This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/Mhow_zubVnvAcwQbBcXt37SkVbo.roa
File:                     Mhow_zubVnvAcwQbBcXt37SkVbo.roa (raw, json)
Hash identifier:          6hC28liE87/PAEstEfDeR9v3wr68y7o5n3aUzo7i9jo=
Subject key identifier:   32:1A:30:FF:3B:9B:56:7B:C0:73:04:1B:05:C5:ED:DF:B4:A4:55:BA
Certificate issuer:       /CN=f7aa039b886b226578bdb6a42781bf59044bb138
Certificate serial:       019B7E380DFE9445C4A7BD2BD43852A2B2A9
Authority key identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/Mhow_zubVnvAcwQbBcXt37SkVbo.roa
Signing time:             Fri 02 Jan 2026 10:19:21 +0000
ROA not before:           Fri 02 Jan 2026 10:19:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31191
IP address blocks:        84.47.137.0/24 maxlen: 25
                          84.47.188.0/24 maxlen: 25
                          213.135.68.0/24 maxlen: 25
                          213.135.75.0/24 maxlen: 25
                          213.135.76.0/24 maxlen: 25
                          213.135.78.0/24 maxlen: 25
                          213.135.93.0/24 maxlen: 25
                          213.208.185.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:0d:fe:94:45:c4:a7:bd:2b:d4:38:52:a2:b2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa039b886b226578bdb6a42781bf59044bb138
        Validity
            Not Before: Jan  2 10:19:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=321a30ff3b9b567bc073041b05c5eddfb4a455ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2a:a6:be:71:a7:dd:86:1e:ac:b7:5d:24:81:
                    88:4e:03:58:7b:8b:63:5e:fa:f2:f3:ea:1b:4a:84:
                    70:b3:35:31:8e:49:2e:5a:82:0b:6d:63:dd:9a:37:
                    c1:f4:bf:7a:7d:d8:e8:50:8b:f9:d9:53:b0:8f:e8:
                    d3:65:20:d8:27:2c:a1:16:76:81:d3:13:ee:61:0d:
                    a5:f9:f9:88:eb:0c:6e:c3:c9:9b:ff:2c:1a:99:a2:
                    cc:3b:aa:f6:08:e0:89:0f:e3:17:60:b1:14:a2:ca:
                    19:48:aa:35:91:54:79:43:94:5a:01:09:91:f4:c8:
                    ca:b8:aa:08:43:5f:6d:53:67:cc:be:c4:c4:a2:7e:
                    6e:95:a1:3e:0d:b9:6a:68:3f:25:03:42:4b:3a:de:
                    d6:0e:2a:01:6a:57:e2:48:5e:25:c1:7c:29:cd:de:
                    c3:47:f5:ae:de:82:4d:61:bf:9f:0e:78:04:00:93:
                    41:30:69:05:ec:e0:ed:da:5f:d4:f1:af:00:3c:b2:
                    ac:d3:09:47:41:37:3e:1a:e8:5b:56:d9:5c:8c:92:
                    58:33:ac:5a:f3:b5:6b:08:5b:94:f4:f8:1b:03:07:
                    a0:7f:d2:6a:e4:e4:f0:da:50:da:eb:c6:f3:76:bf:
                    a7:3a:a1:78:a1:82:f3:eb:f6:fa:e8:ec:8e:22:6b:
                    ff:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1A:30:FF:3B:9B:56:7B:C0:73:04:1B:05:C5:ED:DF:B4:A4:55:BA
            X509v3 Authority Key Identifier:
                keyid:F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/Mhow_zubVnvAcwQbBcXt37SkVbo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.47.137.0/24
                  84.47.188.0/24
                  213.135.68.0/24
                  213.135.75.0-213.135.76.255
                  213.135.78.0/24
                  213.135.93.0/24
                  213.208.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:7b:04:1a:bd:39:b2:bc:5c:a7:2e:33:74:94:4a:c7:01:2a:
         e0:11:52:9d:18:17:78:51:78:28:26:b2:3d:ae:22:84:9c:8b:
         bd:6e:6b:2b:27:a6:30:5b:ce:03:fc:54:d7:8d:50:30:df:77:
         50:ee:84:17:d6:ab:05:fc:a2:7c:db:7e:ea:ab:a3:b7:19:bd:
         f1:89:04:71:c5:54:15:0e:82:2e:d1:8d:1d:9c:d7:78:41:60:
         83:d5:72:eb:1a:24:ed:15:0f:60:a4:f3:a6:1e:25:f2:ab:3a:
         99:e6:53:80:ef:55:5b:08:da:a7:eb:54:07:bc:52:61:b0:44:
         5a:3f:18:02:d9:da:84:0d:34:34:a0:81:b1:b3:6a:ad:68:e3:
         85:b2:ae:ca:0d:a9:35:00:ed:0a:cf:1f:b1:16:9a:a7:94:3c:
         19:ea:8d:9a:e8:32:33:91:b9:23:c0:ef:bd:4c:34:43:37:8d:
         3c:d2:01:5a:35:77:e7:c5:82:6f:b9:46:e6:d0:f9:e6:51:33:
         62:a6:7d:07:09:3c:6e:78:60:2a:8c:93:43:d1:58:04:3c:e6:
         cb:c3:be:55:ae:60:a1:dc:74:45:da:3e:45:f4:6f:bb:f7:96:
         d1:f7:c6:81:1e:3a:bf:b1:20:79:3c:f1:0f:26:a6:21:71:45:
         9e:67:4e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:15:03 2026 by rpki-client