This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/rlmsd6PpCLGDar5RoisaMe8IHhI.roa
File:                     rlmsd6PpCLGDar5RoisaMe8IHhI.roa (raw, json)
Hash identifier:          87NJGu3xmNWRFtTUSOeFPV+lS8Rn45UJIMOhad/Hf98=
Subject key identifier:   AE:59:AC:77:A3:E9:08:B1:83:6A:BE:51:A2:2B:1A:31:EF:08:1E:12
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       019B79ED21C36A9909B0A077344092FCD2AB
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/rlmsd6PpCLGDar5RoisaMe8IHhI.roa
Signing time:             Thu 01 Jan 2026 14:19:02 +0000
ROA not before:           Thu 01 Jan 2026 14:19:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202121
IP address blocks:        148.81.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:21:c3:6a:99:09:b0:a0:77:34:40:92:fc:d2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 14:19:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ae59ac77a3e908b1836abe51a22b1a31ef081e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f6:c7:bc:2d:99:c2:2a:03:e5:2e:63:46:00:
                    65:08:92:f3:0d:78:23:45:24:4f:cb:11:eb:dc:f3:
                    43:c3:56:32:d9:24:ac:89:d5:88:e3:8f:8d:1d:8d:
                    75:51:d8:69:a8:49:c9:13:7f:c3:70:91:1c:89:6c:
                    17:5c:69:1e:8a:16:aa:0d:63:72:cd:c3:59:e2:48:
                    7a:08:3b:43:89:d8:0f:76:49:a8:27:30:14:ef:d7:
                    57:99:ad:14:f3:11:1e:c3:18:5c:6c:5f:39:ae:e3:
                    f6:45:b9:aa:fc:b3:d5:4e:d6:3d:d8:3b:c6:25:85:
                    9b:c6:a3:ba:b9:76:82:f0:ed:86:38:92:36:a3:b2:
                    f6:9d:57:f4:75:b1:8d:f2:e6:5b:8e:27:94:f3:8d:
                    83:ea:1c:3b:ea:57:a5:a4:ec:e5:4c:aa:fe:3e:7f:
                    54:5b:90:e2:47:91:d2:ee:b9:42:d6:81:cd:81:f3:
                    a0:63:da:07:63:b8:31:0c:49:f0:b0:98:98:68:20:
                    56:be:96:3b:9c:41:e4:1f:53:22:af:1f:ba:48:c0:
                    55:c3:8f:40:d7:30:09:e9:90:d5:6e:59:04:be:95:
                    73:79:c7:a6:cf:79:0a:0f:a0:e2:5c:a1:8a:d1:79:
                    b5:96:76:56:b9:f8:5e:7a:b3:9f:d7:3e:45:9e:3a:
                    77:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:59:AC:77:A3:E9:08:B1:83:6A:BE:51:A2:2B:1A:31:EF:08:1E:12
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/rlmsd6PpCLGDar5RoisaMe8IHhI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.81.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:7f:0a:fa:7d:34:ce:dd:52:db:81:b4:f5:36:05:44:79:04:
         14:64:35:09:80:d9:cd:47:2f:64:14:9b:97:21:36:ba:99:ad:
         dd:ce:3a:89:31:77:04:ab:f5:3f:a0:9f:6c:8f:19:0f:c4:7a:
         29:b6:f1:37:81:5e:3a:6f:43:57:26:a3:9a:6d:8f:29:77:4a:
         6b:34:0f:86:84:cb:7e:22:b4:b8:57:a8:46:59:80:12:b0:eb:
         a8:0a:7b:46:b5:23:ce:15:2a:17:a2:8b:ae:5f:cb:00:6d:bd:
         6c:72:d8:ab:c2:16:19:0b:9b:67:40:03:21:a8:e6:2b:c4:dc:
         95:d1:98:e2:3f:d0:a4:f3:43:37:c8:38:72:a4:90:e3:e2:e5:
         0a:2f:84:35:9e:36:1a:84:96:c4:b1:1d:b9:1a:39:ab:80:9c:
         a9:2e:8e:10:5d:1f:40:1d:60:53:90:24:79:d2:b5:d3:50:af:
         87:8e:58:99:cf:68:2f:a8:bf:86:dd:b6:1f:1d:3a:a1:d7:70:
         ba:d5:53:f7:59:b0:b1:ac:44:74:c0:04:25:39:71:34:24:c9:
         27:98:d0:67:34:b3:70:b5:b7:d2:3e:26:ef:68:74:8d:13:e4:
         83:0d:f3:42:03:4d:3f:2c:84:a9:4f:9f:1e:12:79:e0:3d:08:
         b8:df:d5:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt57SHDapkJsKB3NECS/NKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw
MTE4OGYwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTU5YWM3N2EzZTkwOGIxODM2YWJlNTFhMjJiMWEzMWVmMDgxZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fbHvC2ZwioD5S5jRgBlCJLzDXgj
RSRPyxHr3PNDw1Yy2SSsidWI44+NHY11UdhpqEnJE3/DcJEciWwXXGkeihaqDWNy
zcNZ4kh6CDtDidgPdkmoJzAU79dXma0U8xEewxhcbF85ruP2Rbmq/LPVTtY92DvG
JYWbxqO6uXaC8O2GOJI2o7L2nVf0dbGN8uZbjieU842D6hw76lelpOzlTKr+Pn9U
W5DiR5HS7rlC1oHNgfOgY9oHY7gxDEnwsJiYaCBWvpY7nEHkH1Mirx+6SMBVw49A
1zAJ6ZDVblkEvpVzecemz3kKD6DiXKGK0Xm1lnZWufheerOf1z5Fnjp3qQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK5ZrHej6Qixg2q+UaIrGjHvCB4SMB8GA1UdIwQY
MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt
YzA2NzFiZjRjZjNlLzEvcmxtc2Q2UHBDTEdEYXI1Um9pc2FNZThJSGhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl
LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlFH2MA0G
CSqGSIb3DQEBCwUAA4IBAQAffwr6fTTO3VLbgbT1NgVEeQQUZDUJgNnNRy9kFJuX
ITa6ma3dzjqJMXcEq/U/oJ9sjxkPxHoptvE3gV46b0NXJqOabY8pd0prNA+GhMt+
IrS4V6hGWYASsOuoCntGtSPOFSoXoouuX8sAbb1sctirwhYZC5tnQAMhqOYrxNyV
0ZjiP9Ck80M3yDhypJDj4uUKL4Q1njYahJbEsR25GjmrgJypLo4QXR9AHWBTkCR5
0rXTUK+HjliZz2gvqL+G3bYfHTqh13C61VP3WbCxrER0wAQlOXE0JMknmNBnNLNw
tbfSPibvaHSNE+SDDfNCA00/LISpT58eEnngPQi439Wr
-----END CERTIFICATE-----
Generated at Mon Jan 26 08:37:50 2026 by rpki-client