This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/_U_w6bXH111HMDU_sQ6-CKmlsuM.roa
File:                     _U_w6bXH111HMDU_sQ6-CKmlsuM.roa (raw, json)
Hash identifier:          O+NWacU5mxgiI23XoSRRPRaw31TaJyyv5c/Hgp1qWl4=
Subject key identifier:   FD:4F:F0:E9:B5:C7:D7:5D:47:30:35:3F:B1:0E:BE:08:A9:A5:B2:E3
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       019B79ED2B82557347423876CFF8E08480BE
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/_U_w6bXH111HMDU_sQ6-CKmlsuM.roa
Signing time:             Thu 01 Jan 2026 14:19:04 +0000
ROA not before:           Thu 01 Jan 2026 14:19:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213088
IP address blocks:        195.187.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:2b:82:55:73:47:42:38:76:cf:f8:e0:84:80:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 14:19:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fd4ff0e9b5c7d75d4730353fb10ebe08a9a5b2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f7:8d:92:db:aa:42:f8:a0:48:71:ca:cb:17:
                    42:a7:da:58:9d:e3:b3:f3:4e:28:12:c7:18:a4:69:
                    21:aa:e3:76:cf:07:1e:d4:d8:e9:b1:20:f9:f5:50:
                    2f:ca:49:cd:51:f2:e2:86:a6:d9:46:a3:9f:ee:a2:
                    ac:7e:8d:cc:5a:8d:8d:b6:e5:06:86:7c:81:5b:e9:
                    0f:cd:b7:85:cc:64:96:11:52:e0:1f:ef:07:c4:95:
                    6f:75:4e:b1:7a:e8:5f:ef:49:df:58:b7:cd:c7:73:
                    3d:b5:39:ce:4f:bc:24:0e:a0:83:92:60:3f:21:b6:
                    50:0a:b8:4c:8c:d0:be:e8:c6:89:a9:f8:d2:41:b5:
                    b8:60:48:f4:76:3f:f0:72:19:e5:c5:e9:45:33:5d:
                    95:08:8a:a3:ac:a4:1b:2f:6d:47:9c:a5:30:f7:4d:
                    12:6e:11:89:2d:f1:2f:cc:b4:c5:9e:cc:0e:c7:ec:
                    55:86:c8:59:65:05:bb:d2:e8:c3:c0:39:db:00:30:
                    7a:60:9f:b3:b0:54:71:02:c3:72:6f:9c:ea:6d:2d:
                    f9:16:ea:56:e5:12:fa:0f:6e:05:0b:57:4c:db:19:
                    da:8e:8f:cc:8f:4a:67:f4:30:3e:ec:f6:0c:8f:f5:
                    cc:bf:09:08:59:fc:8a:f7:a2:c7:e3:e6:8e:2c:aa:
                    46:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4F:F0:E9:B5:C7:D7:5D:47:30:35:3F:B1:0E:BE:08:A9:A5:B2:E3
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/_U_w6bXH111HMDU_sQ6-CKmlsuM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.187.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:28:ac:30:e8:15:94:9d:96:13:21:2a:9f:2d:ec:c4:d7:7b:
         11:8a:95:0f:e0:03:81:e7:34:69:3d:42:3c:cd:5e:13:d9:c5:
         e7:df:a5:a3:d1:49:00:4b:58:2d:17:97:f7:f8:69:42:3d:e8:
         a3:e9:bf:6e:fa:22:c0:d9:f6:f0:7e:b2:b6:7a:82:25:a3:71:
         58:d9:64:cb:06:75:69:b6:d3:ab:05:f4:f9:b5:4b:db:1e:0a:
         95:be:19:c6:13:87:d2:12:d6:de:e1:56:39:d0:3c:0b:36:b7:
         91:cf:a2:33:15:67:42:0a:dd:79:33:4b:eb:f6:63:15:5c:77:
         21:48:7d:4a:4f:02:2f:7b:45:5b:b9:4c:79:ce:06:eb:48:e5:
         7d:78:8c:2c:03:3b:09:70:3f:f9:fd:bd:a7:51:62:44:0e:4f:
         7d:5e:91:fa:88:ad:a3:7b:9f:92:27:58:4e:c2:f7:56:47:05:
         37:2f:c1:44:6e:6c:fa:87:16:a3:9e:be:5e:53:4e:c5:9a:71:
         5a:32:8b:a4:dd:61:07:4f:f8:fc:6f:90:ae:03:e1:e5:3a:84:
         5a:ca:fc:51:85:a1:96:8a:6b:de:e9:a8:42:dd:8d:70:f7:6e:
         1c:c5:84:76:b5:6f:34:c0:6e:2e:07:88:4b:94:89:f9:64:9e:
         98:73:4c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:22:42 2026 by rpki-client