This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/m9K62Moe8WeU_sKtOfoCEmIRBJA.roa
File:                     m9K62Moe8WeU_sKtOfoCEmIRBJA.roa (raw, json)
Hash identifier:          FwMiVri1K2PUmyDSR6C3Eh6J7wmeYt/RppeDm2ivdsw=
Subject key identifier:   9B:D2:BA:D8:CA:1E:F1:67:94:FE:C2:AD:39:FA:02:12:62:11:04:90
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       019B797EC424040EB7166A0039AB117031E1
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/m9K62Moe8WeU_sKtOfoCEmIRBJA.roa
Signing time:             Thu 01 Jan 2026 12:18:29 +0000
ROA not before:           Thu 01 Jan 2026 12:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56539
IP address blocks:        78.83.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:c4:24:04:0e:b7:16:6a:00:39:ab:11:70:31:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  1 12:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9bd2bad8ca1ef16794fec2ad39fa021262110490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:03:4a:4f:01:da:35:4d:cc:18:ea:64:fe:94:
                    c4:7f:11:4f:51:69:d2:09:20:f9:53:64:39:31:a3:
                    1d:37:cc:cc:07:aa:73:61:7a:b3:4f:b8:25:32:d1:
                    e8:3c:2a:ed:c6:71:37:a3:1e:19:8a:cf:c8:d7:58:
                    f5:33:c0:48:c8:af:33:62:35:51:ca:63:0a:48:7d:
                    a9:04:9b:27:42:40:55:87:b7:bf:93:41:d8:65:4f:
                    4d:5e:de:92:a0:72:4f:fd:56:b0:b4:e4:00:63:8e:
                    a5:1f:4c:1f:96:2f:13:56:7a:1a:d0:27:9c:e1:8b:
                    05:ba:5c:28:15:e8:e3:d4:7f:dd:aa:73:fd:b8:32:
                    b3:a4:3a:6b:f1:8f:36:d8:03:8a:b2:e9:5f:80:da:
                    58:e8:3f:cc:49:ab:0f:d7:50:58:84:e4:97:a1:80:
                    7e:2d:a4:fe:2a:29:23:b8:be:17:1e:96:c3:db:a1:
                    66:fe:59:c3:1a:bc:89:1c:2b:3b:31:a4:60:f9:8f:
                    fc:91:ea:d1:72:80:b3:dc:44:80:0b:d9:95:a7:01:
                    68:b6:9e:f7:e8:81:9c:39:68:61:7e:84:b5:0e:29:
                    99:6b:8d:c2:b6:f1:a4:55:cd:e6:08:83:00:5b:9c:
                    29:9e:db:a6:7e:18:26:71:54:6e:2e:3d:93:a4:22:
                    0d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D2:BA:D8:CA:1E:F1:67:94:FE:C2:AD:39:FA:02:12:62:11:04:90
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/m9K62Moe8WeU_sKtOfoCEmIRBJA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.83.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:0a:fd:9b:88:fd:01:c0:61:88:7b:15:80:d0:5e:02:06:3a:
         4e:f1:82:0f:09:e5:c3:b5:f8:ab:b9:e5:46:63:af:91:3b:85:
         2d:f9:76:f2:7b:4b:55:f3:7f:08:bd:6d:6a:ce:43:33:21:86:
         7c:96:aa:7b:c3:10:87:ac:67:64:7f:9c:09:76:8a:82:c6:cf:
         0b:99:f0:16:81:e6:79:7e:f0:8a:9d:e7:f7:ca:3f:9a:eb:3a:
         93:50:48:1f:c4:66:66:a4:c3:98:1a:6d:fd:16:9a:e7:6d:cf:
         3a:bf:64:10:c0:de:f5:da:94:b2:64:bb:af:3f:aa:d1:af:3c:
         e4:02:5f:49:d6:a2:83:b1:f2:1b:c0:17:89:62:b0:e8:1e:c6:
         c3:70:45:0a:e5:eb:6a:27:d5:00:94:ff:0c:be:6a:22:b6:7b:
         3d:99:a1:50:dc:38:3c:a4:42:44:cc:4b:53:73:ea:e4:cc:44:
         b5:7f:da:72:91:65:16:4d:8c:4c:fc:55:5e:2e:87:83:12:e4:
         95:24:a1:ea:ce:df:e2:11:b9:b5:fe:ff:49:0c:9e:3d:eb:b0:
         76:0f:c3:b0:aa:33:7a:1d:46:3a:89:91:50:b7:12:35:07:bd:
         87:2a:80:f3:ca:85:42:55:9b:5f:33:10:69:52:0a:f2:e3:e6:
         d0:20:22:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:24:22 2026 by rpki-client