This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/Rmp_9MM7V4RosyhvB1k5klKEX-U.roa
File:                     Rmp_9MM7V4RosyhvB1k5klKEX-U.roa (raw, json)
Hash identifier:          WJrFVR/skZVXQabPx1ss/hhLdnIXcPvdR9wwm+o94z8=
Subject key identifier:   46:6A:7F:F4:C3:3B:57:84:68:B3:28:6F:07:59:39:92:52:84:5F:E5
Certificate issuer:       /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial:       019B7CED8595B2B81993F684CD0AC95AB5B2
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/Rmp_9MM7V4RosyhvB1k5klKEX-U.roa
Signing time:             Fri 02 Jan 2026 04:18:19 +0000
ROA not before:           Fri 02 Jan 2026 04:18:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212435
IP address blocks:        193.163.76.0/24 maxlen: 24
                          2a12:4b80::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 15:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:85:95:b2:b8:19:93:f6:84:cd:0a:c9:5a:b5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
        Validity
            Not Before: Jan  2 04:18:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=466a7ff4c33b578468b3286f0759399252845fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:cf:8f:ec:c9:5b:a8:13:3f:89:5e:be:cd:
                    23:50:d5:1f:1e:33:47:bb:01:aa:99:e1:53:18:42:
                    03:24:ed:59:ea:c2:2a:b3:0c:c9:08:87:72:ef:62:
                    d4:6a:6a:d5:3b:b6:c8:82:fe:29:a4:ce:34:c3:da:
                    21:d3:46:2c:11:e2:89:5d:90:a5:38:5d:0b:01:cd:
                    f6:8b:ac:50:bd:35:0a:e4:b7:90:77:ab:33:3e:24:
                    fe:2e:21:4b:74:20:82:8d:55:97:08:89:41:f0:0c:
                    42:9e:07:af:af:63:e8:49:57:67:ee:9b:34:a6:e5:
                    1b:25:e1:b0:1b:28:c4:c5:da:d3:c9:4c:85:da:02:
                    f9:d1:c4:ee:a9:95:0e:c4:41:21:db:3d:3d:1b:5c:
                    c8:83:14:32:05:13:d2:d3:01:07:b2:31:50:9a:d6:
                    3b:01:16:58:a1:f7:22:83:d7:be:3f:a5:57:95:b2:
                    00:e3:c4:fb:8c:b0:f5:ad:0e:e2:80:9d:90:fd:bd:
                    bf:04:1c:0f:aa:57:7a:2c:db:09:c0:34:58:fe:e4:
                    06:b2:eb:87:57:92:e4:0d:65:94:3f:7a:ee:0b:c6:
                    f8:33:aa:0a:ca:b1:c5:48:29:e1:02:ce:6b:bd:69:
                    b7:2e:17:ec:e1:ef:6b:12:3f:35:63:27:2a:ce:1c:
                    08:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6A:7F:F4:C3:3B:57:84:68:B3:28:6F:07:59:39:92:52:84:5F:E5
            X509v3 Authority Key Identifier:
                keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/Rmp_9MM7V4RosyhvB1k5klKEX-U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.76.0/24
                IPv6:
                  2a12:4b80::/29

    Signature Algorithm: sha256WithRSAEncryption
         af:3a:56:f3:33:11:34:6d:f4:2c:6a:71:46:6c:2e:9a:d6:48:
         73:55:72:bc:96:f2:07:ca:1d:03:2c:33:8c:b6:df:16:c2:4d:
         9c:c3:ec:a8:64:d9:38:70:18:6d:53:62:94:17:de:12:4d:3c:
         1c:8f:e5:eb:d2:f4:31:a1:f2:db:27:dc:b6:e2:37:59:82:22:
         1b:31:8a:a0:00:7d:49:eb:0a:1d:c4:70:b3:d4:be:71:f1:10:
         87:78:20:ed:2c:f5:8c:55:8d:4b:b2:4f:4d:10:28:52:76:ba:
         fc:fd:33:dc:c1:54:2f:8b:82:7f:59:c0:7c:98:63:fb:0e:5a:
         96:3b:09:f6:b8:18:d2:6a:36:f8:46:09:1e:9f:a7:4a:1b:4a:
         93:17:3c:ca:83:70:4f:11:c4:68:b6:47:83:2a:6b:68:5b:04:
         c2:03:2d:88:6f:39:2d:71:61:1e:b0:5d:a0:a4:2a:80:92:07:
         d2:6f:92:e0:b1:34:7b:9b:3d:3a:ca:c9:81:82:20:e7:2e:b0:
         c9:bc:ef:bb:cf:d3:b8:ea:04:80:62:3a:d6:8c:39:25:48:93:
         dd:34:c9:b0:ba:a3:e8:71:0a:18:c8:e8:2e:82:b2:f8:12:9b:
         98:3b:92:03:5d:06:54:e0:34:e5:f7:fe:a0:47:88:be:77:f4:
         65:5b:7b:59
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt87YWVsrgZk/aEzQrJWrWyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MDY5YjRlYzA0N2M2YzJkODBhNDk5MmU0MjI4YjMxN2Nj
OGIyMGMwHhcNMjYwMTAyMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjZhN2ZmNGMzM2I1Nzg0NjhiMzI4NmYwNzU5Mzk5MjUyODQ1ZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziTPj+zJW6gTP4levs0jUNUfHjNH
uwGqmeFTGEIDJO1Z6sIqswzJCIdy72LUamrVO7bIgv4ppM40w9oh00YsEeKJXZCl
OF0LAc32i6xQvTUK5LeQd6szPiT+LiFLdCCCjVWXCIlB8AxCngevr2PoSVdn7ps0
puUbJeGwGyjExdrTyUyF2gL50cTuqZUOxEEh2z09G1zIgxQyBRPS0wEHsjFQmtY7
ARZYofcig9e+P6VXlbIA48T7jLD1rQ7igJ2Q/b2/BBwPqld6LNsJwDRY/uQGsuuH
V5LkDWWUP3ruC8b4M6oKyrHFSCnhAs5rvWm3Lhfs4e9rEj81YycqzhwIcwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEZqf/TDO1eEaLMobwdZOZJShF/lMB8GA1UdIwQY
MBaAFCgGm07AR8bC2ApJkuQiizF8yLIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODct
ZGY3YjQ1YmU0NmM3LzEvUm1wXzlNTTdWNFJvc3lodkIxazVrbEtFWC1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODctZGY3YjQ1YmU0NmM3
LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwaNMMA0E
AgACMAcDBQMqEkuAMA0GCSqGSIb3DQEBCwUAA4IBAQCvOlbzMxE0bfQsanFGbC6a
1khzVXK8lvIHyh0DLDOMtt8Wwk2cw+yoZNk4cBhtU2KUF94STTwcj+Xr0vQxofLb
J9y24jdZgiIbMYqgAH1J6wodxHCz1L5x8RCHeCDtLPWMVY1Lsk9NEChSdrr8/TPc
wVQvi4J/WcB8mGP7DlqWOwn2uBjSajb4Rgken6dKG0qTFzzKg3BPEcRotkeDKmto
WwTCAy2IbzktcWEesF2gpCqAkgfSb5LgsTR7mz06ysmBgiDnLrDJvO+7z9O46gSA
YjrWjDklSJPdNMmwuqPocQoYyOgugrL4EpuYO5IDXQZU4DTl9/6gR4i+d/RlW3tZ
-----END CERTIFICATE-----
Generated at Wed Jan 21 19:34:52 2026 by rpki-client