This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/MuBqNt1syXndOYY-i5CsiyzlTpI.roa
File:                     MuBqNt1syXndOYY-i5CsiyzlTpI.roa (raw, json)
Hash identifier:          ePoNVRZGhSsK8En0WwtEIpiiLLOOy80WDIwT7dGHkIU=
Subject key identifier:   32:E0:6A:36:DD:6C:C9:79:DD:39:86:3E:8B:90:AC:8B:2C:E5:4E:92
Certificate issuer:       /CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Certificate serial:       019B7FF2A4CD0F483AD02D00604911BBE990
Authority key identifier: A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/MuBqNt1syXndOYY-i5CsiyzlTpI.roa
Signing time:             Fri 02 Jan 2026 18:22:46 +0000
ROA not before:           Fri 02 Jan 2026 18:22:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207916
IP address blocks:        37.26.74.0/23 maxlen: 23
                          37.26.76.0/22 maxlen: 22
                          83.229.20.0/23 maxlen: 23
                          93.174.80.0/21 maxlen: 21
                          185.80.116.0/22 maxlen: 22
                          2a00:1350::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f2:a4:cd:0f:48:3a:d0:2d:00:60:49:11:bb:e9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
        Validity
            Not Before: Jan  2 18:22:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=32e06a36dd6cc979dd39863e8b90ac8b2ce54e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2c:f0:2d:2a:7f:a8:93:9d:fc:38:8f:1d:a6:
                    41:9e:23:b8:35:09:06:ed:3e:d7:88:14:5b:56:e4:
                    88:bf:48:35:47:ab:66:84:ec:36:69:6e:15:6d:4a:
                    77:9c:66:4f:e7:40:5b:8b:81:3c:91:5e:4d:c8:0d:
                    5a:45:b1:0f:23:5b:fa:91:e0:58:7a:3e:4a:91:c6:
                    a5:91:31:80:1e:b8:99:a0:94:ab:6c:68:7d:5d:c9:
                    f1:d0:76:e8:a5:3d:73:aa:37:cc:d9:f9:ac:0a:b5:
                    b3:a6:3c:38:3a:5f:3e:35:2a:3b:99:60:c1:75:87:
                    45:cf:61:6b:fa:ba:2a:13:02:0f:a2:34:fc:f8:aa:
                    58:ad:7d:36:96:24:21:be:ff:30:83:a7:67:78:b9:
                    0e:1a:58:40:56:83:01:92:ba:57:e8:12:2c:b9:e3:
                    99:ac:64:72:91:0a:09:ea:bb:d6:d8:b3:cf:99:e5:
                    85:3d:e6:ad:7d:ad:c7:8a:6e:7e:6b:61:7a:70:25:
                    fa:68:6a:07:06:43:2d:5d:1e:03:63:d6:0c:7d:9e:
                    aa:e6:da:d7:35:73:92:99:fa:bf:38:5c:f8:50:17:
                    37:d7:19:76:b2:e0:3d:bf:61:47:4f:f8:d1:2e:a4:
                    63:72:9e:03:83:de:ef:e0:c2:12:c9:5c:41:a0:90:
                    45:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E0:6A:36:DD:6C:C9:79:DD:39:86:3E:8B:90:AC:8B:2C:E5:4E:92
            X509v3 Authority Key Identifier:
                keyid:A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/MuBqNt1syXndOYY-i5CsiyzlTpI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.26.74.0-37.26.79.255
                  83.229.20.0/23
                  93.174.80.0/21
                  185.80.116.0/22
                IPv6:
                  2a00:1350::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:98:bc:30:4e:da:90:6c:87:9a:f2:3e:ea:43:eb:3e:7b:57:
         2d:1e:e0:e3:a0:34:8c:a9:c2:5a:ab:60:f1:c7:70:d1:df:cb:
         a6:c3:9b:06:cb:35:ef:9b:1e:1e:a7:50:93:49:08:28:22:31:
         f6:6e:f2:36:fe:ac:9f:47:0c:f0:43:c0:33:99:85:a5:c7:68:
         97:5b:93:4d:0c:f2:c0:ef:81:62:57:63:83:d4:00:63:0a:44:
         63:df:1d:7a:d4:4d:74:61:c4:03:fd:ef:43:97:63:12:35:6c:
         b0:65:60:16:57:c0:2b:c4:e2:d1:32:36:c4:09:16:28:23:77:
         62:7f:65:5b:77:40:17:69:00:c4:bf:ec:bb:a0:40:6d:f5:b7:
         5a:5b:d3:dc:f4:82:4e:ec:b3:71:0e:3e:be:4e:3b:31:82:b9:
         09:4d:66:f5:65:68:3b:4b:88:5c:a6:31:90:ba:12:68:b5:07:
         c4:98:3e:97:17:26:f7:b0:b2:21:72:47:14:1f:f5:22:90:b4:
         47:e0:0b:32:53:70:ad:c8:7e:51:76:98:2c:b5:3d:63:73:06:
         28:ac:8d:ca:0c:5f:e9:d5:6c:c3:59:76:1b:55:80:44:5b:41:
         9d:da:22:2c:fb:ca:65:2b:4f:d1:5c:a4:11:1c:f5:32:75:83:
         22:01:2e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:44:23 2026 by rpki-client