This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/MJk2hRWFPXbWPid66y-yooVzeJI.roa
File:                     MJk2hRWFPXbWPid66y-yooVzeJI.roa (raw, json)
Hash identifier:          hXdMru/lhTHGd2pc4sxdOlRtEDGUTqlGbfj85klFeUI=
Subject key identifier:   30:99:36:85:15:85:3D:76:D6:3E:27:7A:EB:2F:B2:A2:85:73:78:92
Certificate issuer:       /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial:       019B7DC983F1DDE4DD18DF37F2AE1DA0074A
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/MJk2hRWFPXbWPid66y-yooVzeJI.roa
Signing time:             Fri 02 Jan 2026 08:18:37 +0000
ROA not before:           Fri 02 Jan 2026 08:18:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208626
IP address blocks:        178.171.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:c9:83:f1:dd:e4:dd:18:df:37:f2:ae:1d:a0:07:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
        Validity
            Not Before: Jan  2 08:18:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3099368515853d76d63e277aeb2fb2a285737892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ef:f1:8d:ce:d9:65:32:0c:40:13:3b:c3:03:
                    1d:fa:50:a4:ab:b1:b3:6d:21:03:b2:f9:1b:91:e8:
                    ee:b2:64:2f:98:3b:6b:a9:94:e0:27:82:53:24:02:
                    57:c5:d1:39:1c:1e:85:68:86:69:d9:5e:46:09:4e:
                    17:10:56:df:f8:02:c2:aa:5f:f5:e0:1b:fc:ed:f1:
                    ec:6f:b9:8d:56:7e:92:6c:9a:42:a9:20:17:53:ff:
                    4a:c7:56:02:34:23:a2:81:ce:91:fa:b0:52:b5:6f:
                    32:5d:c5:32:09:d8:8a:ff:9a:c9:7d:82:18:cf:ea:
                    61:ff:1d:a7:72:d0:3e:2d:06:7d:d0:62:80:67:e3:
                    c3:d3:5d:16:e7:8c:a6:78:2f:04:d1:9a:eb:d0:ba:
                    1c:f1:2c:c1:64:72:10:25:b4:7e:6f:2e:2f:b6:4c:
                    60:55:55:58:b5:ae:cd:e5:63:23:d4:a6:df:0e:1a:
                    cc:6f:89:0a:8d:a6:01:db:ca:12:ab:63:c9:9e:58:
                    c6:f5:d9:16:e9:d0:20:70:1f:02:18:17:1d:39:6b:
                    09:51:b6:42:d7:77:63:58:ff:20:bf:50:27:79:f4:
                    8e:e8:d6:5c:ab:5f:b8:36:a3:48:d6:bf:cc:d5:c8:
                    e7:96:af:42:b0:55:58:15:0c:41:75:aa:8f:02:60:
                    0b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:99:36:85:15:85:3D:76:D6:3E:27:7A:EB:2F:B2:A2:85:73:78:92
            X509v3 Authority Key Identifier:
                keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/MJk2hRWFPXbWPid66y-yooVzeJI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.171.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:b0:d8:3e:f2:25:19:2b:8c:dc:dd:e0:5b:6e:5e:9f:6a:06:
         11:08:2a:f3:d8:e1:1d:ff:63:05:1c:82:72:c5:cf:a4:64:88:
         eb:24:20:8e:7e:28:7d:11:9c:93:a7:2b:9f:05:d7:07:78:79:
         69:c3:54:0a:2b:72:ce:bc:81:1e:9e:88:2d:64:a3:31:55:e4:
         ef:64:f7:33:13:fb:1c:b3:77:b4:14:a4:4a:ee:45:56:e7:9a:
         5e:db:e4:74:0f:b9:c3:70:79:7d:67:5f:10:90:da:29:18:e2:
         ad:2c:46:6a:3c:60:7f:cf:a1:b5:cd:37:a3:fd:c4:6a:5d:e7:
         c4:8c:98:4f:f9:e1:2f:bb:dd:72:d0:1c:01:a9:f5:ac:48:07:
         d8:e6:89:18:e8:0a:b6:91:08:09:04:32:72:bf:2d:32:d7:ed:
         a5:40:cc:98:27:cd:28:e2:fd:f4:a6:00:06:52:8a:73:87:95:
         62:b1:ee:e2:cc:ee:47:41:87:ff:a6:0c:ae:68:23:bc:65:0d:
         f8:28:40:c0:c2:ca:00:e1:2a:7f:f8:f7:60:40:7c:a0:8a:5a:
         9b:16:b8:98:8a:7e:e5:38:52:7d:f8:b1:19:94:b5:e7:cb:ad:
         a9:cc:1a:bd:9e:20:05:de:6f:71:37:21:30:62:51:81:0f:cd:
         e6:3a:de:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 03:36:11 2026 by rpki-client