This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/m2ZF-74RUnpYCSRQzi58JGlu94U.roa
File:                     m2ZF-74RUnpYCSRQzi58JGlu94U.roa (raw, json)
Hash identifier:          rCyhTyXzRp0exhx6DF5SAa1YSYaN0bDG8IRLr2ntpnc=
Subject key identifier:   9B:66:45:FB:BE:11:52:7A:58:09:24:50:CE:2E:7C:24:69:6E:F7:85
Certificate issuer:       /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial:       019B7D5C860B1C41277A6E78A2BB3146C99B
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/m2ZF-74RUnpYCSRQzi58JGlu94U.roa
Signing time:             Fri 02 Jan 2026 06:19:34 +0000
ROA not before:           Fri 02 Jan 2026 06:19:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205065
IP address blocks:        130.193.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:86:0b:1c:41:27:7a:6e:78:a2:bb:31:46:c9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
        Validity
            Not Before: Jan  2 06:19:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9b6645fbbe11527a58092450ce2e7c24696ef785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:33:0a:9b:0c:b4:ed:fd:ec:ac:74:80:28:
                    f6:77:c3:69:db:a5:17:0f:da:0d:6d:16:89:8b:fd:
                    ec:7f:7d:c8:53:4f:2f:83:19:14:35:36:d3:c2:0e:
                    c0:69:5f:5b:b9:c6:5d:53:07:29:b0:93:d6:91:b2:
                    42:0c:f1:12:89:72:d4:76:01:96:dc:6e:74:2f:58:
                    57:26:0b:68:74:cd:00:72:0d:aa:26:db:45:a8:47:
                    1d:b1:d8:de:8a:b2:fe:32:a4:ff:25:26:71:65:09:
                    99:2a:1e:fa:41:4c:b0:90:2a:46:f5:8b:92:0a:70:
                    9b:72:70:82:78:fc:81:f8:be:be:99:18:50:f5:62:
                    eb:49:16:a0:46:5a:ca:8b:18:50:56:87:7d:e9:90:
                    e1:ba:ad:95:d3:70:af:4f:3e:62:a9:91:a2:c2:a4:
                    2e:a2:a1:80:3a:0c:e1:a3:0d:66:32:1a:a0:e4:44:
                    22:8f:47:6a:94:73:e7:09:b6:f5:ca:1e:ca:b4:43:
                    94:90:50:fe:5d:62:be:7c:e9:a9:b5:1c:bc:dd:81:
                    9a:85:2c:97:f3:54:ed:f6:93:00:f4:23:f9:b9:dd:
                    bd:fd:33:a8:95:d0:86:73:cf:fa:5e:b3:93:cf:4e:
                    e1:ee:9f:bf:6d:a3:84:a0:e6:0c:1f:4e:30:7c:a1:
                    a5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:66:45:FB:BE:11:52:7A:58:09:24:50:CE:2E:7C:24:69:6E:F7:85
            X509v3 Authority Key Identifier:
                keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/m2ZF-74RUnpYCSRQzi58JGlu94U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.193.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:86:57:34:04:92:ca:e3:7e:d9:18:62:49:f0:eb:ed:6a:58:
         17:b6:5c:36:d6:65:3f:e6:f1:0f:4e:c2:5c:34:8e:16:91:28:
         0d:e1:12:08:44:ab:39:14:6d:12:a7:f8:49:54:e0:a3:6a:ab:
         28:c1:69:36:11:b3:86:8d:bc:04:dd:02:1b:b9:2c:61:ab:a5:
         63:8b:2a:ce:9b:04:6f:d5:6f:e9:18:3e:2d:37:e9:d0:8b:15:
         79:ed:c2:6d:69:fd:a5:ee:77:e6:36:12:ce:8e:cc:be:1a:31:
         61:25:26:e5:d3:9f:f3:ec:c2:f2:a8:b2:4f:e3:2d:4c:1e:e6:
         ec:01:dc:8d:3c:22:6f:9f:69:13:8e:40:a1:28:cf:e6:e1:f6:
         ad:0d:e4:a6:23:69:dc:1a:83:01:94:96:39:5c:28:53:74:eb:
         56:6d:9a:bb:56:c7:20:69:a1:5e:0b:96:08:82:37:e4:30:1c:
         81:b3:5a:ac:11:c8:aa:cd:f9:91:55:26:78:0a:bf:05:27:19:
         79:fa:d5:68:95:5e:8b:ae:84:8d:09:38:6a:ee:ad:27:c9:b9:
         f5:3d:12:01:fa:19:53:ef:b3:29:86:d2:8d:18:39:8e:21:3c:
         c4:22:e7:7b:d1:7b:9b:00:d6:4c:64:f0:1d:d8:6d:9d:37:2e:
         83:27:26:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9XIYLHEEnem54orsxRsmbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZDM2ZWNiYWY1NWU0NjRlMDBiMzk4N2RhNTI2NGI2YWYy
ZGNmODgwHhcNMjYwMTAyMDYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjY2NDVmYmJlMTE1MjdhNTgwOTI0NTBjZTJlN2MyNDY5NmVmNzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIMzCpsMtO397Kx0gCj2d8Np26UX
D9oNbRaJi/3sf33IU08vgxkUNTbTwg7AaV9bucZdUwcpsJPWkbJCDPESiXLUdgGW
3G50L1hXJgtodM0Acg2qJttFqEcdsdjeirL+MqT/JSZxZQmZKh76QUywkCpG9YuS
CnCbcnCCePyB+L6+mRhQ9WLrSRagRlrKixhQVod96ZDhuq2V03CvTz5iqZGiwqQu
oqGAOgzhow1mMhqg5EQij0dqlHPnCbb1yh7KtEOUkFD+XWK+fOmptRy83YGahSyX
81Tt9pMA9CP5ud29/TOoldCGc8/6XrOTz07h7p+/baOEoOYMH04wfKGlhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJtmRfu+EVJ6WAkkUM4ufCRpbveFMB8GA1UdIwQY
MBaAFIPTbsuvVeRk4As5h9pSZLavLc+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMmJlZjAtNzU2MS00MzdiLTk0OTAt
OTY1MzFkMTYzMzFiLzEvbTJaRi03NFJVbnBZQ1NSUXppNThKR2x1OTRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMmJlZjAtNzU2MS00MzdiLTk0OTAtOTY1MzFkMTYzMzFi
LzEvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgsFMMA0G
CSqGSIb3DQEBCwUAA4IBAQCghlc0BJLK437ZGGJJ8OvtalgXtlw21mU/5vEPTsJc
NI4WkSgN4RIIRKs5FG0Sp/hJVOCjaqsowWk2EbOGjbwE3QIbuSxhq6VjiyrOmwRv
1W/pGD4tN+nQixV57cJtaf2l7nfmNhLOjsy+GjFhJSbl05/z7MLyqLJP4y1MHubs
AdyNPCJvn2kTjkChKM/m4fatDeSmI2ncGoMBlJY5XChTdOtWbZq7VscgaaFeC5YI
gjfkMByBs1qsEciqzfmRVSZ4Cr8FJxl5+tVolV6LroSNCThq7q0nybn1PRIB+hlT
77MphtKNGDmOITzEIud70XubANZMZPAd2G2dNy6DJybM
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:28 2026 by rpki-client