This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/MiLe-_8b15UVczy4GiB8yRZgf48.roa
File:                     MiLe-_8b15UVczy4GiB8yRZgf48.roa (raw, json)
Hash identifier:          KPRWBrqr/XrAv7wznRcK3KoKuUKu5075WslpbwZVjOc=
Subject key identifier:   32:22:DE:FB:FF:1B:D7:95:15:73:3C:B8:1A:20:7C:C9:16:60:7F:8F
Certificate issuer:       /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial:       019B7F1442EF40C81E393555CB8C2CB05DCD
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/MiLe-_8b15UVczy4GiB8yRZgf48.roa
Signing time:             Fri 02 Jan 2026 14:19:52 +0000
ROA not before:           Fri 02 Jan 2026 14:19:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8480
IP address blocks:        193.233.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:42:ef:40:c8:1e:39:35:55:cb:8c:2c:b0:5d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
        Validity
            Not Before: Jan  2 14:19:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3222defbff1bd79515733cb81a207cc916607f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4c:8d:69:9d:8e:06:b3:0f:7b:58:e7:8c:89:
                    6b:6b:47:01:92:7f:36:e7:ef:b6:5a:4e:4a:40:cc:
                    cc:b3:9d:7a:f0:3d:d6:63:d2:a5:ae:bc:52:84:9a:
                    5d:e1:15:3f:24:12:e8:20:c2:df:1f:d9:8c:dc:f2:
                    70:72:ee:c4:11:47:df:29:54:6f:c1:72:74:70:d8:
                    fb:90:34:8d:23:c7:b1:4c:e1:25:6f:e4:2e:dc:f6:
                    ac:72:b1:ec:b8:71:b9:9d:b6:83:a4:f9:fe:86:84:
                    9e:b9:67:c1:ce:cf:96:78:b0:9b:e7:06:82:e0:88:
                    05:28:c4:8c:17:b5:59:4a:4b:d9:f1:ec:d1:f4:68:
                    2f:4e:d5:3c:12:2a:72:b0:9c:f1:24:e4:c0:cb:e4:
                    9e:c3:f8:1d:f6:d8:c1:13:2b:68:86:ed:2e:69:be:
                    19:00:6a:52:42:06:af:df:b2:b7:09:57:2d:5f:8c:
                    c8:24:5f:18:b5:d3:f4:a9:04:f1:48:97:85:37:fe:
                    e9:95:b8:4a:f9:40:ae:8f:65:a3:35:3c:52:5d:fc:
                    f7:8e:b2:26:a2:cf:c2:16:73:bd:04:7d:93:09:6f:
                    62:dd:67:fe:ce:5e:af:58:16:ff:cb:46:b4:d0:8f:
                    ff:ca:53:05:ab:eb:e7:b6:33:aa:88:1f:28:25:52:
                    7d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:22:DE:FB:FF:1B:D7:95:15:73:3C:B8:1A:20:7C:C9:16:60:7F:8F
            X509v3 Authority Key Identifier:
                keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/MiLe-_8b15UVczy4GiB8yRZgf48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.233.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:e6:82:a9:05:9e:0d:5e:14:54:14:01:06:44:bd:d4:8a:c7:
         06:8b:ec:57:50:37:e5:ce:41:71:6c:c9:db:71:eb:df:8a:15:
         89:82:ba:0c:d9:93:5b:75:36:bd:19:c8:37:c9:e9:ea:41:f0:
         96:dc:60:bb:bf:6d:23:5b:7b:c4:80:29:19:b6:06:2a:96:c7:
         af:66:d5:83:c9:d1:93:b5:91:d1:cc:dd:e3:90:53:1b:1c:d8:
         67:64:7b:e2:1a:99:e8:a5:7a:4c:e7:3c:00:7b:82:2e:2e:92:
         be:06:c5:1f:06:51:36:ce:49:07:ce:dc:72:ef:e3:1d:65:07:
         2c:5d:a9:78:b7:22:06:24:fb:f6:09:93:75:a8:47:17:85:ed:
         bb:9e:bb:a9:39:a0:c9:2f:21:76:13:b2:93:13:6f:20:bb:eb:
         d4:fe:e2:1d:1d:b5:45:eb:9a:5a:0d:9a:db:3a:8b:41:9d:6d:
         14:a6:9f:ae:9c:c8:54:50:d7:c2:ea:01:e4:13:1c:67:54:3b:
         74:db:4b:f8:d2:41:fd:23:e9:3e:ac:ac:bd:5f:96:36:40:59:
         8c:e4:04:7a:1e:8d:14:be:ab:fc:40:0d:2b:37:78:10:db:db:
         7b:af:80:fb:05:15:c1:4f:17:81:dc:55:2c:80:0e:61:56:bd:
         e6:9f:86:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 11:09:49 2026 by rpki-client