This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/MozUM6k2gbKGmyuWcwcmxebhQno.roa
File:                     MozUM6k2gbKGmyuWcwcmxebhQno.roa (raw, json)
Hash identifier:          AgGoK2rZWkiMH9sIukOYbax2Y2ASEds9eHoxAP3Xf3E=
Subject key identifier:   32:8C:D4:33:A9:36:81:B2:86:9B:2B:96:73:07:26:C5:E6:E1:42:7A
Certificate issuer:       /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial:       019B7F1505E9DA9351F9635F84B129A3F419
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/MozUM6k2gbKGmyuWcwcmxebhQno.roa
Signing time:             Fri 02 Jan 2026 14:20:42 +0000
ROA not before:           Fri 02 Jan 2026 14:20:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     396356
IP address blocks:        94.131.19.0/24 maxlen: 24
                          185.39.31.0/24 maxlen: 24
                          2a06:fcc0:1::/48 maxlen: 48
                          2a06:fcc0:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:05:e9:da:93:51:f9:63:5f:84:b1:29:a3:f4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
        Validity
            Not Before: Jan  2 14:20:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=328cd433a93681b2869b2b96730726c5e6e1427a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f5:0e:52:31:44:db:cd:90:96:be:c6:88:5d:
                    ac:75:e1:33:b0:13:34:ff:e8:99:9b:19:4b:f7:63:
                    a7:3d:6c:a1:e2:c2:0c:24:6d:3d:b0:55:fb:34:8e:
                    38:dc:f5:e7:b0:5f:1f:ae:05:e5:58:31:c8:6f:ec:
                    14:99:49:9e:36:4c:36:66:0a:1b:c3:55:f9:dc:e4:
                    23:95:02:40:4e:7b:8a:ca:1c:03:99:b3:94:6b:5b:
                    ed:73:02:a7:a0:7c:a8:67:f7:de:88:a3:42:b9:be:
                    61:0b:27:57:42:e5:d2:68:f6:97:00:28:0b:c7:6a:
                    ff:b9:d2:24:15:18:9c:89:61:63:b3:e1:36:37:33:
                    e0:31:0d:80:81:a1:a4:b1:7c:d4:e3:de:d1:d4:45:
                    71:e5:b7:0a:7b:86:4a:43:3e:c3:85:9b:e9:0f:f8:
                    62:63:ee:13:d8:6d:e9:f2:fa:f2:4e:a1:dd:ff:12:
                    c5:63:d2:73:fd:88:5d:f2:30:b9:c3:d0:ec:df:f1:
                    85:6a:bb:7c:b8:d7:ef:df:d2:e2:a6:4a:95:2c:6f:
                    97:45:63:88:7a:93:94:eb:62:52:dd:e4:2d:26:be:
                    7b:7e:f3:1d:13:e8:fd:f7:68:04:70:b6:41:61:94:
                    20:e0:c5:f0:c3:a7:45:bb:20:a2:0e:b1:4a:3e:0d:
                    ec:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8C:D4:33:A9:36:81:B2:86:9B:2B:96:73:07:26:C5:E6:E1:42:7A
            X509v3 Authority Key Identifier:
                keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/MozUM6k2gbKGmyuWcwcmxebhQno.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.131.19.0/24
                  185.39.31.0/24
                IPv6:
                  2a06:fcc0:1::/48
                  2a06:fcc0:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:d2:d8:5a:fb:95:0f:6b:45:69:5e:ec:6a:7a:97:bd:05:8d:
         00:21:3b:18:11:3e:a2:34:4f:79:1f:a9:bf:05:b0:f6:ab:70:
         43:6d:4b:a6:b5:40:18:44:ef:2c:7d:03:c3:97:75:5d:d3:91:
         86:5d:e4:d4:d0:68:8a:49:ee:df:a0:a7:ef:a3:8f:7a:94:47:
         e9:1a:75:12:06:ad:5e:62:46:11:67:89:86:fc:9e:8c:19:b0:
         08:75:58:f5:ad:f6:7f:cf:61:9c:38:27:75:4c:28:8c:df:59:
         6a:f8:5e:52:f4:a6:65:33:bb:cf:2c:20:72:cf:23:83:35:86:
         a1:17:7c:be:23:10:8e:02:dc:6c:3c:77:e3:e3:c3:d7:32:8a:
         62:dc:44:d7:01:5e:55:e1:6f:82:8a:ae:38:f6:00:5b:ae:9c:
         61:21:0a:7d:cf:5f:30:85:96:4c:10:86:72:08:94:b4:29:16:
         03:35:4f:41:65:d1:14:31:2f:a5:45:a8:cd:5e:b5:1c:39:91:
         17:e1:a1:07:43:2c:0a:f3:56:06:c3:66:94:28:bf:ce:c1:93:
         43:d8:8e:40:82:bb:f7:e7:e3:f1:a8:74:25:d5:3b:67:76:34:
         c9:0c:52:29:0a:6e:b3:b9:46:1d:b3:61:6e:a2:1e:61:78:57:
         11:a1:9c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:02:48 2026 by rpki-client