This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/m2i-BaK0_DycLS1ZeqGmujDpAeU.roa
File:                     m2i-BaK0_DycLS1ZeqGmujDpAeU.roa (raw, json)
Hash identifier:          xXglruO0PgwUL+4y9gXecKeVtKpn0I9Hxs9YirrslPk=
Subject key identifier:   9B:68:BE:05:A2:B4:FC:3C:9C:2D:2D:59:7A:A1:A6:BA:30:E9:01:E5
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C788BF8FB2C8FE1B1EE43A7E99D8FE
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/m2i-BaK0_DycLS1ZeqGmujDpAeU.roa
Signing time:             Thu 01 Jan 2026 04:18:43 +0000
ROA not before:           Thu 01 Jan 2026 04:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200670
IP address blocks:        194.183.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:88:bf:8f:b2:c8:fe:1b:1e:e4:3a:7e:99:d8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9b68be05a2b4fc3c9c2d2d597aa1a6ba30e901e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:58:a8:7c:db:77:8f:af:ac:60:f0:69:51:b8:
                    01:c8:ae:be:64:8b:ea:80:63:f0:6d:9a:65:14:99:
                    ff:09:02:2b:9d:37:6a:e9:96:82:eb:31:71:83:b5:
                    31:78:01:aa:e3:a5:47:42:fe:0e:72:49:f3:e0:be:
                    8e:f4:a1:0c:d2:ef:9e:85:1b:8d:81:89:47:e6:cf:
                    7d:8a:74:e1:5c:cb:5c:82:6b:62:22:46:f1:2e:0d:
                    fe:d3:45:ec:66:ca:aa:8a:6b:c0:c3:75:d7:b2:49:
                    c3:af:45:ce:a8:fb:a1:40:ec:53:93:82:6d:fd:a2:
                    cf:25:4f:08:1a:84:ca:ce:6d:63:38:1f:a7:1c:52:
                    9e:77:bb:ec:dc:70:6b:67:7b:ee:c5:a3:5a:e4:e7:
                    11:04:55:69:15:b8:65:11:8e:d3:ed:63:e0:3f:4d:
                    5a:ae:e0:67:70:60:4c:2e:61:db:26:c2:2f:8c:15:
                    b4:5d:93:c2:68:07:3c:f9:ec:11:4a:fd:32:6e:2f:
                    a2:9a:64:cf:b6:0c:d4:da:70:37:c8:75:c7:d2:55:
                    2a:ab:48:1f:a5:1a:b9:48:28:ff:3b:1f:2e:9f:4c:
                    8b:08:d3:1f:33:10:92:4d:cc:28:00:31:25:37:76:
                    17:65:ff:a3:51:cf:8c:49:cc:fd:97:36:19:4f:4b:
                    b1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:68:BE:05:A2:B4:FC:3C:9C:2D:2D:59:7A:A1:A6:BA:30:E9:01:E5
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/m2i-BaK0_DycLS1ZeqGmujDpAeU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.183.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:28:df:a8:b0:32:c7:07:55:3e:58:8f:45:d7:14:3e:05:3b:
         f1:a2:c1:91:26:b8:be:69:3a:d8:26:94:74:82:7a:3b:e0:da:
         16:6b:ce:f2:28:d8:f3:78:41:c6:0f:ab:c9:1d:af:90:be:8b:
         df:fd:0a:79:1c:c0:0f:8c:31:51:60:39:73:3c:35:89:66:ff:
         66:f2:b4:f5:f3:08:da:ec:e9:cc:db:20:06:3f:8f:4c:07:ba:
         10:e5:9d:8e:63:43:6f:fb:e8:0b:16:be:e5:57:1f:46:52:79:
         0b:c4:a1:30:f2:38:03:9f:d1:a1:1d:f8:a9:5e:c5:aa:0e:5d:
         5c:da:51:83:04:65:85:e2:6e:6f:7d:3c:78:23:1c:e1:2e:f5:
         23:a0:28:ee:b9:cc:04:40:90:d9:b9:41:a3:4f:00:a7:9a:0d:
         76:6a:d2:19:b7:f8:66:d9:50:21:c9:ec:87:06:53:b4:33:17:
         1c:51:b3:85:c2:81:b9:11:cf:01:25:60:85:ce:4d:e7:03:ae:
         32:03:49:d7:11:ab:f4:03:47:7b:ea:f4:92:38:73:aa:71:91:
         16:05:e4:d4:c9:a1:2e:4a:d3:1b:17:65:49:18:03:74:de:00:
         3f:7e:15:9a:2a:5b:85:9c:5a:77:57:99:f0:21:12:61:cd:fd:
         8d:7a:b9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:48:37 2026 by rpki-client