This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/MwjqyVMrj31F474MSeKkhNXzvoI.roa
File:                     MwjqyVMrj31F474MSeKkhNXzvoI.roa (raw, json)
Hash identifier:          m7bqaTX59YwG3k1du3WuNAO3cJYKNz+DJfHgg5XKNsA=
Subject key identifier:   33:08:EA:C9:53:2B:8F:7D:45:E3:BE:0C:49:E2:A4:84:D5:F3:BE:82
Certificate issuer:       /CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
Certificate serial:       019B7D5D033FE0A656E360D52C37E7CC2B92
Authority key identifier: 17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/MwjqyVMrj31F474MSeKkhNXzvoI.roa
Signing time:             Fri 02 Jan 2026 06:20:06 +0000
ROA not before:           Fri 02 Jan 2026 06:20:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15975
IP address blocks:        194.6.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5d:03:3f:e0:a6:56:e3:60:d5:2c:37:e7:cc:2b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
        Validity
            Not Before: Jan  2 06:20:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3308eac9532b8f7d45e3be0c49e2a484d5f3be82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1d:ba:24:97:82:3e:34:6c:de:d8:66:9b:f9:
                    64:80:58:80:b7:8d:f0:f5:6e:36:c5:64:82:09:4c:
                    03:35:49:a7:73:85:05:bf:d0:14:31:22:23:a1:e6:
                    6f:1e:45:0a:68:b6:d1:af:09:cf:00:20:6e:da:8c:
                    1e:5d:ec:e4:af:88:af:2a:81:d7:83:a4:39:ff:e6:
                    2f:46:7c:29:6b:5b:da:ea:a1:ac:ec:77:86:cf:c2:
                    63:09:e5:47:43:0a:f3:31:d7:b4:4e:93:c5:13:95:
                    f8:de:87:24:b0:e3:3b:b7:44:ba:3a:c6:af:05:23:
                    42:d2:b0:0b:ac:d9:ea:e0:23:71:e0:a8:90:0c:eb:
                    da:87:66:a2:e7:c4:f3:87:9f:ea:91:b7:b6:83:cd:
                    f0:05:a6:5f:f9:60:16:d9:c1:fa:ae:80:58:90:e6:
                    bb:6f:30:67:49:a7:cb:30:43:ca:99:44:b6:8b:ad:
                    7b:76:59:bb:b6:cb:95:6b:28:2e:8a:0f:e1:0e:fd:
                    02:f7:86:c5:30:01:a5:c9:64:3f:74:f4:e4:ea:91:
                    1a:4c:66:ff:a4:31:52:aa:6f:07:f1:53:8b:1b:15:
                    67:ea:2d:14:12:5f:0e:82:ff:aa:f8:02:88:d4:cb:
                    4c:e3:1c:f6:27:a8:fe:2e:3f:0f:11:cd:e8:e8:c4:
                    0d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:08:EA:C9:53:2B:8F:7D:45:E3:BE:0C:49:E2:A4:84:D5:F3:BE:82
            X509v3 Authority Key Identifier:
                keyid:17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/MwjqyVMrj31F474MSeKkhNXzvoI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.6.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:f3:a1:b5:06:9e:96:30:2c:f9:4b:6d:76:7d:cf:a2:63:ee:
         c3:fd:83:d4:c1:db:2d:86:17:65:6c:1e:c7:22:c1:80:f2:3a:
         0c:22:bc:f0:a2:3a:97:39:95:56:1a:ad:8a:15:81:6d:d5:c2:
         1e:2d:78:b3:e0:91:e9:2a:b4:13:a5:25:23:0a:de:2c:32:0d:
         df:f9:51:09:80:97:78:e5:7f:ae:14:0a:a8:7a:d2:fe:f4:61:
         8a:21:28:26:1b:42:01:69:19:6c:41:a6:90:c7:e9:e3:6b:37:
         4f:36:fa:27:19:8b:90:a9:3c:37:dd:cb:ca:c1:91:9e:dd:38:
         3a:69:84:fc:ed:72:26:a1:bc:03:40:ca:2c:58:94:41:89:62:
         2e:67:77:1c:85:37:36:db:86:7c:3a:0a:ca:5f:3b:24:2a:31:
         a4:16:bc:83:48:45:60:c7:ad:ff:91:38:a2:4d:cd:04:32:e1:
         c8:de:51:ae:72:b0:dd:ef:d9:78:df:40:c7:6e:1a:19:c9:9a:
         3d:0c:81:c2:2b:9b:61:9e:90:6e:c7:7e:a4:b3:c1:54:5f:3f:
         62:3a:3d:92:bd:70:23:78:c5:24:10:50:6f:68:d9:c9:7f:dd:
         84:76:28:ef:92:d8:35:17:a9:7d:e4:38:36:1b:75:0e:16:3f:
         04:51:fd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:32:37 2026 by rpki-client