This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/MMWaV_EwT3XXaEY4uovqJFOWcj0.roa
File:                     MMWaV_EwT3XXaEY4uovqJFOWcj0.roa (raw, json)
Hash identifier:          yrPylmFzsrZ4DI6lNgXuVhkgMOQp14n/urzO52FiVXM=
Subject key identifier:   30:C5:9A:57:F1:30:4F:75:D7:68:46:38:BA:8B:EA:24:53:96:72:3D
Certificate issuer:       /CN=7679884f6330b65060edc41ccac0e546d380a504
Certificate serial:       019B797EE8B3C9D869A91155964AC5DA0207
Authority key identifier: 76:79:88:4F:63:30:B6:50:60:ED:C4:1C:CA:C0:E5:46:D3:80:A5:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/MMWaV_EwT3XXaEY4uovqJFOWcj0.roa
Signing time:             Thu 01 Jan 2026 12:18:38 +0000
ROA not before:           Thu 01 Jan 2026 12:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31072
IP address blocks:        193.23.53.0/24 maxlen: 24
                          195.3.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:e8:b3:c9:d8:69:a9:11:55:96:4a:c5:da:02:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7679884f6330b65060edc41ccac0e546d380a504
        Validity
            Not Before: Jan  1 12:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=30c59a57f1304f75d7684638ba8bea245396723d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d9:da:e4:2c:43:a4:66:27:45:98:5c:21:eb:
                    d8:11:ec:f5:73:71:77:62:24:ae:a3:28:1f:45:b4:
                    a2:ca:14:67:10:1e:6a:96:a7:8f:99:c7:99:b4:ca:
                    1b:44:aa:8f:e5:e1:2c:2b:eb:72:8b:a2:e9:fa:a9:
                    8f:d7:31:85:72:a5:c6:9b:76:4b:87:10:82:1a:71:
                    3f:56:53:1e:4b:ce:80:3a:8f:b9:26:9c:05:2e:d4:
                    ee:8e:80:89:66:c0:64:9b:2b:af:d2:fd:0d:a5:fe:
                    81:c1:4e:66:8e:10:e6:1c:27:62:0c:86:96:9b:48:
                    3e:e5:e0:2c:35:21:78:6d:02:e9:b5:4e:3c:86:8e:
                    5a:41:5b:32:a3:b2:53:72:a9:a5:24:6b:10:d2:83:
                    fe:dd:03:19:cb:3e:5d:44:90:12:46:e4:e3:64:58:
                    bf:f2:3e:1f:02:ec:79:f2:13:3e:21:8e:95:cf:06:
                    ed:69:c5:8b:ee:17:6f:20:0e:ef:d9:3b:a7:6a:c5:
                    e1:39:61:ff:5d:06:d4:be:c7:b3:94:60:b6:cf:a0:
                    74:60:3a:96:08:5d:c9:9d:c7:c3:04:d0:74:1a:17:
                    5e:f5:5a:ff:d7:ef:e6:28:8e:a9:9a:ec:24:dd:03:
                    78:e3:c6:76:a6:47:23:90:16:8a:97:c2:c2:15:e2:
                    94:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C5:9A:57:F1:30:4F:75:D7:68:46:38:BA:8B:EA:24:53:96:72:3D
            X509v3 Authority Key Identifier:
                keyid:76:79:88:4F:63:30:B6:50:60:ED:C4:1C:CA:C0:E5:46:D3:80:A5:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/MMWaV_EwT3XXaEY4uovqJFOWcj0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.23.53.0/24
