This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/MrmCJmCL1gfXLcSkz8EW4VADkrA.roa
File:                     MrmCJmCL1gfXLcSkz8EW4VADkrA.roa (raw, json)
Hash identifier:          AvL+Rn21G66LGq2DcqoK6FUvK6Pi1mjvtoyB2LWH/sk=
Subject key identifier:   32:B9:82:26:60:8B:D6:07:D7:2D:C4:A4:CF:C1:16:E1:50:03:92:B0
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       019B797EBA93A29A17491B13998665A1805F
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/MrmCJmCL1gfXLcSkz8EW4VADkrA.roa
Signing time:             Thu 01 Jan 2026 12:18:27 +0000
ROA not before:           Thu 01 Jan 2026 12:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42794
IP address blocks:        82.103.112.0/24 maxlen: 24
                          88.203.208.0/23 maxlen: 23
                          88.203.210.0/23 maxlen: 23
                          88.203.212.0/24 maxlen: 24
                          88.203.213.0/24 maxlen: 24
                          88.203.214.0/24 maxlen: 24
                          88.203.215.0/24 maxlen: 24
                          88.203.232.0/24 maxlen: 24
                          88.203.233.0/24 maxlen: 24
                          92.247.120.0/22 maxlen: 22
                          92.247.124.0/24 maxlen: 24
                          92.247.125.0/24 maxlen: 24
                          92.247.126.0/24 maxlen: 24
                          92.247.127.0/24 maxlen: 24
                          92.247.128.0/23 maxlen: 23
                          212.36.17.0/24 maxlen: 24
                          2a01:288:4004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:ba:93:a2:9a:17:49:1b:13:99:86:65:a1:80:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  1 12:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=32b98226608bd607d72dc4a4cfc116e1500392b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:45:52:d5:dd:2d:3f:ff:c6:b6:dd:31:9c:
                    f0:ae:d2:8c:77:73:f1:8f:80:4f:8f:6c:bd:d8:df:
                    63:73:8b:42:39:eb:b1:03:00:f5:62:58:9e:75:da:
                    50:c1:c0:bd:b5:53:42:c8:83:b1:98:7f:ab:54:27:
                    e6:a2:e2:a0:6e:1b:2f:e7:e8:3f:da:5b:4d:b5:e2:
                    34:62:9a:39:a0:f5:cc:88:c4:95:b1:ec:13:bc:9a:
                    f4:fd:ee:12:32:bf:30:07:49:72:60:18:96:13:4a:
                    63:65:79:74:78:c4:07:67:7e:21:0d:a9:00:01:82:
                    20:0c:48:fe:84:73:42:3b:46:ef:d6:93:c9:ee:bb:
                    96:3d:69:99:b4:b3:f4:3f:ff:e9:b7:ac:73:c9:5a:
                    ed:21:98:77:cd:9e:81:14:d7:3d:3a:6e:db:b2:22:
                    cf:b7:08:27:da:16:0f:b6:92:43:fc:57:de:07:98:
                    9e:81:d7:cb:5a:cb:c2:bf:9e:b4:ec:27:36:85:e2:
                    3b:54:83:cc:26:b3:6d:43:4c:ef:99:ec:44:9d:13:
                    83:f6:b7:7f:e1:a6:dd:ed:a0:d4:fa:6c:f5:f4:a8:
                    e9:41:b4:6a:53:c7:2e:f6:47:be:d8:39:ca:d6:cf:
