This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/RMKMFjuIsOF34y_Eoi6mHIhKM8E.roa
File:                     RMKMFjuIsOF34y_Eoi6mHIhKM8E.roa (raw, json)
Hash identifier:          jdDMeZqYmQE2irg3itDoUEw04h1lMnJrH0NJa7Heqzk=
Subject key identifier:   44:C2:8C:16:3B:88:B0:E1:77:E3:2F:C4:A2:2E:A6:1C:88:4A:33:C1
Certificate issuer:       /CN=e929c3da5af4159c9363776ec33dc5bac70a324d
Certificate serial:       019B7A5A8D8051A0D45BE6DD1FB059F2A3B9
Authority key identifier: E9:29:C3:DA:5A:F4:15:9C:93:63:77:6E:C3:3D:C5:BA:C7:0A:32:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/RMKMFjuIsOF34y_Eoi6mHIhKM8E.roa
Signing time:             Thu 01 Jan 2026 16:18:33 +0000
ROA not before:           Thu 01 Jan 2026 16:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198766
IP address blocks:        176.115.240.0/20 maxlen: 20
                          193.8.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:8d:80:51:a0:d4:5b:e6:dd:1f:b0:59:f2:a3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e929c3da5af4159c9363776ec33dc5bac70a324d
        Validity
            Not Before: Jan  1 16:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=44c28c163b88b0e177e32fc4a22ea61c884a33c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:77:bd:ec:2d:5f:23:99:20:26:f0:23:18:f7:
                    5a:17:b2:43:cf:33:e1:45:29:7e:8c:45:9c:bf:08:
                    4d:1a:ef:49:24:30:b8:e5:54:05:7b:e0:e9:9d:ca:
                    f5:07:ba:ac:d6:68:a2:f5:cc:65:98:62:65:d9:64:
                    e0:da:ab:2b:db:1f:fe:4f:fb:25:47:e8:b7:7e:d3:
                    cc:03:b3:4a:b7:21:37:4e:22:ff:f7:78:2e:86:63:
                    38:88:9d:e1:17:bf:78:17:dc:ad:c7:e8:a3:84:59:
                    c2:24:cb:fb:8b:a6:0c:6e:4c:30:64:3b:f7:57:92:
                    0e:5b:13:fb:01:fc:b3:94:12:1a:a2:95:2f:ff:3a:
                    45:86:0b:e7:8d:ac:25:5f:26:5d:7d:b4:7c:2f:a8:
                    32:ba:2e:0c:91:f6:fc:a6:9a:87:af:77:c8:d4:41:
                    11:6f:dc:42:ee:7c:d5:c1:bc:18:e0:1e:12:9a:f5:
                    32:a3:e0:37:58:12:fc:ce:a0:34:83:28:d0:a9:77:
                    14:ee:f7:15:e4:f8:a5:3b:b0:16:9d:84:e7:a3:fa:
                    80:b3:d4:97:76:d4:7d:94:91:a1:1d:15:42:7e:28:
                    cb:86:65:bc:8f:51:e5:b4:90:3e:f1:6e:f2:40:80:
                    e0:eb:0b:fc:5e:8c:7f:8a:1e:cb:e7:0c:7c:9d:b2:
                    3e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C2:8C:16:3B:88:B0:E1:77:E3:2F:C4:A2:2E:A6:1C:88:4A:33:C1
            X509v3 Authority Key Identifier:
                keyid:E9:29:C3:DA:5A:F4:15:9C:93:63:77:6E:C3:3D:C5:BA:C7:0A:32:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/RMKMFjuIsOF34y_Eoi6mHIhKM8E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.115.240.0/20
                  193.8.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:a4:1e:2e:43:15:d8:3c:fd:a9:2b:01:cb:9b:f8:c1:7a:2f:
         74:20:a3:41:58:d0:36:7b:08:ae:af:3f:f5:a7:d8:9b:dd:27:
         a0:c7:45:f3:c3:76:80:1f:73:73:77:62:d3:c7:bc:69:d6:e0:
         04:b4:58:f8:83:c5:e4:da:80:a0:71:ff:1b:2b:37:fd:1f:5e:
         7c:e5:f6:43:12:af:f6:4c:9e:14:ee:1c:42:68:9d:ff:67:c1:
         ca:59:e7:88:17:6e:86:ef:2a:3b:7e:3f:61:c3:35:bf:fc:e2:
         c2:cb:f0:91:41:9c:f4:dd:1f:74:ff:17:a1:59:8a:da:f4:c1:
         31:84:c0:20:be:43:88:a6:8f:d6:27:cb:99:75:ad:b6:ef:f5:
         5e:07:22:6b:4e:51:a5:0c:d4:99:5f:70:91:e8:b5:c9:21:17:
         12:58:83:56:8c:9e:cf:e8:07:cf:54:7b:c7:13:ad:d2:8a:72:
         4c:3f:b5:2d:00:22:cf:56:b4:85:cc:32:c9:77:6c:25:02:97:
         06:69:32:8c:38:3b:e8:f3:1b:da:c4:80:43:e8:50:78:7f:72:
         a8:d3:3b:f4:63:c1:f3:c7:d0:50:20:db:ba:52:8f:91:e6:b7:
         ef:5c:0b:e8:f4:07:9f:12:8e:b4:d0:1c:dc:8e:75:b6:ec:6e:
         b5:96:86:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:53:05 2026 by rpki-client