This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/mpJtsbgETmC7dBt4ggwDy82h6R0.roa
File:                     mpJtsbgETmC7dBt4ggwDy82h6R0.roa (raw, json)
Hash identifier:          E+0fFewOuAbiSOJJdk0VjGz9UYn9lB3tMo/+quCRNnk=
Subject key identifier:   9A:92:6D:B1:B8:04:4E:60:BB:74:1B:78:82:0C:03:CB:CD:A1:E9:1D
Certificate issuer:       /CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Certificate serial:       019B7BA47785508D8FBDBE77299C2DA075BE
Authority key identifier: 16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/mpJtsbgETmC7dBt4ggwDy82h6R0.roa
Signing time:             Thu 01 Jan 2026 22:18:54 +0000
ROA not before:           Thu 01 Jan 2026 22:18:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49381
IP address blocks:        91.229.196.0/22 maxlen: 22
                          193.169.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:77:85:50:8d:8f:bd:be:77:29:9c:2d:a0:75:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
        Validity
            Not Before: Jan  1 22:18:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9a926db1b8044e60bb741b78820c03cbcda1e91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:4c:63:0e:a5:6a:66:32:31:86:68:03:49:
                    bf:6b:e8:1c:27:9a:49:fa:5b:92:5d:3a:2e:6b:1b:
                    bf:d9:57:03:41:ca:32:9c:74:27:9a:96:14:02:18:
                    97:72:8a:d5:e9:f8:a7:bf:e3:fd:52:02:36:f1:ff:
                    bf:ce:01:80:5f:27:af:99:a0:96:53:f1:07:db:bd:
                    3d:ed:35:1e:68:f3:23:f6:f0:d8:42:06:c7:6b:dd:
                    85:56:62:25:9d:75:d3:f2:a6:81:06:09:10:75:a3:
                    e7:96:0e:cf:8e:11:bb:4d:5a:e1:61:b5:a5:63:28:
                    2b:c2:e9:04:50:3e:71:f2:47:39:03:49:ed:50:af:
                    bf:71:35:14:cc:dc:c9:45:eb:63:84:b4:64:77:20:
                    8f:5a:c1:ff:07:62:c4:01:a7:87:78:27:92:c2:6e:
                    44:f8:e0:79:a4:56:28:19:e7:9b:73:38:78:81:16:
                    51:1b:98:41:a4:85:a5:b0:32:5b:68:07:a9:dd:71:
                    8a:c6:f4:50:96:65:8c:c8:bf:87:00:4f:b9:02:f1:
                    57:25:ac:5c:c1:f3:c4:4b:c5:20:e8:04:c1:45:84:
                    40:b6:74:df:97:8e:28:7c:97:ef:e8:1d:44:5f:26:
                    6c:85:12:44:eb:79:f8:8d:44:4f:3d:6e:75:a9:1d:
                    1e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:92:6D:B1:B8:04:4E:60:BB:74:1B:78:82:0C:03:CB:CD:A1:E9:1D
            X509v3 Authority Key Identifier:
                keyid:16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/mpJtsbgETmC7dBt4ggwDy82h6R0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.196.0/22
                  193.169.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:c4:26:8b:bb:f3:9b:ea:b0:b9:b7:87:2c:21:cb:69:13:ab:
         8d:aa:3f:f5:44:ff:68:84:62:56:e0:fc:81:1e:dd:cd:0c:81:
         d2:31:7d:68:2a:fd:39:42:4b:d2:ab:68:13:fb:22:83:e9:c4:
         da:b6:db:a7:e9:d7:91:7c:14:9a:1a:e6:5d:8a:39:a4:ef:ad:
         4d:4b:b0:70:6c:2c:bf:4d:e6:45:72:56:e0:dc:5a:b2:1c:cd:
         4b:b7:f3:65:c4:a4:59:12:47:28:38:70:db:54:5b:5f:e5:1f:
         98:fb:f7:0c:70:d5:9d:04:86:21:fd:ad:da:94:36:21:2a:6b:
         5d:cc:75:2b:a3:e0:83:fe:85:06:66:5f:d4:0e:01:7b:7d:e8:
         4d:ce:18:d5:7c:c4:7d:07:82:87:91:d3:8b:ee:57:02:82:e1:
         3b:8f:71:2f:82:51:32:fb:74:0c:b6:ef:1f:ed:70:ee:3d:8b:
         bf:08:8f:81:72:0c:13:5f:a9:b6:34:9d:c0:94:36:42:f5:c6:
         b1:08:62:fc:aa:6f:2d:b3:6b:ac:e9:71:5b:43:97:0b:eb:93:
         07:85:78:6b:2c:7d:61:84:67:93:d8:24:da:7f:2e:d2:90:f1:
         99:b1:d3:3a:72:09:c5:28:88:c5:51:a0:de:d8:5d:b4:3e:75:
         50:3b:02:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:15 2026 by rpki-client