This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MhyBq57hYj80ALVPQS7VvOkzFFM.roa
File:                     MhyBq57hYj80ALVPQS7VvOkzFFM.roa (raw, json)
Hash identifier:          edXNCDLO24cZPASVND6ugKW44O0kHPxfFrClhBpe2X0=
Subject key identifier:   32:1C:81:AB:9E:E1:62:3F:34:00:B5:4F:41:2E:D5:BC:E9:33:14:53
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019B8EC64CC48730A9FFBB2CD41EACCBB296
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MhyBq57hYj80ALVPQS7VvOkzFFM.roa
Signing time:             Mon 05 Jan 2026 15:28:39 +0000
ROA not before:           Mon 05 Jan 2026 15:28:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215607
IP address blocks:        212.135.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:8e:c6:4c:c4:87:30:a9:ff:bb:2c:d4:1e:ac:cb:b2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Jan  5 15:28:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=321c81ab9ee1623f3400b54f412ed5bce9331453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:0f:9b:da:90:fc:8f:04:4a:11:4c:0e:9d:
                    60:30:3e:b3:49:0c:e0:6d:1e:41:fe:ce:dc:26:42:
                    d0:3f:b7:7f:41:59:94:73:74:ad:bb:d9:94:e8:bd:
                    17:47:c6:27:bf:91:a0:4c:21:74:9e:2d:3d:c4:24:
                    13:a3:5c:df:52:16:14:f1:20:2f:30:f3:ed:81:04:
                    3f:bb:d0:a7:78:16:22:15:20:cc:b1:16:76:98:e4:
                    f6:13:4d:b3:af:c0:dc:4a:ec:28:b9:71:f2:1e:df:
                    b2:e6:4c:c6:23:99:88:63:b2:46:1a:b5:f8:b5:00:
                    6b:4e:22:cd:9c:23:8a:44:f5:74:1c:df:86:d9:81:
                    8d:ad:7f:71:d3:71:1f:31:3b:a7:9a:77:7e:74:6a:
                    91:b8:94:05:47:08:19:82:47:2e:d4:76:fd:c1:02:
                    0c:7d:48:cf:27:1f:07:b2:08:87:85:87:c5:61:63:
                    55:6e:07:4d:37:e8:a9:6a:ae:3e:50:89:92:db:21:
                    c0:28:16:a1:a3:fe:01:e3:92:1c:dc:66:34:37:70:
                    9a:ec:e6:25:5d:32:f0:00:fa:b0:62:6e:7f:98:74:
                    64:05:65:8d:da:6f:6e:db:06:30:38:26:c0:d7:e5:
                    05:f4:86:e3:1c:76:1a:9f:2f:e0:37:e6:0e:d8:a3:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1C:81:AB:9E:E1:62:3F:34:00:B5:4F:41:2E:D5:BC:E9:33:14:53
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MhyBq57hYj80ALVPQS7VvOkzFFM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.135.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:06:05:f0:ec:94:d6:3f:3c:6a:54:c2:8e:bf:4b:cc:a8:23:
         30:f9:10:53:e6:73:7b:7f:65:48:8c:0d:ea:b0:a9:f7:8a:ea:
         32:6e:e2:ef:d8:d0:88:ac:c9:02:a8:cb:40:60:7b:0c:fb:9d:
         5b:7f:80:f9:05:6e:30:4f:79:77:dd:71:1e:05:c5:c8:0d:dd:
         bf:b9:79:6a:2d:f7:31:82:8a:53:64:3a:fc:3b:43:64:19:7f:
         ef:0f:92:95:26:d7:87:ea:7e:fc:9c:67:9e:e2:76:e5:cc:6c:
         d1:52:28:11:c9:c6:b6:3f:01:51:b1:bf:53:20:87:0a:b9:5e:
         56:53:6f:70:d1:d8:14:7d:c8:17:3f:60:e3:68:fc:2a:72:ad:
         b4:7d:dc:9a:90:a0:ce:09:7b:84:f9:c7:d4:0f:f2:8f:6e:71:
         8c:4f:a7:31:c8:5d:ee:54:8f:3f:3c:57:93:d1:e7:c4:8d:46:
         6e:d4:29:fd:fc:af:03:e9:de:33:3f:a1:0e:96:72:d3:d3:47:
         c3:4b:ac:2c:83:c3:69:31:f9:5f:dc:88:c6:9b:9f:53:65:bc:
         92:7f:7f:fe:03:88:74:75:73:1d:b6:78:0a:52:01:a8:06:5a:
         21:1e:dc:13:6d:8e:1e:99:16:94:47:2c:05:ce:2e:68:3c:1e:
         c0:c7:cf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 08:16:38 2026 by rpki-client