This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/mYz_MkjSPD9GSyH-TeUGX0chOQ4.roa
File:                     mYz_MkjSPD9GSyH-TeUGX0chOQ4.roa (raw, json)
Hash identifier:          WxLwxSoDDiuH4ux4xQpjQSFz0+gjmkukqbwmAoxdiWw=
Subject key identifier:   99:8C:FF:32:48:D2:3C:3F:46:4B:21:FE:4D:E5:06:5F:47:21:39:0E
Certificate issuer:       /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial:       019B79112B4DA1532EC51F935FC80A99F2E6
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/mYz_MkjSPD9GSyH-TeUGX0chOQ4.roa
Signing time:             Thu 01 Jan 2026 10:18:46 +0000
ROA not before:           Thu 01 Jan 2026 10:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     63066
IP address blocks:        176.126.161.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 13:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:2b:4d:a1:53:2e:c5:1f:93:5f:c8:0a:99:f2:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
        Validity
            Not Before: Jan  1 10:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=998cff3248d23c3f464b21fe4de5065f4721390e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4e:4c:7a:de:e9:36:19:81:e6:6a:e4:15:b3:
                    ae:79:59:70:8b:31:6c:74:54:df:84:c2:d7:44:66:
                    5c:76:3f:5b:d7:99:09:19:bd:57:69:06:65:96:ea:
                    6b:67:f8:45:bd:a2:77:59:df:4c:4c:e2:5a:08:55:
                    1f:50:47:57:98:df:e5:c9:7e:c7:b4:c1:c2:63:41:
                    cd:70:16:7f:45:30:47:a5:f4:3a:00:0e:64:bd:d4:
                    05:2b:4e:f4:d8:a3:75:85:85:ff:bc:55:0f:07:35:
                    2c:9e:f9:d5:77:89:d1:f7:c9:bc:82:62:3e:31:07:
                    79:50:a4:d0:58:d6:fd:d2:16:fb:c7:9c:f6:d5:20:
                    2c:52:2b:ff:93:80:79:df:cd:81:bc:2f:c1:55:31:
                    0a:20:61:be:6f:39:da:4b:12:18:a7:e6:2f:12:b9:
                    39:d4:db:33:5b:d7:47:38:05:30:e8:a8:86:f0:2d:
                    86:fa:4a:d6:c9:97:fa:ff:b9:3f:a7:1c:6f:e1:12:
                    e7:6b:94:67:cc:ea:f6:1c:82:c5:f3:8f:ed:8f:4b:
                    85:4c:b0:a1:26:2f:3d:85:df:8a:bc:9c:10:f3:c9:
                    f2:1b:57:51:17:de:99:21:48:a7:c9:e1:03:55:49:
                    fe:5b:91:91:95:84:dc:08:de:68:d5:41:9e:b1:65:
                    14:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8C:FF:32:48:D2:3C:3F:46:4B:21:FE:4D:E5:06:5F:47:21:39:0E
            X509v3 Authority Key Identifier:
                keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/mYz_MkjSPD9GSyH-TeUGX0chOQ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:f6:73:25:fc:4f:ea:d5:a1:83:3a:d2:7d:06:52:4d:1c:ef:
         77:1b:8f:de:d5:dc:9d:de:ef:72:f7:14:26:de:dd:bf:3a:13:
         65:3b:7c:75:ab:c4:79:94:4e:8a:3d:c0:7f:9f:5d:39:a8:81:
         62:58:75:e5:e0:ef:bf:28:8a:fe:35:31:f2:ce:6e:bd:e7:5b:
         43:30:f6:23:43:66:00:bd:a2:15:aa:6e:f4:89:48:47:4d:c5:
         1e:e4:7b:79:f4:49:6d:72:29:2f:53:38:0b:b9:cc:8d:d1:5f:
         38:49:93:ef:b6:28:58:df:bb:88:4f:0d:58:c2:70:77:e9:df:
         01:ac:a8:ca:ea:5c:55:77:a9:f9:01:62:37:13:6f:2d:6e:31:
         58:4f:94:0b:52:cc:2a:99:b9:e1:5a:1e:75:b4:56:40:d7:f2:
         80:94:81:f6:bf:dc:89:f0:79:0d:90:78:a3:2a:20:ab:24:8c:
         e0:07:00:66:98:3c:0e:59:82:19:e0:78:2a:b1:84:b1:7b:9d:
         ab:76:90:bc:9f:a2:fb:14:32:cb:89:af:90:8a:01:7e:da:2c:
         85:00:71:52:f7:2e:02:43:a6:1d:a6:d7:9a:75:ce:32:fc:af:
         ae:ca:7f:52:4b:a6:5e:a6:b8:12:9e:b0:53:f3:a5:da:01:00:
         dd:be:70:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 22:06:50 2026 by rpki-client