This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/MzwLUabPMVpWUbhvtlyD-QzTVcQ.roa
File:                     MzwLUabPMVpWUbhvtlyD-QzTVcQ.roa (raw, json)
Hash identifier:          X0nH2HeW8oMQ0R4XVjts1kBv71dyXZYfSTlTWrarM3g=
Subject key identifier:   33:3C:0B:51:A6:CF:31:5A:56:51:B8:6F:B6:5C:83:F9:0C:D3:55:C4
Certificate issuer:       /CN=e0238e22877f7303964007ce3e3406f5fad94962
Certificate serial:       019B7E38D0C6DB30862FA86EA42231E2BBEB
Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/MzwLUabPMVpWUbhvtlyD-QzTVcQ.roa
Signing time:             Fri 02 Jan 2026 10:20:11 +0000
ROA not before:           Fri 02 Jan 2026 10:20:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202670
IP address blocks:        185.151.4.0/23 maxlen: 23
                          185.151.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:d0:c6:db:30:86:2f:a8:6e:a4:22:31:e2:bb:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962
        Validity
            Not Before: Jan  2 10:20:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=333c0b51a6cf315a5651b86fb65c83f90cd355c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:31:61:78:25:25:7e:d3:04:d5:c7:92:40:
                    2e:f9:85:dc:14:39:32:00:94:a0:6a:7b:8e:ca:8b:
                    7e:b3:fc:df:76:a1:1c:ef:cd:2b:d8:18:71:37:37:
                    f8:37:e3:8d:39:f7:88:81:20:5d:b6:3d:17:ca:02:
                    77:c5:c8:20:ff:e2:f5:57:5b:51:f6:ca:a0:4f:3f:
                    3b:c3:79:4a:6d:13:39:c8:6e:71:14:41:0b:4b:9c:
                    5b:6e:3f:59:ce:0d:f7:3f:a4:47:0b:4d:f1:73:38:
                    e2:b4:61:ff:2f:f4:b0:96:a1:96:0f:68:ca:91:37:
                    d1:46:0d:b7:da:38:44:65:57:48:03:23:ff:07:37:
                    7c:14:d1:da:d8:8c:10:3d:57:f1:b5:2a:f6:9b:9f:
                    67:34:53:10:90:c6:da:e6:84:f4:e4:c9:73:52:f4:
                    f5:44:46:c9:25:45:83:85:1b:71:c4:ad:80:24:4c:
                    18:5e:19:c8:c9:8d:ee:b7:2d:5f:a1:10:e3:e4:d8:
                    3b:3b:23:ae:06:85:0e:cc:9a:b2:86:65:77:6a:e8:
                    bd:31:b7:52:9e:bc:43:8d:2e:8e:02:6d:65:bd:3c:
                    5c:8c:fa:19:85:df:80:38:7b:25:12:a8:a0:77:9c:
                    18:71:26:b1:d5:7c:63:3f:e7:f3:9c:42:2e:a4:bf:
                    f9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3C:0B:51:A6:CF:31:5A:56:51:B8:6F:B6:5C:83:F9:0C:D3:55:C4
            X509v3 Authority Key Identifier:
                keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/MzwLUabPMVpWUbhvtlyD-QzTVcQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.151.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:f9:a5:06:e7:2b:63:cf:e7:6d:b6:16:2e:74:91:88:f3:44:
         4e:ea:dc:4a:42:db:2d:47:ca:a1:9d:62:b3:c7:19:c7:e5:0a:
         2d:f2:4c:1f:74:f9:86:e3:3c:fb:60:9c:92:39:8a:8b:e3:8a:
         76:00:45:8a:2d:e8:b7:54:7a:c2:86:8a:9e:55:7d:3a:b2:12:
         2e:b6:d3:9b:8e:7b:e5:ce:f0:82:91:a5:65:32:34:97:46:1d:
         cb:1a:fc:08:4e:8a:54:fe:5b:73:68:1a:f6:13:35:7f:af:1a:
         42:a6:5c:c0:3a:ad:ef:9d:e2:7d:68:f7:b8:93:f8:57:19:13:
         bc:d2:16:a4:0a:37:78:57:21:be:e7:46:c9:fa:e3:aa:bb:41:
         9c:5f:84:4b:df:53:45:98:4b:77:f3:79:50:ca:16:7b:66:9b:
         eb:d3:9d:04:17:db:c6:4e:a9:fe:9c:91:b8:6d:fe:e9:a8:b0:
         d6:fc:e1:18:8c:06:27:88:15:d8:2e:1a:c6:b8:1e:dc:ce:29:
         5c:d0:0e:5e:fa:19:77:5b:f2:00:90:67:09:8d:c4:92:a3:e2:
         a6:21:48:a0:16:05:a3:fe:19:3a:2b:3d:01:48:80:82:4c:2b:
         19:15:70:65:e7:8e:fb:61:cc:cd:88:b8:e1:c0:60:38:c6:d8:
         75:4a:6e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:41 2026 by rpki-client