This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/RMGZ-vy_dDQuHhZGPwdY1SDw3MA.roa
File:                     RMGZ-vy_dDQuHhZGPwdY1SDw3MA.roa (raw, json)
Hash identifier:          J2ooeCLUwgG08rs8ThsvjcTV38rsjc50babTQPWvqzo=
Subject key identifier:   44:C1:99:FA:FC:BF:74:34:2E:1E:16:46:3F:07:58:D5:20:F0:DC:C0
Certificate issuer:       /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial:       019B791045B461C717F90D45672C7BB172C5
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/RMGZ-vy_dDQuHhZGPwdY1SDw3MA.roa
Signing time:             Thu 01 Jan 2026 10:17:48 +0000
ROA not before:           Thu 01 Jan 2026 10:17:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137502
IP address blocks:        213.248.216.0/24 maxlen: 24
                          213.248.217.0/24 maxlen: 24
                          213.248.218.0/24 maxlen: 24
                          213.248.219.0/24 maxlen: 24
                          213.248.220.0/24 maxlen: 24
                          213.248.221.0/24 maxlen: 24
                          213.248.222.0/24 maxlen: 24
                          213.248.223.0/24 maxlen: 24
                          213.248.254.0/24 maxlen: 24
                          213.248.255.0/24 maxlen: 24
                          2a01:618:400::/48 maxlen: 48
                          2a01:618:401::/48 maxlen: 48
                          2a01:618:402::/48 maxlen: 48
                          2a01:618:403::/48 maxlen: 48
                          2a01:618:404::/48 maxlen: 48
                          2a01:618:405::/48 maxlen: 48
                          2a01:618:406::/48 maxlen: 48
                          2a01:618:407::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:45:b4:61:c7:17:f9:0d:45:67:2c:7b:b1:72:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
        Validity
            Not Before: Jan  1 10:17:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=44c199fafcbf74342e1e16463f0758d520f0dcc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f0:e2:1f:c8:ce:af:7e:d3:c6:1c:49:be:71:
                    7e:98:44:ab:8c:8e:42:49:1b:4f:96:b9:42:da:04:
                    a4:0d:31:f7:f9:cc:fa:d2:7c:ee:05:6e:a6:7b:a5:
                    42:6e:5b:65:14:40:3a:92:d1:5b:4b:c1:5d:98:13:
                    d9:90:16:1b:34:c1:31:0d:76:01:bc:13:10:09:cb:
                    97:f6:dd:f0:17:f6:da:8d:fd:fb:e1:f4:f4:c0:7a:
                    f9:fa:20:8b:dc:ae:03:6a:c4:92:c8:57:73:75:93:
                    0d:26:19:fe:0d:10:dd:71:c1:22:0e:8e:39:79:f6:
                    6e:3f:70:86:e9:ea:e3:7c:b5:f7:53:71:11:da:a0:
                    de:ec:1f:62:e5:68:8c:b5:b4:e8:93:29:18:46:56:
                    b1:28:ab:6a:71:a1:cf:a2:13:d2:76:79:9f:58:c8:
                    5a:28:88:92:e3:d0:d6:dc:e0:77:0a:7b:21:b5:9d:
                    65:ad:d5:30:1a:0c:3b:a8:e7:5a:24:97:a2:04:b2:
                    75:38:4b:35:8b:69:9d:f5:6e:13:37:19:6c:73:03:
                    2b:cf:75:0d:c5:91:f1:ba:df:6c:ef:9c:01:b2:9d:
                    3a:ee:96:52:f1:6e:2c:1b:4b:63:fc:9b:0c:46:85:
                    55:7c:13:43:88:27:ec:51:50:f3:cf:ea:69:27:ca:
                    5a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C1:99:FA:FC:BF:74:34:2E:1E:16:46:3F:07:58:D5:20:F0:DC:C0
            X509v3 Authority Key Identifier:
                keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/RMGZ-vy_dDQuHhZGPwdY1SDw3MA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.248.216.0/21
                  213.248.254.0/23
                IPv6:
                  2a01:618:400::/45

    Signature Algorithm: sha256WithRSAEncryption
         97:1f:e7:82:1f:c7:e0:ef:1f:65:5b:2c:88:ee:de:fd:42:73:
         4f:73:af:2e:b5:2b:63:a6:31:06:2d:38:bb:c2:59:bd:0d:d9:
         4f:bf:85:60:49:97:92:3b:3e:59:e0:9c:d5:be:5b:c5:21:1c:
         6d:30:d3:9a:8f:ea:77:01:70:06:ec:20:39:14:a7:e8:f3:dc:
         3d:d9:ff:82:25:5f:fe:e2:d2:44:20:06:d0:b4:57:34:68:1f:
         d8:1c:52:d9:d2:d0:de:1b:62:c0:99:e4:7b:88:8f:d9:e2:f7:
         b3:4b:8a:96:fb:2b:63:81:ed:fe:39:ae:8d:c2:b4:69:e0:7f:
         79:77:8b:3f:d4:6c:93:1d:f0:d9:95:e0:e7:3f:bc:2d:9e:9f:
         3e:66:81:61:33:af:86:36:45:ec:c3:68:0f:a1:42:92:bc:7b:
         2c:04:29:71:a7:00:61:da:b7:ec:3d:ac:83:eb:1a:f7:9c:46:
         72:ff:97:4a:a3:a6:c2:ef:0a:77:7c:08:01:9b:83:04:2d:46:
         a0:b1:85:f3:22:8b:20:27:b9:af:8f:41:c6:95:f4:35:b0:f6:
         fa:ee:c1:86:3f:03:d1:b2:56:69:c6:6a:d9:c5:1e:0b:0e:b4:
         60:5c:60:44:6c:05:18:4e:e0:41:a7:f6:85:de:fa:1c:b2:c4:
         00:f0:f6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:46:28 2026 by rpki-client