This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/m8kkTcuRnN7jdpecWP_kNkmos3Y.roa
File:                     m8kkTcuRnN7jdpecWP_kNkmos3Y.roa (raw, json)
Hash identifier:          jnO+aeNt2qlytyPa1+EhnJ3mLFArOuo3pXEevkUmRJw=
Subject key identifier:   9B:C9:24:4D:CB:91:9C:DE:E3:76:97:9C:58:FF:E4:36:49:A8:B3:76
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019A588CDC2F55E0107CB5DE8CF3C31B4B5D
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/m8kkTcuRnN7jdpecWP_kNkmos3Y.roa
Signing time:             Thu 06 Nov 2025 09:43:37 +0000
ROA not before:           Thu 06 Nov 2025 09:43:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     24712
IP address blocks:        193.230.245.0/24 maxlen: 24
                          193.231.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:58:8c:dc:2f:55:e0:10:7c:b5:de:8c:f3:c3:1b:4b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Nov  6 09:43:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9bc9244dcb919cdee376979c58ffe43649a8b376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:e1:17:5c:6a:07:f7:a9:55:83:ac:0e:fc:
                    84:a8:51:73:46:e0:9b:9f:f0:d0:74:37:0c:f9:41:
                    9c:f0:aa:76:6f:5c:c5:59:23:13:fa:c9:7f:9f:a1:
                    f5:c7:b2:47:1e:d2:0e:be:93:ee:a5:ea:5a:97:60:
                    35:e6:9a:b3:4e:01:66:a3:d8:b0:68:f2:0c:8c:bb:
                    77:0f:b3:bd:1a:14:f9:2b:b5:6d:bd:cb:2b:61:9f:
                    95:bc:73:a5:68:d3:52:80:dd:9a:9d:61:e3:5e:6c:
                    ca:c5:12:84:8d:ff:04:12:4d:a0:f8:68:84:26:65:
                    70:8b:67:ce:44:46:07:41:d4:85:65:ea:5d:ff:e6:
                    ea:d0:6c:db:e7:67:69:80:f0:1d:35:67:6d:5d:c1:
                    e5:20:51:47:62:a8:8a:78:b5:c5:a1:4e:62:e5:6b:
                    ef:79:05:97:1b:66:6c:d2:12:53:2a:91:36:70:ac:
                    b7:10:b2:cd:d5:1a:ea:f1:92:cb:48:3d:cb:44:60:
                    98:21:df:83:89:00:74:cb:a2:f3:6c:64:04:d9:62:
                    ad:ee:f8:c0:c3:62:e3:22:f9:a0:9d:ec:b7:ad:b4:
                    2a:02:c4:30:99:fa:a5:9c:56:05:d2:b6:4a:69:25:
                    d5:95:95:99:8c:4f:b5:93:bd:50:1b:d2:44:19:3a:
                    ab:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C9:24:4D:CB:91:9C:DE:E3:76:97:9C:58:FF:E4:36:49:A8:B3:76
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/m8kkTcuRnN7jdpecWP_kNkmos3Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.230.245.0/24
                  193.231.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:c7:85:f2:2f:87:cb:3b:cc:d4:36:a9:f9:7b:27:70:21:e7:
         e3:f4:7d:ce:69:1b:fe:d6:17:ce:df:91:d8:26:bb:27:9b:bc:
         cd:f5:c9:77:12:11:cd:b9:13:c9:86:12:e2:c0:7c:75:5f:8a:
         0e:01:85:cd:bd:48:1e:53:8a:6d:2a:33:9d:ae:75:44:9c:98:
         4b:a8:14:6c:a2:f8:7a:fb:f6:b0:28:1b:4e:15:11:ab:9e:1e:
         a6:eb:15:c5:84:93:04:23:61:1a:57:52:26:7f:c2:ab:ce:0e:
         e3:e9:e6:e2:66:7e:c8:49:03:5c:13:e5:52:4c:67:b3:e7:49:
         1e:35:7d:bb:ce:ee:d3:9d:d3:ab:6d:4c:33:4f:3e:42:e9:2f:
         5c:e4:52:4f:18:b9:e9:4c:c4:6c:82:49:2a:de:21:33:86:b8:
         3f:06:2b:a5:5f:c4:f1:f9:e9:46:37:93:c6:9f:3f:4c:1b:08:
         b2:1a:d5:78:90:5f:73:1b:46:ac:d2:8e:ac:03:86:95:90:ec:
         3b:65:6c:1b:1f:a4:1d:c7:b1:51:ef:37:79:39:42:07:a4:d2:
         8e:e8:7a:e2:91:08:2c:9f:4a:ff:ce:df:91:1f:2b:95:9f:2d:
         06:36:bb:16:92:1c:f2:8b:22:48:3e:de:64:fb:ac:f3:1e:15:
         e7:61:f1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 20:13:36 2025 by rpki-client