This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/mNrbGyIIfa4fLmutHXkEY0XNdeA.roa
File:                     mNrbGyIIfa4fLmutHXkEY0XNdeA.roa (raw, json)
Hash identifier:          XyZ31cfTK799tFnPajLPxNb05Usvc+Q+zvjntqi0x6E=
Subject key identifier:   98:DA:DB:1B:22:08:7D:AE:1F:2E:6B:AD:1D:79:04:63:45:CD:75:E0
Certificate issuer:       /CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Certificate serial:       019B7910E79F7746B4C4D5C51B5F57C55BA2
Authority key identifier: 1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/mNrbGyIIfa4fLmutHXkEY0XNdeA.roa
Signing time:             Thu 01 Jan 2026 10:18:29 +0000
ROA not before:           Thu 01 Jan 2026 10:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31898
IP address blocks:        193.104.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 13:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:e7:9f:77:46:b4:c4:d5:c5:1b:5f:57:c5:5b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
        Validity
            Not Before: Jan  1 10:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=98dadb1b22087dae1f2e6bad1d79046345cd75e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:bf:42:2b:14:91:b9:25:e7:97:f0:20:31:
                    29:90:c5:75:19:c3:bf:d4:66:e6:79:25:8b:87:02:
                    1b:0d:4f:8b:dd:a4:12:96:6a:2d:a2:fb:e1:e5:0c:
                    14:af:9b:0f:00:57:ed:2b:99:b3:f1:39:de:a0:5c:
                    71:93:03:1c:17:b5:de:29:23:4a:94:ef:af:90:b6:
                    a4:f0:df:81:a0:1b:48:61:cd:21:ae:b7:37:d1:25:
                    cc:0d:f8:d6:78:2c:b1:9a:93:2e:8e:85:93:7b:b9:
                    17:19:c4:84:80:cf:ba:1a:c3:aa:af:6b:20:d6:d1:
                    ba:90:58:27:39:e6:5c:e2:0a:c2:26:69:f6:5b:f4:
                    e0:39:25:8b:33:61:9e:61:0b:dd:29:cc:c6:86:8a:
                    70:b3:1a:98:65:21:69:ce:82:3d:ad:50:bc:7c:60:
                    29:35:b0:06:45:52:48:da:72:5e:90:0a:a0:d1:0a:
                    16:32:b8:08:ac:7c:e4:cb:f0:98:93:8a:81:bd:c7:
                    ca:dc:fc:be:ff:9c:dc:4a:fd:f7:43:eb:f5:55:a4:
                    c4:4c:ff:0a:ec:51:78:6c:d5:e1:8f:28:ec:cb:7f:
                    8f:50:f4:26:0b:7d:f6:64:37:f3:e0:ad:37:0d:93:
                    2f:8c:8a:76:00:32:a2:c1:ec:eb:a7:18:ba:51:3d:
                    85:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DA:DB:1B:22:08:7D:AE:1F:2E:6B:AD:1D:79:04:63:45:CD:75:E0
            X509v3 Authority Key Identifier:
                keyid:1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/mNrbGyIIfa4fLmutHXkEY0XNdeA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:0c:e2:58:9c:22:e3:93:6e:d0:cc:5c:35:19:bb:4c:a3:e0:
         13:4a:05:5a:99:61:2b:bb:b9:e7:84:67:02:1f:14:53:f1:35:
         39:dd:6a:c2:e7:72:ed:48:02:02:49:0d:1c:88:ed:07:5c:63:
         b5:3b:06:62:3e:b5:15:06:31:27:c4:e6:2c:3e:d9:d1:6a:4e:
         15:9a:af:cb:28:ff:b1:a9:21:c4:db:b7:2b:d6:1d:18:ac:e2:
         a6:08:97:0a:58:0e:d4:cb:38:20:f2:8e:a4:af:bb:b4:65:c2:
         7e:29:e5:4b:71:af:ca:b9:26:7f:99:1b:65:f0:eb:f0:d0:28:
         11:18:40:92:8e:be:b4:6a:a5:76:75:ab:62:7e:55:b1:73:8b:
         b3:ab:70:62:3a:79:0c:fd:f6:49:5c:98:e5:3d:bc:78:da:dd:
         bd:e4:92:61:a1:cb:32:d4:bc:bf:d5:49:cf:16:05:50:20:d9:
         1c:28:2b:ea:62:9b:f1:4b:c4:ef:7c:e7:43:a8:51:92:aa:88:
         b4:7a:76:e1:90:60:4c:14:04:7f:f9:58:15:a4:0e:ec:9b:ad:
         06:fb:10:fa:eb:c9:18:41:2b:e5:0f:a5:4e:07:e0:a6:e8:8d:
         4d:d9:5f:25:06:aa:f2:1c:c2:a9:57:7c:8e:30:f8:ab:36:cd:
         0b:e8:f8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 20:49:55 2026 by rpki-client