This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/M0vUEBMIUgT4jDZek6CAIPYaSIg.roa
File:                     M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (raw, json)
Hash identifier:          PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=
Subject key identifier:   33:4B:D4:10:13:08:52:04:F8:8C:36:5E:93:A0:80:20:F6:1A:48:88
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       019B7E38BB2FAAABF39F1B48E22EE60C5848
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/M0vUEBMIUgT4jDZek6CAIPYaSIg.roa
Signing time:             Fri 02 Jan 2026 10:20:05 +0000
ROA not before:           Fri 02 Jan 2026 10:20:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215453
IP address blocks:        213.18.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Jan 2026 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:bb:2f:aa:ab:f3:9f:1b:48:e2:2e:e6:0c:58:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Jan  2 10:20:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=334bd41013085204f88c365e93a08020f61a4888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:97:f7:dd:20:83:54:74:d1:fd:00:78:f6:81:
                    33:c5:71:82:e3:c9:83:4d:aa:43:38:93:ca:15:e3:
                    bf:db:d4:bc:01:ba:6c:fe:d1:66:27:b5:af:0f:60:
                    83:b1:2a:cf:b6:e4:c7:5c:7f:ec:5b:6c:50:77:23:
                    b3:6b:e6:33:20:c6:ce:f2:af:0a:f1:83:bd:0b:29:
                    a8:70:35:ba:54:7a:a0:7b:df:f0:0c:3c:23:6d:4c:
                    6f:e0:7c:4c:e5:9f:72:9f:41:e0:9b:eb:2a:46:93:
                    67:68:75:b3:8a:81:fa:be:75:7a:20:b8:1a:b8:9e:
                    65:82:ac:69:e6:9f:cb:52:54:04:78:dd:23:34:b1:
                    ea:44:27:6a:3c:dc:7e:8d:c6:cb:6b:19:56:b3:c4:
                    7a:21:af:ab:a8:e4:bb:a5:89:c1:d3:be:91:8c:16:
                    8b:c7:e4:6b:e4:3f:f7:c0:fa:9b:28:a8:ca:c0:41:
                    73:64:ff:ce:d1:8c:9b:89:e6:d9:a4:2f:07:be:fe:
                    8f:23:28:ea:5e:c8:e2:e9:81:01:cf:77:80:46:69:
                    9a:86:29:0d:f1:cb:b4:3a:c9:6c:56:69:c9:cc:5a:
                    39:37:f9:9d:da:12:6b:75:f4:60:52:8d:d8:da:f9:
                    3d:cf:70:6c:f9:55:98:d5:ae:2d:cb:07:17:03:ae:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4B:D4:10:13:08:52:04:F8:8C:36:5E:93:A0:80:20:F6:1A:48:88
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/M0vUEBMIUgT4jDZek6CAIPYaSIg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.18.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:6d:ae:3d:75:91:37:e6:ee:fc:48:a8:b9:ce:57:6a:14:94:
         cf:c6:b9:a7:24:71:ab:fd:9c:e2:3e:fb:17:59:5d:87:11:93:
         64:de:63:6c:cf:1c:78:21:9e:d7:7a:6a:89:25:c0:1a:40:b1:
         ac:3e:4d:0b:97:88:5a:c3:fb:41:0a:3c:9b:d7:5f:d5:3e:dc:
         20:0b:8d:59:68:a0:59:f4:87:1e:88:8c:08:1b:8b:68:a3:31:
         88:07:2b:b0:39:04:3c:e5:d2:20:f3:90:c6:25:6d:48:8c:6d:
         c6:f2:be:02:d1:28:2e:ee:b8:02:5e:53:72:a1:40:5f:b7:da:
         e6:74:46:22:34:d9:35:9f:7e:58:90:ab:ce:0b:f8:fd:01:8a:
         5a:5c:ad:5f:b1:1d:a0:3d:19:07:ec:a3:7f:fc:82:ec:cb:d6:
         f9:03:22:ee:32:37:2d:04:e9:87:80:71:58:05:cf:19:11:52:
         b6:e4:31:60:ab:98:ed:69:93:1c:31:06:fe:8d:3d:da:b4:f8:
         be:09:17:b2:45:54:2e:e4:08:8e:8f:4c:0a:d4:47:29:59:d8:
         28:98:e8:de:dc:48:b0:d0:6a:be:d2:e2:f8:ee:e7:5e:b6:ee:
         53:ef:81:29:66:d4:67:86:f5:ec:71:69:51:80:bb:f3:a2:99:
         dc:88:e6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 21:06:41 2026 by rpki-client