This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/mvF3N_iasc18M4jH1HsTxW2Ez2k.roa
File:                     mvF3N_iasc18M4jH1HsTxW2Ez2k.roa (raw, json)
Hash identifier:          Gu1ps52m2DJstA5d1+N9coMSjwqgst0MtlfUwNkcBWA=
Subject key identifier:   9A:F1:77:37:F8:9A:B1:CD:7C:33:88:C7:D4:7B:13:C5:6D:84:CF:69
Certificate issuer:       /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial:       019B7F15A19DBC0ABD87F8AA18036C3A6B8F
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/mvF3N_iasc18M4jH1HsTxW2Ez2k.roa
Signing time:             Fri 02 Jan 2026 14:21:22 +0000
ROA not before:           Fri 02 Jan 2026 14:21:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201275
IP address blocks:        178.57.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:a1:9d:bc:0a:bd:87:f8:aa:18:03:6c:3a:6b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
        Validity
            Not Before: Jan  2 14:21:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9af17737f89ab1cd7c3388c7d47b13c56d84cf69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:28:39:a0:85:d4:e8:e2:7e:40:c3:d6:fb:a6:
                    12:80:cb:1a:d9:58:f2:46:58:54:cc:53:f7:3a:aa:
                    08:33:5f:7d:f5:3f:03:ec:44:4d:2e:62:07:0e:d6:
                    91:38:68:fb:0e:82:11:c7:45:b5:df:d6:b2:d8:24:
                    1b:db:27:dc:bd:11:81:40:8a:62:02:0f:23:c8:7b:
                    5e:ae:b9:10:25:6d:d2:27:80:82:60:59:90:da:37:
                    75:de:b4:a7:91:f1:06:e5:1f:65:09:98:f1:78:53:
                    d5:5f:5b:53:46:87:80:d7:ed:ab:ba:a2:ff:71:a7:
                    3d:e4:75:00:2e:30:2e:b9:fe:8b:63:05:4c:27:e2:
                    38:22:ca:93:b9:8b:2c:e7:c3:94:63:72:70:06:97:
                    6f:9d:e3:7d:3e:ad:4d:1a:05:7b:16:a2:cb:8e:5c:
                    24:13:5e:27:41:d0:f2:4a:79:e2:7e:a5:3d:90:f8:
                    a0:5b:83:59:a2:5f:b9:38:2e:a8:57:35:f5:01:d5:
                    cc:77:10:5f:f9:df:3c:88:bf:66:8d:1d:a1:f2:35:
                    13:41:e8:32:66:2a:ea:4b:cc:e9:93:3c:63:30:8f:
                    15:10:fd:20:a7:9c:c1:4b:ca:a2:74:fe:47:02:2f:
                    9a:f6:16:fa:2b:ff:d0:f8:c5:5f:3a:ca:48:c1:88:
                    af:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F1:77:37:F8:9A:B1:CD:7C:33:88:C7:D4:7B:13:C5:6D:84:CF:69
            X509v3 Authority Key Identifier:
                keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/mvF3N_iasc18M4jH1HsTxW2Ez2k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.57.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:e0:77:17:5e:22:a6:2d:e3:c4:6c:9b:16:49:37:a6:cb:2b:
         01:45:9a:34:96:04:a2:ca:08:5f:79:e9:fd:46:b0:be:ef:23:
         0b:11:da:61:b5:f7:6d:25:7d:55:86:67:d9:90:27:ff:d0:98:
         ee:59:4b:c1:99:4d:2d:ad:d1:a7:cf:ab:de:2f:3f:9c:0b:3f:
         0e:b6:91:ee:25:b5:29:fd:6c:e4:02:88:0a:f2:bf:1d:31:85:
         25:e2:22:82:6c:26:4a:2c:5c:33:4d:ee:66:73:99:d1:11:95:
         25:2d:dd:19:14:e8:55:63:ce:32:0c:75:38:9b:59:af:6c:dc:
         a7:01:05:af:f5:33:c5:2c:84:e6:59:aa:a8:77:6b:84:72:ff:
         34:79:0f:a0:50:7e:30:be:4c:3e:bc:31:e7:fd:31:ee:95:b8:
         61:32:62:c8:c3:62:a5:0a:da:43:c3:9f:41:3a:97:2e:ed:42:
         ee:26:18:53:2a:92:d7:47:6f:66:7d:8e:d5:95:b2:e0:e4:8a:
         03:3c:5d:5d:77:a1:b8:76:01:94:61:9e:56:ed:de:14:6e:85:
         32:39:c7:99:62:ae:d4:61:48:58:a9:a3:ec:21:56:76:78:8d:
         6d:8d:d2:aa:80:12:6f:fb:e1:18:8a:2f:99:88:54:8a:87:32:
         23:32:c9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 02:26:15 2026 by rpki-client