This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/nMu4q2cW92pxZythIIHUZkqmvqo.roa
File:                     nMu4q2cW92pxZythIIHUZkqmvqo.roa (raw, json)
Hash identifier:          7YAsuza7OQtak6icttFz0ei42yjLP0nZELQwsfMtRCg=
Subject key identifier:   9C:CB:B8:AB:67:16:F7:6A:71:67:2B:61:20:81:D4:66:4A:A6:BE:AA
Certificate issuer:       /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial:       019C2918496F6359F468E66C63D60D748301
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/nMu4q2cW92pxZythIIHUZkqmvqo.roa
Signing time:             Wed 04 Feb 2026 14:39:43 +0000
ROA not before:           Wed 04 Feb 2026 14:39:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8362
IP address blocks:        5.158.240.0/20 maxlen: 20
                          37.72.232.0/24 maxlen: 24
                          37.220.48.0/20 maxlen: 20
                          46.162.128.0/18 maxlen: 18
                          62.64.32.0/19 maxlen: 19
                          79.141.192.0/24 maxlen: 24
                          79.141.193.0/24 maxlen: 24
                          79.141.194.0/24 maxlen: 24
                          79.141.195.0/24 maxlen: 24
                          79.141.197.0/24 maxlen: 24
                          79.141.204.0/24 maxlen: 24
                          79.141.206.0/23 maxlen: 23
                          195.146.224.0/20 maxlen: 20
                          195.146.240.0/20 maxlen: 20
                          2a01:8e80::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 09:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:29:18:49:6f:63:59:f4:68:e6:6c:63:d6:0d:74:83:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
        Validity
            Not Before: Feb  4 14:39:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9ccbb8ab6716f76a71672b612081d4664aa6beaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8e:35:f3:d0:f1:05:f7:3b:5b:bf:2e:62:f1:
                    61:d0:95:87:ec:60:75:05:a4:ce:cd:2f:4b:32:5b:
                    0c:52:05:38:19:64:ae:db:30:38:5e:e9:30:21:b2:
                    b6:2a:9c:f5:ee:6b:30:42:18:3d:28:d4:4c:da:1f:
                    90:e6:cc:72:5c:a8:39:fd:03:1f:db:a5:fa:a5:48:
                    08:73:8b:75:3b:28:98:1d:36:c8:af:09:67:67:0b:
                    f0:43:56:50:53:71:5c:47:2d:cb:db:4d:7b:c5:c8:
                    97:1a:e8:c7:f7:66:3e:cf:b9:0d:6a:cf:b1:a5:0b:
                    3f:58:58:ff:57:5a:6c:74:7d:f5:e6:12:9d:0c:9a:
                    d6:e2:c8:a0:09:7e:8f:96:fb:55:c8:8b:65:b2:be:
                    e5:4c:79:96:bb:53:d5:2e:a4:b1:e4:ec:15:52:89:
                    22:29:fd:12:50:08:4a:20:64:67:5e:2a:67:ac:83:
                    5a:4a:5d:65:4c:f8:8a:20:9f:68:92:75:cd:f2:4a:
                    83:6c:ff:bd:e4:52:4f:03:63:67:6f:12:05:d2:49:
                    82:70:ee:20:c2:e5:2e:50:cb:19:fe:a5:d8:28:f3:
                    16:48:06:66:ca:da:89:28:53:61:ed:6c:f2:06:f0:
                    e9:65:67:b4:02:ba:c5:a3:b2:6a:b7:36:61:23:4e:
                    25:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CB:B8:AB:67:16:F7:6A:71:67:2B:61:20:81:D4:66:4A:A6:BE:AA
            X509v3 Authority Key Identifier:
                keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/nMu4q2cW92pxZythIIHUZkqmvqo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.158.240.0/20
                  37.72.232.0/24
                  37.220.48.0/20
                  46.162.128.0/18
                  62.64.32.0/19
                  79.141.192.0/22
                  79.141.197.0/24
                  79.141.204.0/24
                  79.141.206.0/23
                  195.146.224.0/19
                IPv6:
                  2a01:8e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         41:33:53:29:76:7a:30:50:94:c0:0c:6c:7e:de:13:4c:0d:ad:
         4a:49:47:7f:39:6c:4e:af:3f:f3:73:1b:97:89:ae:20:fe:fd:
         2e:13:72:7c:f1:bb:b1:e9:bc:d4:1a:16:d9:b3:3b:74:27:56:
         80:f2:74:08:df:6a:b4:6e:a7:60:b4:3c:e4:06:2a:f0:6c:01:
         41:fc:cd:36:e2:31:41:da:38:28:e8:d7:b5:9e:e2:80:63:92:
         16:54:0e:c0:81:42:3c:07:2b:b8:90:bc:59:94:9c:6d:d7:26:
         cf:aa:6b:19:39:bd:46:57:d5:54:be:d6:13:de:7d:d1:95:76:
         c5:60:66:95:ea:ef:66:c0:a4:ba:2e:6c:f3:7e:19:e1:4a:25:
         5b:0c:fe:b7:8d:74:54:b2:46:c9:4c:6d:d7:ac:31:65:5c:10:
         53:c3:5c:ef:73:14:cd:76:b7:20:dc:0b:b6:ea:67:06:07:fb:
         c7:41:b3:5a:4d:87:ca:0e:08:fd:ae:bc:1a:7f:3f:db:cb:54:
         7a:68:99:e0:24:13:62:ac:58:e2:2f:6e:7a:b8:84:03:1f:ed:
         0f:93:15:2b:22:8c:f7:50:1e:9a:ae:b4:88:14:f8:73:06:49:
         d9:26:b3:81:13:67:3c:4e:c0:17:99:9d:4d:5c:35:55:28:12:
         51:6f:23:01
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAZwpGElvY1n0aOZsY9YNdIMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MTJlNDkxYWFhNjU1YjYzMjRkYmNjMGNmZjAwYThkNjMx
OTEwNzYwHhcNMjYwMjA0MTQzOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2NiYjhhYjY3MTZmNzZhNzE2NzJiNjEyMDgxZDQ2NjRhYTZiZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI4189DxBfc7W78uYvFh0JWH7GB1
BaTOzS9LMlsMUgU4GWSu2zA4XukwIbK2Kpz17mswQhg9KNRM2h+Q5sxyXKg5/QMf
26X6pUgIc4t1OyiYHTbIrwlnZwvwQ1ZQU3FcRy3L2017xciXGujH92Y+z7kNas+x
pQs/WFj/V1psdH315hKdDJrW4sigCX6PlvtVyItlsr7lTHmWu1PVLqSx5OwVUoki
Kf0SUAhKIGRnXipnrINaSl1lTPiKIJ9oknXN8kqDbP+95FJPA2NnbxIF0kmCcO4g
wuUuUMsZ/qXYKPMWSAZmytqJKFNh7WzyBvDpZWe0ArrFo7JqtzZhI04l7wIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFJzLuKtnFvdqcWcrYSCB1GZKpr6qMB8GA1UdIwQY
MBaAFJgS5JGqplW2Mk28wM/wCo1jGRB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUJMa2thcW1WYll5VGJ6QXpfQUtqV01aRUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wZTdlZDMtNDhjYi00YWZlLThkMTUt
ZGZmZTE3ZjNkYjU0LzEvbk11NHEyY1c5MnB4Wnl0aElJSFVaa3FtdnFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8wZTdlZDMtNDhjYi00YWZlLThkMTUtZGZmZTE3ZjNkYjU0
LzEvbUJMa2thcW1WYll5VGJ6QXpfQUtqV01aRUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQEBZ7wAwQA
JUjoAwQEJdwwAwQGLqKAAwQFPkAgAwQCT43AAwQAT43FAwQAT43MAwQBT43OAwQF
w5LgMA0EAgACMAcDBQMqAY6AMA0GCSqGSIb3DQEBCwUAA4IBAQBBM1MpdnowUJTA
DGx+3hNMDa1KSUd/OWxOrz/zcxuXia4g/v0uE3J88bux6bzUGhbZszt0J1aA8nQI
32q0bqdgtDzkBirwbAFB/M024jFB2jgo6Ne1nuKAY5IWVA7AgUI8Byu4kLxZlJxt
1ybPqmsZOb1GV9VUvtYT3n3RlXbFYGaV6u9mwKS6LmzzfhnhSiVbDP63jXRUskbJ
TG3XrDFlXBBTw1zvcxTNdrcg3Au26mcGB/vHQbNaTYfKDgj9rrwafz/by1R6aJng
JBNirFjiL256uIQDH+0PkxUrIoz3UB6arrSIFPhzBknZJrOBE2c8TsAXmZ1NXDVV
KBJRbyMB
-----END CERTIFICATE-----
Generated at Sat Feb 7 16:28:12 2026 by rpki-client