This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/MM5bwtQVjNMLa24HAAsYzVkMO-0.roa
File:                     MM5bwtQVjNMLa24HAAsYzVkMO-0.roa (raw, json)
Hash identifier:          PyAylfGi7oxHc9wTlMze4kzyfLTmAD3thM2tfRQ1RLY=
Subject key identifier:   30:CE:5B:C2:D4:15:8C:D3:0B:6B:6E:07:00:0B:18:CD:59:0C:3B:ED
Certificate issuer:       /CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
Certificate serial:       019B7FF276989BB9C5CDB6E0B49A866FF61D
Authority key identifier: 07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/MM5bwtQVjNMLa24HAAsYzVkMO-0.roa
Signing time:             Fri 02 Jan 2026 18:22:35 +0000
ROA not before:           Fri 02 Jan 2026 18:22:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28932
IP address blocks:        194.113.176.0/24 maxlen: 32
                          194.113.177.0/24 maxlen: 32
                          194.113.178.0/24 maxlen: 32
                          194.113.179.0/24 maxlen: 32
                          195.22.136.0/24 maxlen: 32
                          195.22.137.0/24 maxlen: 32
                          195.49.156.0/24 maxlen: 32
                          195.49.157.0/24 maxlen: 32
                          195.49.158.0/24 maxlen: 32
                          195.49.159.0/24 maxlen: 32
                          195.238.160.0/24 maxlen: 32
                          195.238.161.0/24 maxlen: 32
                          195.238.162.0/24 maxlen: 32
                          195.238.163.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f2:76:98:9b:b9:c5:cd:b6:e0:b4:9a:86:6f:f6:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
        Validity
            Not Before: Jan  2 18:22:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=30ce5bc2d4158cd30b6b6e07000b18cd590c3bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:75:d5:14:a4:fa:c7:2f:e4:4d:f0:fa:9d:
                    36:46:6c:8b:78:ed:ff:b1:27:df:5c:dc:3d:28:44:
                    60:45:51:fa:a6:74:99:b3:78:d7:be:f3:f4:d6:f4:
                    a9:2f:fe:c3:82:28:93:84:eb:db:ed:45:b8:29:d8:
                    68:fa:8e:4b:4b:e8:14:52:ba:d2:18:75:75:89:b8:
                    cc:7b:ac:7a:bd:7a:57:80:99:5e:56:47:b3:83:1e:
                    11:c3:fa:7e:73:89:b3:1d:04:a9:5a:4a:cd:cc:d5:
                    d4:49:6a:bb:79:10:47:7b:ad:f5:df:39:33:4a:a4:
                    64:9a:3d:0e:ab:69:b3:f2:21:b3:d4:e8:a4:bf:fa:
                    0d:de:e0:6e:54:cb:ca:53:58:a8:02:4f:d3:b9:b2:
                    d4:e0:8f:7f:2d:02:46:54:b3:dc:0f:3a:fb:02:70:
                    b5:2e:7c:64:a1:d6:12:35:cb:9f:88:4a:0c:b3:b1:
                    bc:d8:e7:27:21:24:34:d8:34:b2:d5:09:05:d6:d1:
                    23:f5:d1:0e:c1:fd:9d:ad:a5:ca:e4:bf:e5:87:71:
                    1d:51:b7:28:3e:1c:14:86:f2:7b:fe:d8:4b:7c:3e:
                    73:90:a3:a2:3a:e1:7b:a6:d5:82:cf:56:37:c6:d9:
                    bb:73:80:1f:73:23:9b:0e:56:e7:95:0b:a8:66:3a:
                    a6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CE:5B:C2:D4:15:8C:D3:0B:6B:6E:07:00:0B:18:CD:59:0C:3B:ED
            X509v3 Authority Key Identifier:
                keyid:07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/MM5bwtQVjNMLa24HAAsYzVkMO-0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.176.0/22
                  195.22.136.0/23
                  195.49.156.0/22
                  195.238.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:5f:c8:ca:76:18:03:c7:91:66:ec:ae:d9:ad:83:20:aa:d1:
         80:c8:6e:1d:90:2c:d8:c6:7d:3c:7f:7b:2b:95:12:f7:8d:ca:
         ce:3d:86:d2:29:f5:f9:2e:be:f1:10:72:96:87:e1:7e:0b:0d:
         d9:a1:f5:63:06:4a:c9:57:b2:90:1e:f4:87:1d:cb:ef:3f:1b:
         08:5a:92:45:93:f2:05:cb:30:63:de:44:2e:4b:89:67:07:1c:
         5c:c3:39:db:e2:7d:45:25:a0:ce:b8:3f:0f:bb:4d:48:0e:f5:
         13:5a:fe:6f:6b:ff:c1:27:5e:d4:1d:0a:5c:a2:92:6d:d0:3f:
         7c:8a:88:4b:a4:2c:16:9b:f4:0a:b4:c6:59:09:af:99:2b:38:
         4a:ad:17:4b:44:94:dd:8b:9d:f4:91:66:fa:95:ce:95:d0:ba:
         d1:42:b1:cd:c6:e1:cb:eb:fd:50:0e:7f:34:e4:16:6b:36:96:
         ca:f4:2a:59:ad:17:94:09:dd:2b:3d:4f:ab:df:87:3d:e4:e5:
         bd:d0:12:4a:72:97:3e:5b:b6:85:f9:f6:39:fb:51:8a:35:eb:
         3a:b3:9d:ef:bf:12:4e:b4:37:86:10:b5:ae:ff:ef:50:28:ae:
         e4:29:f0:23:cb:57:e4:17:11:f0:0f:f6:9d:24:ca:a3:58:11:
         e3:2f:92:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:34 2026 by rpki-client