This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/MuR4aEGFWe7wl3Vh052cNYMzM2g.roa
File:                     MuR4aEGFWe7wl3Vh052cNYMzM2g.roa (raw, json)
Hash identifier:          eJ30VAn7X7leuPQPqFb0aOSFx4e32kdxI4xgek8Nhr0=
Subject key identifier:   32:E4:78:68:41:85:59:EE:F0:97:75:61:D3:9D:9C:35:83:33:33:68
Certificate issuer:       /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial:       019B78A30AD8B51EC68DD8F7A09C80250BD4
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/MuR4aEGFWe7wl3Vh052cNYMzM2g.roa
Signing time:             Thu 01 Jan 2026 08:18:29 +0000
ROA not before:           Thu 01 Jan 2026 08:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207353
IP address blocks:        77.220.217.0/24 maxlen: 24
                          77.220.219.0/24 maxlen: 24
                          77.220.220.0/24 maxlen: 24
                          77.220.221.0/24 maxlen: 24
                          77.220.222.0/24 maxlen: 24
                          89.248.230.0/24 maxlen: 24
                          185.62.100.0/24 maxlen: 24
                          193.243.161.0/24 maxlen: 24
                          195.246.246.0/24 maxlen: 24
                          195.246.247.0/24 maxlen: 24
                          195.246.248.0/24 maxlen: 24
                          195.246.249.0/24 maxlen: 24
                          217.199.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:0a:d8:b5:1e:c6:8d:d8:f7:a0:9c:80:25:0b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
        Validity
            Not Before: Jan  1 08:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=32e47868418559eef0977561d39d9c3583333368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:28:39:96:1a:79:be:73:7c:ef:64:ab:f4:
                    a2:0b:8b:59:34:54:e8:84:a5:47:0b:1a:38:a1:31:
                    24:8a:07:d0:7b:26:6c:84:6c:9a:b1:79:eb:d5:e3:
                    22:0c:f1:7a:d8:63:61:e1:c0:4a:ef:8a:be:bf:3b:
                    a5:9e:81:ba:65:90:ff:f7:99:58:39:34:d4:9e:3b:
                    c5:48:31:a6:23:45:ee:9c:75:b4:7a:73:96:4b:b6:
                    9e:b6:a9:49:3c:1b:5e:8f:c5:32:e8:c3:f8:4c:f0:
                    b1:93:a5:1a:52:89:a2:49:5a:85:b0:39:4d:06:35:
                    4d:68:47:e9:9a:41:26:b8:2f:3b:c0:c9:03:36:a9:
                    1e:d0:dc:77:2b:46:38:b0:57:08:08:51:c8:f8:28:
                    d3:55:45:04:c6:98:a9:e5:71:54:0e:cb:a9:95:ad:
                    26:46:42:ab:3f:e8:75:0f:c9:de:82:eb:a1:90:c5:
                    a9:64:02:e6:b8:60:0b:17:12:17:5f:ea:4f:50:19:
                    d9:36:ec:94:1c:4b:49:b7:b1:1f:bc:9e:31:50:4d:
                    7e:cc:d3:e9:34:96:19:53:17:a0:84:1d:21:1a:be:
                    1c:b6:84:76:d0:36:dc:85:bb:0f:c2:ab:d1:53:64:
                    8f:3c:7a:65:9b:39:7e:2a:63:ab:4e:cd:50:5c:de:
                    30:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E4:78:68:41:85:59:EE:F0:97:75:61:D3:9D:9C:35:83:33:33:68
            X509v3 Authority Key Identifier:
                keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/MuR4aEGFWe7wl3Vh052cNYMzM2g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.220.217.0/24
                  77.220.219.0-77.220.222.255
                  89.248.230.0/24
                  185.62.100.0/24
                  193.243.161.0/24
                  195.246.246.0-195.246.249.255
                  217.199.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:d1:54:f3:9d:f1:34:01:c6:76:fc:23:85:d7:7d:fa:ec:68:
         57:c9:20:2b:6c:5a:f0:88:dc:ed:e0:d9:1d:6d:04:87:d6:44:
         e8:44:75:8c:7d:0e:b6:ed:fa:4a:6f:5a:3b:68:f8:56:59:e7:
         c8:81:e6:bc:8e:db:37:f0:a5:14:34:21:b2:40:6b:84:3c:bf:
         b3:40:e7:cd:83:7b:71:3d:a0:3e:c3:f7:b5:b4:92:2f:41:7f:
         1a:78:ba:79:13:35:e4:2d:c2:b1:a1:3e:16:e9:36:94:2a:c2:
         17:56:5e:90:14:f4:ad:d5:8d:ba:51:3e:48:d9:12:a1:cb:4f:
         f1:5f:2a:17:72:ba:11:fe:48:e1:e4:2c:30:3e:60:1b:c3:a3:
         54:99:f3:fe:5d:79:af:d9:40:55:a6:59:4d:37:0a:dc:db:9c:
         f3:47:8c:83:9c:51:b3:99:2e:21:2a:50:84:e7:1a:28:f7:96:
         8a:08:c4:64:2f:80:84:8e:1c:fe:a4:0f:7d:52:36:49:09:f0:
         a2:8b:a3:a8:d1:f7:28:3f:88:32:61:a1:67:2f:38:3a:eb:40:
         0f:93:98:e3:6b:ed:85:41:07:66:5c:c7:a1:1f:7d:9b:aa:e8:
         a3:aa:03:64:8c:b7:93:be:5f:ce:9c:3e:ff:e7:86:01:45:22:
         4a:48:19:fd
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAZt4owrYtR7Gjdj3oJyAJQvUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNzNkOTQ1M2ZiZWRmYjgwYzQ1NDNiYjUyOWZjMzMwYzFm
OGMxY2UwHhcNMjYwMTAxMDgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmU0Nzg2ODQxODU1OWVlZjA5Nzc1NjFkMzlkOWMzNTgzMzMzMzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHwoOZYaeb5zfO9kq/SiC4tZNFTo
hKVHCxo4oTEkigfQeyZshGyasXnr1eMiDPF62GNh4cBK74q+vzulnoG6ZZD/95lY
OTTUnjvFSDGmI0XunHW0enOWS7aetqlJPBtej8Uy6MP4TPCxk6UaUomiSVqFsDlN
BjVNaEfpmkEmuC87wMkDNqke0Nx3K0Y4sFcICFHI+CjTVUUExpip5XFUDsupla0m
RkKrP+h1D8neguuhkMWpZALmuGALFxIXX+pPUBnZNuyUHEtJt7EfvJ4xUE1+zNPp
NJYZUxeghB0hGr4ctoR20DbchbsPwqvRU2SPPHplmzl+KmOrTs1QXN4wQQIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFDLkeGhBhVnu8Jd1YdOdnDWDMzNoMB8GA1UdIwQY
MBaAFJxz2UU/vt+4DEVDu1KfwzDB+MHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEt
YzQ3ZTE4ZGYwMzcxLzEvTXVSNGFFR0ZXZTd3bDNWaDA1MmNOWU16TTJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEtYzQ3ZTE4ZGYwMzcx
LzEvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQATdzZMAwD
BABN3NsDBABN3N4DBABZ+OYDBAC5PmQDBADB86EwDAMEAcP29gMEAcP2+AMEANnH
1TANBgkqhkiG9w0BAQsFAAOCAQEAX9FU853xNAHGdvwjhdd9+uxoV8kgK2xa8Ijc
7eDZHW0Eh9ZE6ER1jH0Otu36Sm9aO2j4VlnnyIHmvI7bN/ClFDQhskBrhDy/s0Dn
zYN7cT2gPsP3tbSSL0F/Gni6eRM15C3CsaE+Fuk2lCrCF1ZekBT0rdWNulE+SNkS
octP8V8qF3K6Ef5I4eQsMD5gG8OjVJnz/l15r9lAVaZZTTcK3Nuc80eMg5xRs5ku
ISpQhOcaKPeWigjEZC+AhI4c/qQPfVI2SQnwooujqNH3KD+IMmGhZy84OutAD5OY
42vthUEHZlzHoR99m6roo6oDZIy3k75fzpw+/+eGAUUiSkgZ/Q==
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:23:51 2026 by rpki-client