This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/rmDqg6_mwNfYbcdrFON7FhlqYh0.roa
File:                     rmDqg6_mwNfYbcdrFON7FhlqYh0.roa (raw, json)
Hash identifier:          jIARmAph/9tdERae1K6C9u4rfY/UdNtYyTUK8kLHly0=
Subject key identifier:   AE:60:EA:83:AF:E6:C0:D7:D8:6D:C7:6B:14:E3:7B:16:19:6A:62:1D
Certificate issuer:       /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial:       019B79105845D4EEAB8580834408B5F8418B
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/rmDqg6_mwNfYbcdrFON7FhlqYh0.roa
Signing time:             Thu 01 Jan 2026 10:17:52 +0000
ROA not before:           Thu 01 Jan 2026 10:17:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     7029
IP address blocks:        188.191.98.0/24 maxlen: 24
                          188.191.100.0/24 maxlen: 24
                          188.191.101.0/24 maxlen: 24
                          188.191.103.0/24 maxlen: 24
                          188.191.106.0/24 maxlen: 24
                          188.191.109.0/24 maxlen: 24
                          188.191.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:58:45:d4:ee:ab:85:80:83:44:08:b5:f8:41:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
        Validity
            Not Before: Jan  1 10:17:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ae60ea83afe6c0d7d86dc76b14e37b16196a621d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:57:ec:d0:5f:ff:47:54:68:d8:a4:69:2f:bb:
                    f6:be:a0:cb:ce:b1:74:7c:57:3f:47:07:67:d1:d6:
                    79:90:6c:44:14:ef:38:d2:62:16:1b:65:bb:6d:51:
                    9f:02:d4:ab:dc:99:a7:94:c3:21:e3:ae:f0:d7:64:
                    bf:2a:16:43:ff:bf:9f:ac:2a:7a:8c:7b:0e:ac:09:
                    21:60:88:17:18:c1:b8:dd:f2:5e:dd:57:8d:36:27:
                    7c:7b:6f:58:59:20:10:cc:e8:29:1c:fb:e9:e1:aa:
                    75:15:1e:6b:a3:2f:25:75:3b:cc:7b:87:7c:18:ab:
                    3d:17:a4:e4:de:82:fc:2e:67:e1:9f:7d:4f:06:a7:
                    fb:5d:39:32:25:90:8d:d0:c9:e9:82:6d:6e:fb:95:
                    eb:f7:b1:d1:8d:2a:69:e9:ef:43:31:39:0a:e7:b5:
                    81:a0:23:fc:1f:ea:b6:eb:3e:c0:0f:c2:b8:95:78:
                    39:4b:fd:a9:29:ee:80:f2:90:57:c8:4e:ac:86:4a:
                    a2:c2:52:08:e1:28:c3:ef:48:34:a2:e2:65:40:d8:
                    5e:fa:9d:68:ee:7a:df:36:21:b5:4c:44:70:96:c3:
                    d7:d4:e5:88:fd:d4:40:3d:c8:03:a3:29:8f:86:ec:
                    ea:8e:56:a4:62:e8:b2:27:5f:0b:23:de:73:de:a2:
                    53:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:60:EA:83:AF:E6:C0:D7:D8:6D:C7:6B:14:E3:7B:16:19:6A:62:1D
            X509v3 Authority Key Identifier:
                keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/rmDqg6_mwNfYbcdrFON7FhlqYh0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.191.98.0/24
                  188.191.100.0/23
                  188.191.103.0/24
                  188.191.106.0/24
                  188.191.109.0-188.191.110.255

    Signature Algorithm: sha256WithRSAEncryption
         82:e3:89:7c:15:d9:e6:0d:73:d3:0d:5c:b6:ce:88:1c:99:a0:
         e5:cd:12:58:de:e2:05:5d:69:eb:81:fe:33:86:31:a9:19:8a:
         7d:49:6d:8d:6b:1e:55:23:a1:90:d4:cf:2e:f4:ec:29:91:a6:
         93:3e:0c:62:31:c3:ff:12:69:c0:e9:3a:0d:1f:ab:6f:d7:34:
         60:7b:00:57:07:82:20:22:b4:b9:ee:93:05:41:6f:a2:69:8d:
         f6:46:d8:57:a9:ac:d2:22:d1:bd:69:f0:13:b3:b7:7a:12:b9:
         ad:ff:27:0b:67:26:c9:71:21:cc:9f:84:19:d3:a8:e9:e3:68:
         2d:fb:67:ec:1c:ab:de:b3:54:48:7f:ce:cf:c5:76:dc:ee:8c:
         66:06:a2:90:a7:4a:07:4e:3b:75:b9:af:72:3a:5f:3e:98:e2:
         22:29:4a:de:9c:9b:c8:f4:69:27:8e:10:09:e2:05:46:99:25:
         aa:bb:21:28:06:f0:56:0c:17:b0:85:0a:e0:b9:af:19:fd:31:
         a8:74:ad:0b:00:cf:56:37:77:98:e3:50:63:d6:47:b0:62:98:
         84:15:99:a1:d8:58:c0:86:17:3a:2e:88:f4:f2:e1:fa:de:e3:
         c6:d4:47:36:9a:cb:de:e6:d0:86:4b:4c:5f:9e:a6:d7:e5:09:
         21:f6:d6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:53:29 2026 by rpki-client