This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/mvxh-rOke_DkzRY8ft8eh2hcu3c.roa
File:                     mvxh-rOke_DkzRY8ft8eh2hcu3c.roa (raw, json)
Hash identifier:          mO8wfEWOgWeH5fHdk1S12TOPRlbDf3UxDj8Kf/mMQhk=
Subject key identifier:   9A:FC:61:FA:B3:A4:7B:F0:E4:CD:16:3C:7E:DF:1E:87:68:5C:BB:77
Certificate issuer:       /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial:       019B7B36186C3EF959A22C0ECDAB67011146
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/mvxh-rOke_DkzRY8ft8eh2hcu3c.roa
Signing time:             Thu 01 Jan 2026 20:18:21 +0000
ROA not before:           Thu 01 Jan 2026 20:18:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212735
IP address blocks:        93.177.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Jan 2026 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:18:6c:3e:f9:59:a2:2c:0e:cd:ab:67:01:11:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
        Validity
            Not Before: Jan  1 20:18:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9afc61fab3a47bf0e4cd163c7edf1e87685cbb77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:63:68:4b:df:9f:ae:4f:6f:2e:ca:9c:07:59:
                    ee:70:17:ff:96:c3:de:bb:a3:18:7f:ef:1c:0d:17:
                    52:d7:47:85:02:47:03:61:99:ad:4b:c7:d1:b2:62:
                    7f:d7:51:7c:1c:bb:13:62:a7:5b:76:1b:d2:57:e5:
                    5d:39:b4:ad:18:d3:d2:00:38:8c:70:6a:28:82:29:
                    aa:18:55:db:91:a0:1b:4a:1f:c1:14:de:23:91:cd:
                    33:e1:e4:82:8f:88:35:3b:bd:d2:6d:24:d9:5f:0d:
                    ad:d9:eb:c1:04:76:51:fd:53:44:cc:a6:7a:85:d0:
                    86:cf:11:b9:4c:b4:bc:de:21:ee:6c:b8:01:f1:51:
                    ac:ad:4f:40:11:27:2b:cd:23:94:6d:8d:dc:8b:13:
                    e9:3f:ab:76:85:89:8d:5d:ff:00:23:8e:dd:ed:42:
                    1c:59:22:f2:47:e8:25:2e:7d:93:e3:55:aa:a4:47:
                    bf:11:fc:77:a0:1f:0e:73:83:d8:86:0b:e7:84:19:
                    ec:8c:ab:69:4e:e7:d3:47:7c:ab:1d:14:78:9b:50:
                    42:0b:d4:bc:2a:76:41:cc:07:74:20:f0:8e:67:32:
                    9a:02:82:17:0d:6a:6c:8e:ab:24:9b:91:e8:49:b4:
                    ca:09:df:0d:16:8a:7a:1d:f6:74:7f:59:2b:9a:73:
                    f7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FC:61:FA:B3:A4:7B:F0:E4:CD:16:3C:7E:DF:1E:87:68:5C:BB:77
            X509v3 Authority Key Identifier:
                keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/mvxh-rOke_DkzRY8ft8eh2hcu3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:00:5c:dc:58:c6:a8:94:a1:20:f3:c8:3c:45:b5:a7:23:e9:
         a8:a5:45:59:28:7f:d0:c5:df:cd:cd:c0:33:f0:26:0a:89:bb:
         13:fa:af:8c:27:ea:92:2a:fb:55:62:34:49:4c:ac:50:e7:16:
         0c:77:76:ba:bc:b0:92:8a:be:f8:69:f0:93:77:87:b8:07:88:
         dd:ee:78:fb:e6:dd:de:85:75:54:af:e0:f4:7a:9e:93:60:88:
         d3:39:ab:52:9a:06:18:90:df:3a:23:aa:14:86:bb:aa:4d:f3:
         04:1c:62:c8:ea:71:b9:85:c4:f7:04:ed:26:56:09:4c:9b:2d:
         6b:5e:a7:29:55:03:0e:a0:f1:54:8d:42:3d:8b:62:e8:77:b0:
         41:a9:cb:52:9d:67:ef:73:05:c0:6c:a4:66:c5:01:c8:eb:92:
         55:5c:25:a0:27:76:b5:80:ed:05:63:a4:ca:8b:78:58:1f:30:
         ad:a0:2b:c0:48:a3:78:e6:87:3f:10:47:10:ed:da:f0:c6:31:
         fb:99:1a:31:6c:03:09:b8:0d:1e:5a:b8:c3:0f:39:46:bc:e8:
         58:ba:71:e8:84:41:99:0e:f6:d8:f4:23:d1:21:03:f5:da:f3:
         05:e7:c3:bb:f5:b2:e3:42:05:b9:0d:b9:31:fc:fe:bd:d3:05:
         70:13:96:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 15 13:17:27 2026 by rpki-client