef:df:9f:96:31:ae:a3:2b:45:32:ee:81:c1:7b:d9:
                    0a:85:87:14:99:83:bf:1d:09:19:6d:5b:ee:48:4d:
                    dd:72:cf:84:fc:fd:26:29:f3:bf:a3:3a:99:57:4d:
                    a5:aa:ba:d7:33:93:15:88:09:39:a6:0d:71:93:59:
                    93:df:25:a8:e6:5e:3e:fc:db:50:a8:76:9d:16:cc:
                    39:3d:95:87:13:2a:03:e5:bd:7d:7a:2f:89:0a:e7:
                    e3:8c:0d:64:73:8e:99:36:1a:81:c9:15:1d:73:58:
                    d6:6a:dc:42:0e:a0:24:fc:a5:c0:2d:47:f1:ce:ad:
                    76:74:74:de:03:5e:04:2a:89:b8:6a:88:ef:44:86:
                    51:31:b7:3c:8f:78:ee:1c:f8:00:2c:0a:c2:8e:fd:
                    8e:be:05:1d:73:64:e1:aa:7e:a8:ff:6f:e6:f1:99:
                    18:4d:db:20:30:42:cf:f6:4d:11:a0:f6:41:9d:bb:
                    12:3a:4e:aa:44:be:44:cc:4e:71:71:c2:c4:4c:56:
                    1e:f8:d1:dd:1e:49:46:e8:d4:7b:4b:22:67:fe:a0:
                    00:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:33:98:A2:34:73:2B:F6:F5:DE:2C:88:E4:FD:B8:62:FF:B5:39:F2
            X509v3 Authority Key Identifier:
                keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/MDOYojRzK_b13iyI5P24Yv-1OfI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:00:61:fb:48:d6:2e:c4:ad:0f:66:e3:81:52:05:ff:69:26:
         b2:39:29:55:b9:87:37:cc:69:48:5e:29:e3:d6:8e:c0:d2:5f:
         d2:3b:e7:69:7d:55:74:8b:97:46:11:34:83:29:85:bd:94:80:
         d9:4e:6b:7c:a9:f1:f3:b3:8b:09:24:90:ac:13:27:de:6f:15:
         ef:5c:df:37:0e:09:c0:a8:6d:1d:a9:34:10:ef:4f:28:9e:8d:
         0f:46:c2:fa:b4:a4:63:1c:8e:1f:80:d3:43:6f:d4:85:d2:00:
         99:4e:5f:39:22:4c:9e:ec:5c:ae:b7:2e:11:90:55:de:e6:ee:
         15:e7:8b:a3:3d:06:b3:ef:f7:1b:d5:8f:17:12:84:97:66:b6:
         c4:09:4d:f4:80:81:de:be:7a:7f:64:74:fd:4c:20:40:d4:b2:
         4a:74:7d:4b:bb:d8:c2:a7:24:22:d0:17:56:c3:2e:7a:91:4e:
         9f:0f:40:c3:25:06:59:2d:5c:2c:e4:7b:01:c2:7a:67:93:e2:
         97:9b:70:a0:ef:6b:22:25:2a:c3:85:11:28:60:f0:af:92:3e:
         52:97:bb:33:3d:ed:17:91:3b:0d:d3:7a:5b:de:5d:db:c6:c0:
         26:bb:05:20:e1:2b:44:ad:4d:81:f5:24:f8:10:2c:d9:d7:42:
         c1:b6:34:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3xnSGLXQPpIUBQRN3C9OqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ODVjMTk5MTU0NTU4MzU0NTc0MTNlZjIyMmE3ZDM3NWIy
OTkwMWQwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDMzOThhMjM0NzMyYmY2ZjVkZTJjODhlNGZkYjg2MmZmYjUzOWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNSkQVVuwuK6XBMF6+HDAeoUYsov
5f8JITtZDXm+ugNXQkqCuDrhRyAsSEnv35+WMa6jK0Uy7oHBe9kKhYcUmYO/HQkZ
bVvuSE3dcs+E/P0mKfO/ozqZV02lqrrXM5MViAk5pg1xk1mT3yWo5l4+/NtQqHad
Fsw5PZWHEyoD5b19ei+JCufjjA1kc46ZNhqByRUdc1jWatxCDqAk/KXALUfxzq12
dHTeA14EKom4aojvRIZRMbc8j3juHPgALArCjv2OvgUdc2Thqn6o/2/m8ZkYTdsg
MELP9k0RoPZBnbsSOk6qRL5EzE5xccLETFYe+NHdHklG6NR7SyJn/qAANQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDAzmKI0cyv29d4siOT9uGL/tTnyMB8GA1UdIwQY
MBaAFJWFwZkVRVg1RXQT7yIqfTdbKZAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFlYQm1SVkZXRFZGZEJQdklpcDlOMXNwa0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZjU3NTgtYWZmNy00ZDg4LWI3ZGMt
NzcyOTE4ZmZmNTQ0LzEvTURPWW9qUnpLX2IxM2l5STVQMjRZdi0xT2ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jZjU3NTgtYWZmNy00ZDg4LWI3ZGMtNzcyOTE4ZmZmNTQ0
LzEvbFlYQm1SVkZXRFZGZEJQdklpcDlOMXNwa0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVIwMA0G
CSqGSIb3DQEBCwUAA4IBAQBfAGH7SNYuxK0PZuOBUgX/aSayOSlVuYc3zGlIXinj
1o7A0l/SO+dpfVV0i5dGETSDKYW9lIDZTmt8qfHzs4sJJJCsEyfebxXvXN83DgnA
qG0dqTQQ708ono0PRsL6tKRjHI4fgNNDb9SF0gCZTl85Ikye7Fyuty4RkFXe5u4V
54ujPQaz7/cb1Y8XEoSXZrbECU30gIHevnp/ZHT9TCBA1LJKdH1Lu9jCpyQi0BdW
wy56kU6fD0DDJQZZLVws5HsBwnpnk+KXm3Cg72siJSrDhREoYPCvkj5Sl7szPe0X
kTsN03pb3l3bxsAmuwUg4StErU2B9ST4ECzZ10LBtjSR
-----END CERTIFICATE-----
Generated at Fri Jan 9 06:25:48 2026 by rpki-client