                  195.3.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:4c:5b:af:76:e6:b4:21:c1:30:87:60:d8:bc:6c:02:d0:70:
         dc:07:ea:97:21:6d:b3:49:c8:51:9c:9f:3f:ef:b5:90:0f:12:
         8a:2f:c1:77:37:c0:ed:94:13:01:7e:96:c5:9e:02:a8:72:cf:
         c5:d8:d9:82:7f:c3:0e:e6:fe:94:91:5d:2b:fb:95:ee:68:7c:
         ee:e6:2b:9c:02:1f:75:4c:ad:d1:58:b7:8b:80:b8:41:d1:41:
         15:35:f0:3f:f3:33:14:4e:5a:b6:46:4a:0a:59:77:77:55:96:
         4d:5c:8a:63:69:94:45:e3:e2:5a:13:ae:22:2d:ed:5c:ce:4c:
         5e:77:2d:79:78:ed:d0:a7:57:36:4b:fe:48:8a:49:3b:c9:9c:
         ae:ac:02:83:19:8a:20:4f:97:09:30:0b:48:90:f8:a0:93:fa:
         a2:83:b7:b1:47:65:ed:c3:08:d4:53:01:9b:88:65:b1:16:84:
         e7:48:c6:29:30:65:d3:b4:43:a5:d7:4c:02:33:03:6c:1e:73:
         63:a0:9b:cf:a8:bd:8a:fa:5c:72:c1:5f:3d:ec:1b:17:94:7d:
         08:12:6f:37:ce:42:83:23:0b:dc:7a:06:b0:06:96:3f:ec:81:
         71:de:13:80:26:bb:89:86:f2:15:e8:e2:60:d0:e8:85:2e:61:
         f9:ac:11:60
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt5fuizydhpqRFVlkrF2gIHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2Nzk4ODRmNjMzMGI2NTA2MGVkYzQxY2NhYzBlNTQ2ZDM4
MGE1MDQwHhcNMjYwMTAxMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGM1OWE1N2YxMzA0Zjc1ZDc2ODQ2MzhiYThiZWEyNDUzOTY3MjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dna5CxDpGYnRZhcIevYEez1c3F3
YiSuoygfRbSiyhRnEB5qlqePmceZtMobRKqP5eEsK+tyi6Lp+qmP1zGFcqXGm3ZL
hxCCGnE/VlMeS86AOo+5JpwFLtTujoCJZsBkmyuv0v0Npf6BwU5mjhDmHCdiDIaW
m0g+5eAsNSF4bQLptU48ho5aQVsyo7JTcqmlJGsQ0oP+3QMZyz5dRJASRuTjZFi/
8j4fAux58hM+IY6VzwbtacWL7hdvIA7v2TunasXhOWH/XQbUvsezlGC2z6B0YDqW
CF3JncfDBNB0Ghde9Vr/1+/mKI6pmuwk3QN448Z2pkcjkBaKl8LCFeKUAQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDDFmlfxME9112hGOLqL6iRTlnI9MB8GA1UdIwQY
MBaAFHZ5iE9jMLZQYO3EHMrA5UbTgKUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG5tSVQyTXd0bEJnN2NRY3lzRGxSdE9BcFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yOTk5NTktMTJmNC00ZmU3LTlmMzAt
OTllNzZjMjczOWZiLzEvTU1XYVZfRXdUM1hYYUVZNHVvdnFKRk9XY2owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8yOTk5NTktMTJmNC00ZmU3LTlmMzAtOTllNzZjMjczOWZi
LzEvZG5tSVQyTXd0bEJnN2NRY3lzRGxSdE9BcFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwRc1AwQC
wwPEMA0GCSqGSIb3DQEBCwUAA4IBAQAVTFuvdua0IcEwh2DYvGwC0HDcB+qXIW2z
SchRnJ8/77WQDxKKL8F3N8DtlBMBfpbFngKocs/F2NmCf8MO5v6UkV0r+5XuaHzu
5iucAh91TK3RWLeLgLhB0UEVNfA/8zMUTlq2RkoKWXd3VZZNXIpjaZRF4+JaE64i
Le1czkxedy15eO3Qp1c2S/5Iikk7yZyurAKDGYogT5cJMAtIkPigk/qig7exR2Xt
wwjUUwGbiGWxFoTnSMYpMGXTtEOl10wCMwNsHnNjoJvPqL2K+lxywV897BsXlH0I
Em83zkKDIwvcegawBpY/7IFx3hOAJruJhvIV6OJg0OiFLmH5rBFg
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:19 2026 by rpki-client