This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/MiyjkWZNBompZrexxHo-MUkGnRA.roa
File:                     MiyjkWZNBompZrexxHo-MUkGnRA.roa (raw, json)
Hash identifier:          t7k5lsVE2BWk6+eYfsGltysd4T9dHD1aOWcqw9rsQqk=
Subject key identifier:   32:2C:A3:91:66:4D:06:89:A9:66:B7:B1:C4:7A:3E:31:49:06:9D:10
Certificate issuer:       /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial:       019BE079656CBF3976E9B1AD405973F1CC3F
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/MiyjkWZNBompZrexxHo-MUkGnRA.roa
Signing time:             Wed 21 Jan 2026 12:13:30 +0000
ROA not before:           Wed 21 Jan 2026 12:13:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215023
IP address blocks:        2a14:c380:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e0:79:65:6c:bf:39:76:e9:b1:ad:40:59:73:f1:cc:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
        Validity
            Not Before: Jan 21 12:13:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=322ca391664d0689a966b7b1c47a3e3149069d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:90:e3:41:56:a7:c6:71:40:18:5d:12:02:2b:
                    54:c9:20:2d:bf:16:73:fb:f0:57:62:77:10:31:8a:
                    d4:02:dc:cc:50:5c:a6:3f:e3:92:e4:a0:4b:dc:6f:
                    96:9a:dd:22:da:8e:d0:88:79:72:4a:1e:a5:33:94:
                    53:45:24:a9:0e:ff:7e:a5:29:24:fa:ae:ca:00:a2:
                    00:db:1c:c7:f3:3f:fd:1d:f2:78:30:91:0b:7f:2d:
                    03:7e:eb:8e:88:22:ff:2c:10:99:11:7e:0a:13:73:
                    8a:38:31:1a:b8:5d:8b:bf:a4:1b:61:07:5a:81:55:
                    eb:9c:ed:93:d7:28:5b:6a:55:90:d9:ff:52:91:c0:
                    53:11:27:3c:a1:a5:25:d5:a7:3a:03:87:5a:34:c6:
                    c6:1c:a7:9c:8c:b0:1d:85:2d:31:5f:67:fb:a8:9e:
                    2d:ba:bd:ab:87:5c:7c:67:47:48:4a:ee:96:a8:06:
                    70:72:97:ee:11:b5:a8:14:df:a3:b7:79:53:91:b2:
                    10:7a:1f:dd:b0:15:c2:ab:9a:c1:7b:7c:f7:51:06:
                    91:08:3b:c7:49:75:5e:af:2f:82:55:ae:36:ba:76:
                    cc:42:e8:d6:c7:58:4e:8f:21:c2:47:4f:9a:ed:28:
                    26:7f:83:b8:36:22:79:05:17:90:42:aa:3b:c7:1b:
                    47:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2C:A3:91:66:4D:06:89:A9:66:B7:B1:C4:7A:3E:31:49:06:9D:10
            X509v3 Authority Key Identifier:
                keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/MiyjkWZNBompZrexxHo-MUkGnRA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:c380:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:b8:e0:33:3e:5f:4d:9b:5d:1c:8a:76:7e:ca:b4:77:d5:b7:
         3e:25:21:57:b7:d3:f3:39:b6:11:84:db:eb:12:78:3a:ef:00:
         f6:1b:21:35:3d:60:c3:8e:b2:a9:72:d7:f5:2d:0f:f7:44:cc:
         ec:03:a7:ff:11:57:07:01:91:bc:c7:b8:12:8b:f4:f7:a8:af:
         f8:31:ce:8b:29:62:f1:e8:1f:92:18:79:c5:e5:03:fc:3f:e9:
         d2:4f:eb:50:66:01:ff:c4:a6:d7:8f:84:08:73:69:2e:ae:d9:
         51:50:e9:8d:ee:4f:9f:31:88:eb:ca:b0:52:3c:9b:f9:0c:d0:
         8e:ec:fd:66:99:ef:14:58:83:cd:a8:93:0e:f0:e8:81:8c:2a:
         78:48:b5:e3:a6:b7:2d:b2:58:d9:c6:3b:9e:36:8d:ba:55:4c:
         54:40:31:7d:9a:5a:b2:15:e9:1b:7e:b0:ee:43:d4:3f:51:ba:
         86:c0:72:66:90:a1:dc:37:b1:3e:bd:ec:e6:c4:a5:07:fd:c5:
         a3:d4:f9:c2:c4:53:34:87:7f:16:2b:da:09:6c:25:bd:df:2a:
         29:0d:98:30:fe:3d:41:46:e3:5d:86:e0:2d:15:39:d5:d6:48:
         2c:3e:07:48:68:b4:e4:e3:99:f1:fd:31:4f:77:9d:32:4b:a6:
         c9:ad:45:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:17:47 2026 by rpki-client