This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/mgliWT245mKPpOJ9J-koUWKPC38.roa
File:                     mgliWT245mKPpOJ9J-koUWKPC38.roa (raw, json)
Hash identifier:          2leVbMv5cZcWloTjT8tRG7S73gX0MLHEKiLR37iqlKc=
Subject key identifier:   9A:09:62:59:3D:B8:E6:62:8F:A4:E2:7D:27:E9:28:51:62:8F:0B:7F
Certificate issuer:       /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial:       019B77C70C561DEF2D6A9614E98589A4FF72
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/mgliWT245mKPpOJ9J-koUWKPC38.roa
Signing time:             Thu 01 Jan 2026 04:18:12 +0000
ROA not before:           Thu 01 Jan 2026 04:18:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198560
IP address blocks:        91.236.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Feb 2026 22:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:0c:56:1d:ef:2d:6a:96:14:e9:85:89:a4:ff:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
        Validity
            Not Before: Jan  1 04:18:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9a0962593db8e6628fa4e27d27e92851628f0b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1a:55:21:f1:aa:d1:0a:f5:2b:0b:2b:47:a3:
                    11:00:d3:14:ad:d2:97:56:3e:fa:ba:5c:19:c4:2d:
                    07:2b:37:64:01:b8:61:64:53:58:5a:24:a2:19:50:
                    6b:e2:f1:a5:5c:14:a1:bd:db:d4:22:0d:78:19:83:
                    03:23:d3:f2:e6:a0:f1:1c:65:47:0c:ae:ae:eb:26:
                    e9:a5:5f:7d:82:9c:bf:fe:1c:bd:3a:39:45:7b:ae:
                    54:d4:66:cd:68:10:2f:e1:56:48:46:14:ec:83:8f:
                    ce:3a:33:64:67:79:79:5f:6a:eb:0e:29:11:fe:45:
                    89:5c:0b:cd:6c:83:96:f7:f7:f6:d8:79:c8:58:65:
                    f6:8c:05:0d:ee:5f:15:61:cb:6e:5c:9b:0f:91:84:
                    aa:23:dc:cd:d3:4b:ae:1f:65:34:2d:97:25:cf:be:
                    f5:35:c2:a8:14:23:94:a4:d9:3e:c5:d9:14:00:28:
                    76:1a:49:04:e5:19:68:df:28:1f:14:a2:9e:01:8a:
                    76:53:df:cb:77:0d:ca:8a:76:be:e8:bc:a2:3c:cf:
                    a3:a7:7e:b6:0d:db:79:01:4d:58:ba:f9:f1:a4:d3:
                    3b:08:57:47:62:aa:8a:a0:5b:74:e8:71:74:71:c1:
                    fd:f3:4e:4f:fb:32:79:eb:c4:5f:f0:f0:e6:1e:5e:
                    5f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:09:62:59:3D:B8:E6:62:8F:A4:E2:7D:27:E9:28:51:62:8F:0B:7F
            X509v3 Authority Key Identifier:
                keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/mgliWT245mKPpOJ9J-koUWKPC38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.236.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:72:18:b9:28:3b:70:57:3e:ee:c2:f2:7b:bd:6c:c5:9d:d4:
         10:dc:24:f2:68:c0:6f:ee:fe:ca:89:fc:b5:06:77:cd:61:31:
         98:7b:b6:01:7b:72:15:07:c1:43:aa:b4:6b:73:14:c6:61:8d:
         5d:d0:b8:d3:9e:e1:89:27:24:07:19:85:3c:3d:c7:e9:09:89:
         42:2f:4e:de:f2:84:b1:68:69:1c:a4:1a:6a:34:ae:b1:aa:b8:
         9d:fd:69:a9:87:e5:7e:a8:d2:fc:d5:b6:2e:2a:85:b0:0e:e3:
         a5:30:29:58:0c:fe:30:7f:e0:70:e7:8d:71:d1:1c:dd:71:ea:
         4c:15:c4:32:d7:cb:84:e2:1a:92:c3:c5:b4:6d:92:bf:c1:ff:
         02:ae:f0:7a:2e:8f:02:f9:48:88:0d:62:15:c6:47:34:7b:80:
         12:c2:fe:2a:cb:d0:be:c1:31:7b:99:7d:33:39:07:a6:06:13:
         ca:fb:5e:74:8f:89:4a:04:26:34:90:f2:28:b2:b7:62:e0:63:
         aa:82:bf:bd:b7:ae:d2:48:08:d5:99:33:cb:8c:3c:6a:a1:98:
         74:b3:cd:2d:91:6c:3b:3b:71:3d:9d:ed:84:ef:52:71:6e:62:
         8e:d2:1d:3c:bd:e7:61:85:81:49:61:41:0e:cd:d8:b3:a5:5a:
         f7:95:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 04:04:29 2026 by rpki-client