This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/MMEv-JesdO5NLERLKIJQRPK7-Cw.roa
File:                     MMEv-JesdO5NLERLKIJQRPK7-Cw.roa (raw, json)
Hash identifier:          HWIc+1cV2zclm+w3eWB4Yypu67JMPPnUsP0/278PUqM=
Subject key identifier:   30:C1:2F:F8:97:AC:74:EE:4D:2C:44:4B:28:82:50:44:F2:BB:F8:2C
Certificate issuer:       /CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Certificate serial:       019B7A5A7BF193F6BEA1D238B25E17085E04
Authority key identifier: 83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/MMEv-JesdO5NLERLKIJQRPK7-Cw.roa
Signing time:             Thu 01 Jan 2026 16:18:28 +0000
ROA not before:           Thu 01 Jan 2026 16:18:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205111
IP address blocks:        91.103.153.0/24 maxlen: 24
                          91.103.155.0/24 maxlen: 24
                          144.89.64.0/23 maxlen: 23
                          144.89.64.0/24 maxlen: 24
                          144.89.65.0/24 maxlen: 24
                          144.89.66.0/23 maxlen: 23
                          144.89.66.0/24 maxlen: 24
                          144.89.67.0/24 maxlen: 24
                          185.230.212.0/23 maxlen: 23
                          185.230.212.0/24 maxlen: 24
                          185.230.213.0/24 maxlen: 24
                          185.230.214.0/23 maxlen: 23
                          185.230.214.0/24 maxlen: 24
                          185.230.215.0/24 maxlen: 24
                          199.67.72.0/23 maxlen: 23
                          199.67.74.0/24 maxlen: 24
                          199.67.75.0/24 maxlen: 24
                          199.67.88.0/23 maxlen: 23
                          199.67.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:7b:f1:93:f6:be:a1:d2:38:b2:5e:17:08:5e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83f8fd7493a2fe056222db41ed693083b50eccfb
        Validity
            Not Before: Jan  1 16:18:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=30c12ff897ac74ee4d2c444b28825044f2bbf82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:91:22:10:ce:ba:77:ea:8a:28:e0:a1:73:22:
                    bb:e8:e6:6a:9e:06:9e:22:ac:ca:d6:48:1d:2a:f7:
                    4b:f9:ff:85:28:2f:a9:66:14:91:b0:a8:21:a4:27:
                    d3:58:19:fb:54:91:1b:d5:12:45:c7:45:8b:e1:53:
                    89:54:fb:87:c2:f9:60:20:ed:23:39:bc:7a:d1:5f:
                    80:93:ec:99:00:d9:cd:4c:f0:53:28:4e:8f:d3:0f:
                    ed:a8:9e:73:09:ae:40:5c:e4:e5:8d:ea:c3:32:76:
                    da:b4:e8:d5:0a:89:0c:62:18:e9:53:cf:cd:29:66:
                    ba:ab:9b:07:f1:e8:2e:99:56:68:9b:24:64:6f:f3:
                    21:52:93:bc:d7:b7:cf:9b:ad:f6:68:56:50:bf:82:
                    a9:20:d3:90:9c:1c:fb:70:30:4b:62:e2:b4:82:84:
                    d3:43:0e:cf:ea:32:d1:81:22:61:79:cd:02:90:6b:
                    55:79:5c:38:c5:c6:ce:d8:8c:04:41:13:3b:f3:ca:
                    25:3a:23:e2:03:55:63:5a:32:c0:0a:5e:b6:71:2b:
                    7f:8c:66:37:03:4a:04:62:ab:67:06:38:bb:78:a0:
                    a5:d8:67:88:7b:dc:ef:00:96:6e:31:19:14:7e:86:
                    93:19:15:5f:be:d8:42:12:7b:e3:72:63:fa:32:8d:
                    5b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C1:2F:F8:97:AC:74:EE:4D:2C:44:4B:28:82:50:44:F2:BB:F8:2C
            X509v3 Authority Key Identifier:
                keyid:83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/MMEv-JesdO5NLERLKIJQRPK7-Cw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.103.153.0/24
                  91.103.155.0/24
                  144.89.64.0/22
                  185.230.212.0/22
                  199.67.72.0/22
                  199.67.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:ea:4d:99:1c:63:26:59:21:90:0b:7a:33:fd:b9:3a:f6:73:
         a3:64:c6:c6:25:9e:82:95:9b:9c:6c:b7:ff:f0:1c:bb:fd:0d:
         14:f7:6f:81:f7:20:98:34:17:63:b9:ab:7e:47:c5:07:a0:9d:
         9e:f9:fb:a1:84:e8:56:9a:3a:1b:d6:f4:94:9f:e2:76:be:03:
         20:b9:b3:94:5b:5b:8d:bf:55:a1:35:62:73:31:28:0e:52:bc:
         20:08:13:62:05:cd:93:aa:03:e2:6b:e5:df:68:e0:90:79:e6:
         a5:2d:af:79:12:42:b0:70:58:22:1b:dd:6b:aa:fb:1b:b7:e7:
         35:5f:4f:0e:3a:b6:04:90:a3:f2:14:f6:a8:e2:24:ba:23:57:
         ca:f3:29:d7:0a:61:15:ca:b8:29:f1:1c:42:17:f7:aa:7e:18:
         5e:46:8a:ce:07:a7:f7:83:ff:e3:af:7d:d1:9a:fa:98:16:65:
         c5:39:9a:fb:b3:0a:f5:9f:a4:fa:fb:cd:20:dc:2c:d9:ae:a6:
         f2:62:b1:70:7c:b5:89:1d:b8:91:2c:5b:32:ea:c6:15:34:a6:
         48:36:1e:2d:e9:f6:a1:9b:32:c9:b2:3a:91:2f:0c:42:b6:88:
         29:48:39:f5:a1:6f:83:04:41:6b:01:f2:2d:7e:3b:46:b2:c6:
         93:b9:05:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:18:52 2026 by rpki-client