This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/mTMV3JVVafTQbCI8fMfsYYbI-GM.roa
File:                     mTMV3JVVafTQbCI8fMfsYYbI-GM.roa (raw, json)
Hash identifier:          OvidQY4NfhMTBeSM+DOJ+WEE6JBe1DZJww12CtdTTqg=
Subject key identifier:   99:33:15:DC:95:55:69:F4:D0:6C:22:3C:7C:C7:EC:61:86:C8:F8:63
Certificate issuer:       /CN=37a54fb07bea3df556e3593454d320e4f00eef2c
Certificate serial:       019B797E24C631BC1FB5D5944CB6CCA3ED1E
Authority key identifier: 37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/mTMV3JVVafTQbCI8fMfsYYbI-GM.roa
Signing time:             Thu 01 Jan 2026 12:17:48 +0000
ROA not before:           Thu 01 Jan 2026 12:17:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214645
IP address blocks:        2001:67c:26cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:24:c6:31:bc:1f:b5:d5:94:4c:b6:cc:a3:ed:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a54fb07bea3df556e3593454d320e4f00eef2c
        Validity
            Not Before: Jan  1 12:17:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=993315dc955569f4d06c223c7cc7ec6186c8f863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:68:39:36:2e:06:79:d5:d4:2b:fd:ca:a4:7b:
                    a0:d6:56:61:64:13:0e:43:c8:d6:56:6c:2b:a5:d3:
                    11:7c:d9:0e:93:27:dd:1b:63:dc:9f:60:62:77:e3:
                    f2:9d:09:f1:61:6e:17:48:bb:fb:63:14:65:75:d1:
                    55:36:d8:d5:a9:31:42:e2:73:2d:7b:82:de:ba:52:
                    0b:70:fd:9e:96:2a:4c:9c:57:16:b8:4f:4a:5b:2e:
                    0a:fa:ab:c3:ed:d4:4b:81:03:63:15:f6:ef:31:c7:
                    20:a3:81:0f:d2:33:dc:b5:8e:55:40:d1:c0:60:90:
                    a5:c6:e9:8e:98:91:59:ff:84:bf:92:0c:d4:95:d6:
                    ce:21:a5:e9:57:04:c5:c3:67:02:ae:0d:63:94:f1:
                    16:93:8a:53:ac:dc:a6:cd:e7:47:b1:b3:cd:4d:c4:
                    1c:a0:84:b7:68:d9:ef:0e:00:e3:c7:2b:25:b7:22:
                    17:95:b8:f9:aa:82:6e:6a:cb:33:17:83:15:c4:85:
                    27:89:be:03:a1:19:fb:f5:8a:3e:a5:93:1c:06:5b:
                    bd:9f:a7:96:12:e0:c1:96:4c:23:82:c2:ad:2d:a2:
                    ef:95:e1:df:4b:59:62:b2:d6:0d:35:9b:6f:e3:ca:
                    03:80:67:b4:81:d3:81:0f:b2:0b:ce:a7:88:83:89:
                    89:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:33:15:DC:95:55:69:F4:D0:6C:22:3C:7C:C7:EC:61:86:C8:F8:63
            X509v3 Authority Key Identifier:
                keyid:37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/mTMV3JVVafTQbCI8fMfsYYbI-GM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:26cc::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:08:26:5e:27:86:30:41:9a:ae:a0:ba:e0:c6:7f:4f:de:a8:
         b5:0f:3e:7f:67:9b:ca:ab:37:11:9c:f7:8b:5f:ba:31:12:90:
         d2:7e:4a:c2:91:c2:8a:18:17:87:0d:63:df:8a:cf:3e:a4:3c:
         dd:9e:c4:3d:23:4e:cb:0d:31:20:c2:b7:9c:88:54:54:ef:fe:
         34:8a:cd:56:5d:9a:67:6c:f5:9b:c2:c7:b9:bc:3a:b1:c0:e5:
         33:ec:5f:70:8f:56:10:8a:3d:1c:d7:3f:fd:a0:b2:6c:3c:6a:
         33:0e:ba:87:f6:0e:87:be:76:ff:39:1d:c1:02:f1:e3:3f:d6:
         7b:2f:89:80:39:20:fc:dd:8d:0c:37:5b:17:92:5e:44:00:e5:
         6c:d6:ff:de:ba:f0:de:a6:27:32:9d:94:5b:5f:54:88:ea:3b:
         7c:3a:62:95:9e:df:01:3a:65:da:9e:73:89:ea:b2:af:fb:4f:
         91:fd:26:3a:ea:c1:aa:96:92:9a:c0:5d:20:50:4a:76:5c:9a:
         b4:01:67:95:17:ae:c7:90:fc:12:fe:be:b5:fa:1a:f3:10:a5:
         a0:83:db:5f:f6:64:6e:f6:fe:63:0d:1a:5d:91:53:46:ce:06:
         1a:4c:aa:f0:e4:1f:9b:26:8f:61:ea:ec:7a:ee:a0:47:7e:26:
         00:69:8f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:09:09 2026 by rpki-client