This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/m_PpEyyAvYLnKjvZhlOvXK-I4ZQ.roa
File:                     m_PpEyyAvYLnKjvZhlOvXK-I4ZQ.roa (raw, json)
Hash identifier:          CGzyhARdUayk5Rcj/oSQUQybGpjh4LHVdpnFc+0u73Y=
Subject key identifier:   9B:F3:E9:13:2C:80:BD:82:E7:2A:3B:D9:86:53:AF:5C:AF:88:E1:94
Certificate issuer:       /CN=76f311ef1581a00e437cd704b6281ac8621afc56
Certificate serial:       019B7F822294C8EE37465847D97C265EE88A
Authority key identifier: 76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/m_PpEyyAvYLnKjvZhlOvXK-I4ZQ.roa
Signing time:             Fri 02 Jan 2026 16:19:53 +0000
ROA not before:           Fri 02 Jan 2026 16:19:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     22634
IP address blocks:        2a04:7141::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:82:22:94:c8:ee:37:46:58:47:d9:7c:26:5e:e8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f311ef1581a00e437cd704b6281ac8621afc56
        Validity
            Not Before: Jan  2 16:19:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9bf3e9132c80bd82e72a3bd98653af5caf88e194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cd:2f:07:7d:5f:6f:26:44:6b:32:99:c3:69:
                    6d:b0:3e:67:b5:aa:33:5f:f2:9c:ef:2d:3a:89:32:
                    54:73:75:34:58:ac:e4:97:13:a9:00:50:29:96:d4:
                    f5:94:ce:8c:bc:b9:62:f6:7a:25:d1:40:8b:c4:7b:
                    be:e9:d1:aa:59:fa:22:05:a1:c4:31:a9:23:de:3d:
                    9d:3f:2d:bd:41:7f:13:46:df:0a:c5:5d:c3:6f:88:
                    51:3a:ea:f4:e3:55:1f:e0:77:b6:db:7f:67:54:4b:
                    a1:07:e1:0e:a2:c6:9e:ec:35:59:8f:22:df:6f:03:
                    f9:34:dc:62:43:06:14:ae:db:05:7d:ca:0e:69:9d:
                    32:dc:fa:bc:11:2d:c4:b4:f3:2e:33:62:07:7a:75:
                    3b:70:7f:89:5d:27:73:8d:76:06:b4:28:67:47:db:
                    63:6e:27:c8:c4:22:88:35:45:e3:c8:8e:46:ea:67:
                    f5:c7:c2:85:5d:a8:d4:1c:2b:0b:4c:9e:24:04:1f:
                    13:43:22:b7:0b:92:06:aa:bc:52:e8:17:33:0d:3d:
                    e7:f9:c1:d9:3c:20:38:db:5f:6f:0e:2e:9b:29:b9:
                    bd:62:cb:38:09:cf:59:5d:c5:0f:26:7d:cc:83:ca:
                    4e:0a:76:30:a6:7b:dc:9b:c1:c2:11:2e:03:3b:cf:
                    07:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F3:E9:13:2C:80:BD:82:E7:2A:3B:D9:86:53:AF:5C:AF:88:E1:94
            X509v3 Authority Key Identifier:
                keyid:76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/m_PpEyyAvYLnKjvZhlOvXK-I4ZQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:7141::/36

    Signature Algorithm: sha256WithRSAEncryption
         16:ae:a7:9d:f9:e2:44:2a:46:7b:b0:d3:94:5d:9f:30:98:a5:
         17:88:3f:53:56:bd:41:d4:f8:b1:9d:14:d1:01:f6:4a:f0:a4:
         90:83:5b:98:37:50:58:9a:d9:c9:1e:06:9b:15:81:7f:18:57:
         e1:24:9d:2f:b7:c4:9e:c2:65:aa:8b:de:8f:91:bf:ba:46:e2:
         d8:12:b8:27:c6:a6:4b:c4:ce:de:94:33:f3:a1:59:ee:90:10:
         63:9c:e1:de:50:dc:81:28:4b:46:56:db:17:1b:42:09:65:f8:
         34:62:1e:30:8a:e9:9a:88:6b:c0:7a:7b:5d:21:69:bf:b0:88:
         b1:2a:41:d6:97:dc:57:a4:77:de:cb:45:df:67:cc:2f:3b:f7:
         a0:7a:73:ae:6c:60:5b:5b:cd:1b:5e:4a:ec:7d:aa:62:e2:62:
         2e:bd:be:f9:62:2a:38:94:f2:32:ae:62:6c:d0:f3:86:2d:0f:
         5e:ce:c6:d2:4b:be:eb:61:ba:6d:50:b4:a7:de:7d:5b:e7:f8:
         b8:e7:00:b6:5d:33:dc:b4:dd:c0:8f:27:6f:2c:d7:59:ff:d5:
         73:f4:3c:45:95:ba:13:c3:1a:d9:bd:12:6f:75:5e:33:cc:82:
         7a:22:57:db:9c:f1:0e:55:16:26:95:a5:32:0f:7d:1e:5c:fa:
         10:e8:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:31:46 2026 by rpki-client