This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/MBROwpn7E_P7vCF37T3dw0M4yzM.roa
File:                     MBROwpn7E_P7vCF37T3dw0M4yzM.roa (raw, json)
Hash identifier:          G8TAGfvQzvXZYfrwzR9QmINSRsixI+9H36jSnh0IhZ8=
Subject key identifier:   30:14:4E:C2:99:FB:13:F3:FB:BC:21:77:ED:3D:DD:C3:43:38:CB:33
Certificate issuer:       /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial:       019C18CFB0D9D38EBB146B1A3B5A763F68D1
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/MBROwpn7E_P7vCF37T3dw0M4yzM.roa
Signing time:             Sun 01 Feb 2026 10:46:30 +0000
ROA not before:           Sun 01 Feb 2026 10:46:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47216
IP address blocks:        94.199.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:18:cf:b0:d9:d3:8e:bb:14:6b:1a:3b:5a:76:3f:68:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
        Validity
            Not Before: Feb  1 10:46:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=30144ec299fb13f3fbbc2177ed3dddc34338cb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:92:ba:51:ee:4b:af:27:d5:60:4c:f6:23:77:
                    35:54:b2:03:0e:00:14:9d:fb:44:9d:f2:11:51:03:
                    bc:17:18:b4:13:dd:5f:81:bd:f7:05:dc:43:65:bb:
                    19:79:ca:59:f1:47:18:48:08:6e:8e:a4:d6:e1:33:
                    60:eb:f9:4c:4c:ef:94:c8:79:b0:f5:3c:c8:1b:17:
                    1c:4c:78:57:ca:28:5e:8f:df:99:fe:8c:d2:e3:b4:
                    93:31:c4:94:f9:97:5a:20:f8:e8:ea:6f:21:e8:21:
                    54:82:3b:f2:b9:36:83:e4:de:7a:5d:c9:02:1e:d4:
                    b2:71:ec:98:f1:85:c6:21:8f:0b:cc:0b:2e:ba:93:
                    58:4a:16:e7:92:2b:57:0a:c3:91:1c:11:93:f1:c5:
                    23:07:d8:f9:42:c7:cd:39:72:0e:81:fe:46:a5:20:
                    fd:ea:0a:0d:db:c9:fd:08:68:fc:59:6c:66:b8:33:
                    1c:87:4b:2a:66:dc:7d:55:a8:9b:08:79:97:a2:e6:
                    ba:c8:d3:29:94:08:6e:69:46:2f:91:a5:f7:00:ec:
                    8a:20:af:3e:b6:97:fa:a8:88:a5:f5:86:f5:05:57:
                    63:48:64:16:e8:85:7a:01:93:83:cc:e4:ba:dc:04:
                    46:d5:81:2e:fa:4f:ed:bd:f4:7a:d7:1f:ed:ef:6d:
                    86:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:14:4E:C2:99:FB:13:F3:FB:BC:21:77:ED:3D:DD:C3:43:38:CB:33
            X509v3 Authority Key Identifier:
                keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/MBROwpn7E_P7vCF37T3dw0M4yzM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.199.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:09:3d:5c:eb:67:52:4a:d2:70:91:88:70:b0:ca:dc:86:07:
         61:1e:92:cf:70:bf:c9:a5:8b:69:b7:fc:f6:01:6c:fa:6a:f5:
         43:f5:e6:20:51:7c:1d:5d:45:50:bd:d8:a1:5e:7b:43:a8:52:
         ac:9a:6e:56:86:00:56:0a:b4:1f:64:3b:6e:cf:d9:6a:59:b2:
         55:5b:26:65:65:37:aa:3d:a9:b2:39:60:9c:4f:6c:37:b8:be:
         02:77:9e:a1:e3:03:b6:b1:3e:bc:9a:9d:a9:df:c3:a6:f1:4a:
         d9:88:cf:52:65:d0:f4:bd:fd:ef:0c:1d:bf:90:fa:54:ce:0b:
         c8:05:15:e8:e1:e4:f4:72:18:7f:69:97:7d:7e:e8:29:1b:b6:
         e0:14:6e:26:8f:f0:23:87:e9:e1:91:85:ad:c0:7d:95:9a:41:
         7a:a6:90:73:95:78:c6:c3:c4:11:e2:37:4a:fe:3b:96:70:6b:
         e6:4b:8a:d2:96:a8:d5:6f:26:d0:95:b3:c6:da:e7:77:59:f2:
         11:e2:4d:7c:5d:6d:f0:c0:c8:ad:69:c1:b2:15:4a:24:1c:ec:
         20:b4:19:fc:06:ba:66:40:c8:33:25:43:d9:3d:9d:1c:f7:00:
         3f:79:a1:3e:d8:e4:ad:9f:55:59:53:c4:06:74:06:76:3b:ff:
         c6:02:f4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:57:24 2026 by rpki-client