This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/moo7T-KZOZcRqQSNUP7xeKxh_Ws.roa
File:                     moo7T-KZOZcRqQSNUP7xeKxh_Ws.roa (raw, json)
Hash identifier:          ArRurQHIuUojo5zTK1v6H0uX0qChX5C2Q/FHUBFiXF4=
Subject key identifier:   9A:8A:3B:4F:E2:99:39:97:11:A9:04:8D:50:FE:F1:78:AC:61:FD:6B
Certificate issuer:       /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial:       019B7EA51F21393006FA8175F0CAFBF95C9C
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/moo7T-KZOZcRqQSNUP7xeKxh_Ws.roa
Signing time:             Fri 02 Jan 2026 12:18:29 +0000
ROA not before:           Fri 02 Jan 2026 12:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207782
IP address blocks:        45.11.200.0/24 maxlen: 24
                          45.11.202.0/24 maxlen: 24
                          45.11.203.0/24 maxlen: 24
                          45.81.100.0/24 maxlen: 24
                          45.81.101.0/24 maxlen: 24
                          45.81.102.0/24 maxlen: 24
                          45.81.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a5:1f:21:39:30:06:fa:81:75:f0:ca:fb:f9:5c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
        Validity
            Not Before: Jan  2 12:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9a8a3b4fe299399711a9048d50fef178ac61fd6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:56:c8:0b:37:51:b8:bc:23:a1:40:fd:c1:d6:
                    ca:8e:86:50:ed:db:af:8f:02:91:27:98:3a:de:e1:
                    de:a0:f0:82:93:36:93:ff:27:26:80:85:46:6c:a1:
                    e3:88:72:8e:01:d4:7c:1b:88:60:12:2c:fa:b6:19:
                    9a:e7:b2:65:a1:d8:ac:74:2b:08:1e:ac:86:c3:33:
                    84:0b:52:73:5f:cc:d6:b1:da:dd:29:08:aa:c4:80:
                    17:ac:b3:72:88:ed:c2:33:76:8b:35:38:3c:0c:7e:
                    5f:3c:9f:a5:42:78:b8:11:b7:64:27:e5:c8:57:7f:
                    0a:4f:f8:23:ec:0d:3e:de:71:ad:f5:6f:ff:ac:d2:
                    bf:5e:1b:15:bc:59:b0:16:58:7f:2f:6a:15:d4:ed:
                    28:29:37:5b:fb:1d:a9:41:ff:78:1b:5d:37:7f:f7:
                    ec:fb:05:c3:f1:ba:5f:c9:86:ad:0f:ec:40:fd:d9:
                    a8:4e:1a:ee:3e:81:aa:a5:4b:08:d6:bb:4f:2d:5a:
                    a0:70:59:5a:de:4d:88:e2:5b:f8:ac:40:40:69:9e:
                    56:d1:5c:20:24:06:ae:82:eb:15:c4:64:fd:be:ab:
                    b5:0f:31:10:ad:cd:08:30:9a:fc:9f:40:d8:1c:0d:
                    df:b6:69:33:cc:e3:5d:65:70:d2:0a:fc:bd:a3:86:
                    18:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8A:3B:4F:E2:99:39:97:11:A9:04:8D:50:FE:F1:78:AC:61:FD:6B
            X509v3 Authority Key Identifier:
                keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/moo7T-KZOZcRqQSNUP7xeKxh_Ws.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.200.0/24
                  45.11.202.0/23
                  45.81.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:53:17:f3:26:0e:76:72:a1:37:78:e8:6c:22:f5:8a:81:89:
         a8:87:0a:9f:e5:62:14:24:36:9d:15:04:64:3c:78:4d:04:78:
         d3:3b:31:5e:6a:c5:8a:76:08:69:20:68:d1:ee:c1:79:4f:5e:
         03:6b:5a:fa:d1:a2:f6:4f:13:60:c1:10:ae:17:d3:03:82:75:
         43:74:2b:ad:34:38:6f:ea:9a:5a:75:6d:82:df:7c:2e:9f:3f:
         11:0b:b7:5a:44:89:04:ac:15:82:08:fb:98:65:cb:bc:3e:fa:
         1c:de:ca:a4:74:2c:6d:f5:23:28:13:77:be:e8:4e:e7:c7:89:
         96:5f:9f:15:61:02:7f:f8:f5:9c:af:fd:8b:a0:1d:5c:e0:d8:
         4b:37:46:e6:87:d3:8c:39:1f:06:b8:74:e0:95:22:d9:79:35:
         82:ad:42:b1:0b:f1:34:92:4f:ff:e2:01:df:bf:fd:68:b5:3b:
         7c:58:9a:01:1f:63:8a:26:99:06:47:86:62:79:ec:67:f2:b5:
         13:44:e9:f7:19:f5:ec:c0:85:fb:34:f1:b0:c1:a7:ea:c9:bb:
         e5:ba:c6:39:af:19:c6:a8:4e:32:a3:0a:d6:4d:23:d7:af:96:
         37:1b:d5:a7:e0:af:32:cd:3f:78:00:1c:d5:6c:9e:6d:22:a7:
         20:38:ca:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:09:54 2026 by rpki-client