                    ca:72:97:55:92:73:a6:b1:4a:a7:2c:2f:69:e4:20:
                    e9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B9:82:26:60:8B:D6:07:D7:2D:C4:A4:CF:C1:16:E1:50:03:92:B0
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/MrmCJmCL1gfXLcSkz8EW4VADkrA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.103.112.0/24
                  88.203.208.0/21
                  88.203.232.0/23
                  92.247.120.0-92.247.129.255
                  212.36.17.0/24
                IPv6:
                  2a01:288:4004::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:4b:20:a2:74:78:db:fb:48:8d:7a:e4:ec:77:18:31:a6:e4:
         bc:92:a7:64:8f:85:84:95:51:4e:4c:73:47:ed:ce:25:56:05:
         c0:0e:88:5f:39:21:50:f7:1e:6e:40:11:06:8f:88:65:6a:31:
         93:63:da:cd:63:64:67:ad:30:48:94:24:34:96:c1:c0:9e:13:
         8d:e0:35:1e:f6:29:4c:09:c4:31:e3:16:38:43:e9:ce:5c:12:
         f4:cc:4e:e4:30:e8:cd:93:bf:6d:16:eb:b6:06:f3:9a:e3:84:
         36:3f:57:70:c5:d4:4a:e2:52:a4:f2:31:f5:a4:b3:a1:ec:bd:
         89:cf:6c:4a:a1:12:fb:2e:e5:19:81:15:66:b1:da:e3:4e:fb:
         3e:3d:89:57:c7:6a:bc:35:8f:36:c7:ad:f0:f3:1a:af:9c:a5:
         f0:8f:1d:bd:a4:3c:63:64:eb:2e:87:8b:38:c9:1e:7c:6f:77:
         21:6b:e3:c1:9d:e5:46:c4:0f:8f:60:4f:d0:46:97:8b:62:27:
         ae:e2:c9:da:56:10:79:cc:3f:6c:54:b6:ae:e0:5f:43:72:84:
         8b:fd:10:39:1b:f5:60:47:ea:77:68:fb:2a:70:c6:50:90:90:
         bc:a6:79:24:d9:5d:96:c7:a5:e7:f7:f7:54:d4:0e:f8:5c:f3:
         23:cf:9e:38
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAZt5frqTopoXSRsTmYZloYBfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmI5ODIyNjYwOGJkNjA3ZDcyZGM0YTRjZmMxMTZlMTUwMDM5MmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgJFUtXdLT//xrbdMZzwrtKMd3Px
j4BPj2y92N9jc4tCOeuxAwD1YlieddpQwcC9tVNCyIOxmH+rVCfmouKgbhsv5+g/
2ltNteI0Ypo5oPXMiMSVsewTvJr0/e4SMr8wB0lyYBiWE0pjZXl0eMQHZ34hDakA
AYIgDEj+hHNCO0bv1pPJ7ruWPWmZtLP0P//pt6xzyVrtIZh3zZ6BFNc9Om7bsiLP
twgn2hYPtpJD/FfeB5iegdfLWsvCv5607Cc2heI7VIPMJrNtQ0zvmexEnROD9rd/
4abd7aDU+mz19KjpQbRqU8cu9ke+2DnK1s/KcpdVknOmsUqnLC9p5CDphwIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFDK5giZgi9YH1y3EpM/BFuFQA5KwMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvTXJtQ0ptQ0wxZ2ZYTGNTa3o4RVc0VkFEa3JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAsBAIAATAmAwQAUmdwAwQD
WMvQAwQBWMvoMAwDBANc93gDBAFc94ADBADUJBEwDwQCAAIwCQMHACoBAohABDAN
BgkqhkiG9w0BAQsFAAOCAQEAbUsgonR42/tIjXrk7HcYMabkvJKnZI+FhJVRTkxz
R+3OJVYFwA6IXzkhUPcebkARBo+IZWoxk2PazWNkZ60wSJQkNJbBwJ4TjeA1HvYp
TAnEMeMWOEPpzlwS9MxO5DDozZO/bRbrtgbzmuOENj9XcMXUSuJSpPIx9aSzoey9
ic9sSqES+y7lGYEVZrHa4077Pj2JV8dqvDWPNset8PMar5yl8I8dvaQ8Y2TrLoeL
OMkefG93IWvjwZ3lRsQPj2BP0EaXi2InruLJ2lYQecw/bFS2ruBfQ3KEi/0QORv1
YEfqd2j7KnDGUJCQvKZ5JNldlsel5/f3VNQO+FzzI8+eOA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:49:26 2026 by rpki-client