This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/M-xhOdJhOt1IVpAo6jVDD6VitCU.roa
File:                     M-xhOdJhOt1IVpAo6jVDD6VitCU.roa (raw, json)
Hash identifier:          waOg7nDr7fSZGGvzIuGjBg6JCLXByvSxzjfTgEkG9Iw=
Subject key identifier:   33:EC:61:39:D2:61:3A:DD:48:56:90:28:EA:35:43:0F:A5:62:B4:25
Certificate issuer:       /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial:       019B78A25EBD7C3D5F4CF35ECB249677612C
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/M-xhOdJhOt1IVpAo6jVDD6VitCU.roa
Signing time:             Thu 01 Jan 2026 08:17:45 +0000
ROA not before:           Thu 01 Jan 2026 08:17:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200260
IP address blocks:        45.92.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:5e:bd:7c:3d:5f:4c:f3:5e:cb:24:96:77:61:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
        Validity
            Not Before: Jan  1 08:17:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=33ec6139d2613add48569028ea35430fa562b425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:8d:d5:80:fc:f3:d1:4f:00:31:a6:8f:4b:
                    0c:45:93:4c:f0:b8:70:13:6d:bc:8c:a6:03:92:87:
                    29:e0:51:3a:66:e4:9c:6e:d8:4c:19:3f:34:d2:5c:
                    48:09:b6:08:c1:bb:e5:c3:5f:37:38:fd:43:2f:95:
                    03:3e:10:44:f5:4a:67:98:c6:ac:a4:0a:88:40:05:
                    c0:84:60:e9:cb:f1:cd:fb:f4:74:43:84:54:ab:84:
                    02:fa:ec:62:78:42:11:15:5b:bb:a7:20:51:9b:d3:
                    32:7a:14:34:7c:b2:dd:b2:8f:50:00:fd:5f:d2:21:
                    22:d1:1e:ef:35:fb:e5:b4:a7:6e:5e:87:e4:7c:a7:
                    46:f0:b1:a8:94:5c:0a:b0:c8:8e:92:45:90:cd:d8:
                    f7:6e:35:0c:35:9f:89:91:dc:7e:e3:b9:74:83:3d:
                    25:e5:9e:c5:66:29:84:5d:bb:1f:ef:da:8a:92:20:
                    a6:65:bf:77:7d:13:19:74:44:2d:dc:25:76:7d:6b:
                    8a:55:e4:dc:7a:ae:a6:09:fe:27:a8:0e:dc:20:74:
                    62:ff:22:22:03:8f:78:8c:a2:cf:7f:3f:dd:f4:25:
                    27:f5:c0:9e:18:9c:9a:1f:04:f2:ee:79:00:10:a7:
                    3f:6b:30:04:94:fa:04:79:71:18:7f:86:47:c1:6f:
                    41:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EC:61:39:D2:61:3A:DD:48:56:90:28:EA:35:43:0F:A5:62:B4:25
            X509v3 Authority Key Identifier:
                keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/M-xhOdJhOt1IVpAo6jVDD6VitCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:de:f9:1f:95:4a:31:1b:04:5c:7a:8e:6b:c2:f0:e0:b5:92:
         07:b6:70:73:07:62:2e:f7:11:cb:63:bb:92:2e:7d:c4:04:61:
         fa:3a:27:6e:16:fc:1f:68:4e:b3:10:87:dd:ed:4b:e6:2f:27:
         35:eb:ba:fc:63:85:6b:e0:56:d4:ab:4d:1f:d9:8c:8e:2b:0d:
         f4:a5:7c:31:fe:3e:95:0b:92:50:37:03:ba:c5:7f:89:21:65:
         ba:a9:60:04:00:e6:b3:9c:4a:ae:da:71:27:62:8d:8b:d4:01:
         a5:e7:ef:4b:3c:d5:e3:82:12:21:5d:d5:0b:ae:76:30:4e:c3:
         82:c5:8c:ff:0c:24:60:55:95:0f:93:8b:a9:e1:20:26:b5:4f:
         57:29:9a:31:f4:32:b0:4d:6a:3e:3d:75:57:30:9d:85:9f:35:
         11:6b:aa:43:9a:bd:ec:83:b3:74:96:6a:3c:65:0e:62:de:1d:
         4f:33:0e:43:62:38:f9:a8:39:84:fd:25:21:64:e5:f6:c9:ef:
         07:39:5b:8c:5c:05:45:3f:bb:7d:e1:58:a9:03:dd:02:27:b2:
         40:21:39:be:d9:f5:74:59:03:f0:b2:71:01:f9:06:47:75:e4:
         67:76:5c:91:f5:1d:8c:56:ee:d6:bd:c5:97:d9:f7:5a:16:08:
         44:be:df:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:37:56 2026 by rpki-client