This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/mmW_PspRyWWJ-0koYlr6B2-6cDU.roa
File:                     mmW_PspRyWWJ-0koYlr6B2-6cDU.roa (raw, json)
Hash identifier:          +DO/fJxCRM9CFhtpysXEvyA/4qA5BtqezUG8hfqugKs=
Subject key identifier:   9A:65:BF:3E:CA:51:C9:65:89:FB:49:28:62:5A:FA:07:6F:BA:70:35
Certificate issuer:       /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Certificate serial:       019B7C8010A0DF85A6CFBD8C4676BF0723A6
Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/mmW_PspRyWWJ-0koYlr6B2-6cDU.roa
Signing time:             Fri 02 Jan 2026 02:18:46 +0000
ROA not before:           Fri 02 Jan 2026 02:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204213
IP address blocks:        86.106.142.0/24 maxlen: 24
                          86.107.47.0/24 maxlen: 24
                          86.107.184.0/24 maxlen: 24
                          89.32.248.0/24 maxlen: 24
                          89.32.249.0/24 maxlen: 24
                          89.32.250.0/24 maxlen: 24
                          89.32.251.0/24 maxlen: 24
                          89.33.87.0/24 maxlen: 24
                          89.35.172.0/24 maxlen: 24
                          89.39.208.0/24 maxlen: 24
                          89.40.65.0/24 maxlen: 24
                          89.42.208.0/24 maxlen: 24
                          89.42.209.0/24 maxlen: 24
                          89.42.210.0/24 maxlen: 24
                          89.42.211.0/24 maxlen: 24
                          89.45.89.0/24 maxlen: 24
                          185.94.96.0/24 maxlen: 24
                          185.94.97.0/24 maxlen: 24
                          185.94.98.0/24 maxlen: 24
                          185.94.99.0/24 maxlen: 24
                          188.212.22.0/24 maxlen: 24
                          217.144.104.0/24 maxlen: 24
                          217.144.105.0/24 maxlen: 24
                          217.144.106.0/24 maxlen: 24
                          217.144.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:10:a0:df:85:a6:cf:bd:8c:46:76:bf:07:23:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
        Validity
            Not Before: Jan  2 02:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9a65bf3eca51c96589fb4928625afa076fba7035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:3d:85:ed:66:20:14:b3:64:22:72:6a:43:
                    0d:90:e2:24:2f:c6:2b:6f:f5:49:86:c2:83:22:e5:
                    f9:c1:18:6f:01:7a:5b:78:4f:3a:a6:f9:08:3c:9f:
                    c3:08:0c:d4:9b:80:96:9c:f4:a1:44:5a:5f:9e:ef:
                    26:23:2e:55:26:94:39:c9:f4:58:cd:f8:d0:f4:ee:
                    d7:0e:39:a7:88:69:5f:c8:3a:e8:ce:da:aa:d9:c9:
                    5a:bb:ff:47:60:55:89:47:08:ec:3b:75:b5:5f:eb:
                    34:ff:7a:c0:8e:6c:77:19:6d:b5:2e:eb:76:1c:1a:
                    49:97:5d:db:c4:f1:dd:45:62:05:44:7c:fe:81:7a:
                    79:80:0e:62:f9:1a:29:f9:ff:46:85:b3:61:95:9e:
                    3b:61:98:9f:36:be:2c:b1:9a:96:a9:cb:85:f2:e8:
                    a2:3c:e2:7c:8e:41:d7:50:55:f2:4e:ce:eb:3f:ce:
                    11:0c:f6:d0:c8:62:0e:7b:95:1d:f9:fa:e5:1d:66:
                    74:8b:3e:26:08:95:ea:d7:ae:be:82:3e:d9:f1:81:
                    99:9f:fb:a1:a4:80:fd:2e:9a:44:0f:8b:13:69:10:
                    9a:90:59:6c:b5:e4:ae:24:56:b7:e0:67:0b:10:98:
                    99:a1:71:72:ca:46:59:91:12:7e:93:4a:2d:1e:47:
                    2f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:65:BF:3E:CA:51:C9:65:89:FB:49:28:62:5A:FA:07:6F:BA:70:35
            X509v3 Authority Key Identifier:
                keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/mmW_PspRyWWJ-0koYlr6B2-6cDU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.106.142.0/24
                  86.107.47.0/24
                  86.107.184.0/24
                  89.32.248.0/22
                  89.33.87.0/24
                  89.35.172.0/24
                  89.39.208.0/24
                  89.40.65.0/24
                  89.42.208.0/22
                  89.45.89.0/24
                  185.94.96.0/22
                  188.212.22.0/24
                  217.144.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:20:e4:83:a2:01:db:f7:a1:d8:e3:4a:6a:a5:a9:f7:28:3a:
         ba:91:e8:33:c1:e8:31:dd:b9:34:e1:ec:84:ea:40:ce:da:75:
         93:09:28:6c:ca:46:00:6d:e7:ba:54:85:12:c5:48:f0:02:4b:
         a1:08:7f:9a:de:b0:bd:68:cf:07:b1:9a:55:72:c1:10:93:27:
         20:4f:c0:9a:cc:be:d8:68:6c:91:60:9c:97:ed:3d:b1:8e:89:
         21:68:95:69:c5:d5:63:93:8e:96:24:75:bd:96:56:bb:71:54:
         e7:8c:c1:8c:90:6f:ad:63:fd:e6:0d:39:b9:c2:31:bb:79:c0:
         09:5d:cf:04:fd:3e:aa:fa:4e:43:9e:e7:ef:e8:9d:bd:c5:be:
         72:62:3f:28:36:15:ac:53:c0:63:a5:6b:77:62:19:e2:50:30:
         b6:8a:e3:ef:81:70:0d:0e:c8:be:a2:c1:5a:94:a6:09:4b:96:
         cb:32:eb:ec:33:f5:d8:81:8a:53:76:fd:e2:f9:86:a9:4f:76:
         86:47:c2:5d:38:18:79:03:2f:a0:f2:67:65:b0:6f:63:c2:f5:
         58:e2:37:28:6d:03:9c:98:3d:c8:0f:cc:cf:ab:c0:1c:fd:75:
         24:9c:7d:14:45:97:a1:3b:c8:cf:c8:89:aa:ea:5b:bb:3a:c3:
         da:1b:1e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:13:55 2026 by rpki-client