This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/m3YOl3KcHPw0jUGNX-PfWukNeHg.roa
File:                     m3YOl3KcHPw0jUGNX-PfWukNeHg.roa (raw, json)
Hash identifier:          +MhGdxnaLuhxZ2eCGlUOStLfg0KmoTa8/jNIH8bkEKg=
Subject key identifier:   9B:76:0E:97:72:9C:1C:FC:34:8D:41:8D:5F:E3:DF:5A:E9:0D:78:78
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       019B7EA57C9FAE41F0D701B1052ED8EB85B8
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/m3YOl3KcHPw0jUGNX-PfWukNeHg.roa
Signing time:             Fri 02 Jan 2026 12:18:53 +0000
ROA not before:           Fri 02 Jan 2026 12:18:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     30857
IP address blocks:        212.26.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 00:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a5:7c:9f:ae:41:f0:d7:01:b1:05:2e:d8:eb:85:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Jan  2 12:18:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9b760e97729c1cfc348d418d5fe3df5ae90d7878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:42:11:b7:0f:b4:ee:47:71:43:ed:1d:4a:
                    5c:d0:39:b2:21:d9:46:1d:0b:5d:bf:0b:ff:34:0d:
                    1f:61:40:b2:d0:34:4c:e0:a9:0c:b6:d2:f5:01:a3:
                    24:28:d2:98:e8:ee:11:80:27:aa:7e:89:36:c4:a9:
                    4e:32:f2:e2:67:3a:97:15:62:1b:f7:d6:a5:dd:0a:
                    2a:f5:7c:78:97:e1:d4:b7:0a:71:6c:5f:37:ea:52:
                    35:da:51:0a:b3:c2:7e:8c:fa:2d:b8:6f:8f:29:8a:
                    ac:34:eb:07:a5:21:84:c1:d6:19:98:7d:be:c9:55:
                    ff:02:e7:a7:91:9a:09:0a:de:67:cb:fe:1f:ca:76:
                    fd:8c:42:1e:43:9f:7e:59:41:cf:08:ab:26:03:d9:
                    60:e5:95:04:cb:42:83:04:5c:8d:a1:da:bb:90:cd:
                    e4:c3:71:b9:99:3f:06:eb:5e:11:3b:79:73:29:c0:
                    93:88:05:01:e6:62:fe:72:c5:72:03:4e:55:cc:bf:
                    28:b8:a2:2e:fe:ba:18:25:50:6e:5c:8c:c2:20:a0:
                    84:d2:2d:a1:4d:1a:34:3e:54:51:c4:09:3f:47:f0:
                    6a:07:f8:b6:80:1c:5e:d3:1c:2c:15:31:0b:64:f4:
                    db:72:98:ab:ea:ab:60:f6:e7:9a:ee:5d:62:39:16:
                    29:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:76:0E:97:72:9C:1C:FC:34:8D:41:8D:5F:E3:DF:5A:E9:0D:78:78
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/m3YOl3KcHPw0jUGNX-PfWukNeHg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.26.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:ba:9b:21:91:ed:22:95:79:ee:9f:6f:cf:ff:86:56:23:09:
         05:31:03:16:2b:e7:1d:1a:1e:ef:55:e2:d7:8d:d1:9c:0c:52:
         df:eb:53:47:39:2e:fe:cf:ea:a1:20:1d:33:2a:c8:03:a3:b6:
         4c:0d:bb:88:38:d5:6f:90:1b:df:17:c2:ab:5c:eb:3e:e0:72:
         bf:6a:31:6e:b4:77:13:29:95:1d:ea:b8:15:6d:13:09:43:13:
         d0:27:f9:eb:df:17:a8:ca:85:17:09:70:ab:d5:41:70:48:a5:
         3d:ff:09:ec:4b:a9:30:ee:bc:cc:ca:35:9d:76:a7:d9:83:20:
         ee:34:3f:63:f1:6b:73:63:cf:f7:5c:69:b1:42:d5:62:34:dd:
         77:4d:16:4d:23:e6:37:d1:11:a4:48:79:9d:6c:b5:cd:19:d9:
         90:f0:f1:a6:58:b8:15:1f:fc:21:90:1a:a2:57:d2:1d:6c:20:
         96:09:9e:ca:41:2d:4e:84:a8:be:87:d7:05:08:3a:bf:dd:9c:
         5f:e5:3e:60:df:01:cf:d1:8b:25:a8:0c:93:ce:97:b0:7e:24:
         a0:16:27:23:fe:c1:a8:68:3a:bb:cc:fe:81:0c:64:e2:6a:95:
         78:b9:68:bf:7a:10:d1:5a:84:ee:be:b9:05:96:e6:09:2e:97:
         98:cb:d7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 07:31:45 2026 by rpki-client