This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/rMyldel-h-ix134H9JPpaNaqiZw.roa
File:                     rMyldel-h-ix134H9JPpaNaqiZw.roa (raw, json)
Hash identifier:          kjpDziC4fTirZl8rJ57iJ/4E0A69g+Weup7oy60VcLw=
Subject key identifier:   AC:CC:A5:75:E9:7E:87:E8:B1:D7:7E:07:F4:93:E9:68:D6:AA:89:9C
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       019A53E192C58B357B4BE7FEF1BE0A750E4D
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/rMyldel-h-ix134H9JPpaNaqiZw.roa
Signing time:             Wed 05 Nov 2025 11:58:03 +0000
ROA not before:           Wed 05 Nov 2025 11:58:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204544
IP address blocks:        62.220.126.0/23 maxlen: 24
                          81.12.24.0/22 maxlen: 24
                          81.12.30.0/23 maxlen: 24
                          87.107.6.0/23 maxlen: 24
                          87.107.8.0/23 maxlen: 24
                          87.107.144.0/24 maxlen: 24
                          87.107.152.0/23 maxlen: 24
                          87.107.166.0/23 maxlen: 24
                          87.107.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:e1:92:c5:8b:35:7b:4b:e7:fe:f1:be:0a:75:0e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Nov  5 11:58:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=accca575e97e87e8b1d77e07f493e968d6aa899c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:34:3f:c0:e7:1a:3d:86:84:1d:a9:ed:eb:
                    58:b9:80:bd:cd:76:8d:34:26:ba:06:7e:7c:9f:26:
                    72:46:e0:35:87:e3:ff:10:06:92:02:f1:5e:cf:70:
                    c0:d1:27:9d:50:86:88:4e:7a:fc:62:35:0f:0d:2c:
                    8b:54:01:4f:8c:b8:6d:75:e5:e7:c7:91:95:af:11:
                    29:56:f8:d6:b8:e3:37:08:1f:08:79:4f:48:04:b0:
                    a2:27:52:c9:f7:fe:78:a4:ae:be:a2:7c:02:fc:88:
                    90:0a:5a:a7:da:ff:35:b1:80:48:08:38:f7:6c:99:
                    57:fd:a4:ab:41:de:a9:75:09:0e:5f:50:41:3a:1b:
                    2d:66:07:05:d1:41:2c:20:6b:d2:58:7f:ac:ae:61:
                    fb:76:47:68:25:d0:c7:f8:9a:6d:9c:ff:17:be:d7:
                    d5:19:04:c5:a2:fd:5d:f0:1e:e0:0b:d1:7d:34:fa:
                    28:10:32:3e:bf:ec:80:08:f0:4d:76:2d:ee:88:f3:
                    2d:22:ad:18:a6:a0:f5:a9:0e:50:c1:82:a2:58:19:
                    9b:b9:a2:42:3e:8e:8b:0c:33:dc:b2:cd:f3:cf:de:
                    87:4a:e1:07:48:ad:ea:08:96:1f:5c:be:d0:d7:97:
                    6d:5c:12:ba:99:9b:8a:6d:74:14:11:2e:89:a8:b2:
                    ee:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CC:A5:75:E9:7E:87:E8:B1:D7:7E:07:F4:93:E9:68:D6:AA:89:9C
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/rMyldel-h-ix134H9JPpaNaqiZw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.220.126.0/23
                  81.12.24.0/22
                  81.12.30.0/23
                  87.107.6.0-87.107.9.255
                  87.107.144.0/24
                  87.107.152.0/23
                  87.107.166.0/23
                  87.107.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c9:3f:63:70:89:67:78:54:e0:ea:32:45:27:f9:e7:da:2d:e8:
         c1:de:b9:df:12:93:ef:b9:5d:19:3b:5d:9d:05:05:8f:bc:1e:
         12:4f:f3:89:c0:0a:6b:3e:fd:7c:e7:7f:59:f2:5a:0d:7b:d6:
         40:3f:5f:47:cf:f0:db:53:7e:69:e2:81:12:82:8f:ce:08:b4:
         e5:7d:d5:8f:96:c8:7d:0a:23:d7:d7:07:34:0b:1f:6f:f2:ba:
         fe:45:20:d7:e2:a8:e0:75:4e:d9:98:94:43:e6:6f:b0:64:81:
         71:42:9b:5b:3d:8d:f7:97:2b:eb:b3:ad:ca:7b:5f:85:9f:7e:
         9d:f6:3e:f7:ca:f5:9b:5b:74:ff:d2:59:43:96:4a:a9:24:65:
         c1:3c:83:49:bf:7a:af:da:99:f5:08:57:0d:f6:e1:f7:57:65:
         4d:c9:3f:c5:a2:25:de:ff:6b:ec:29:e4:5d:28:ad:18:d3:6e:
         65:53:b7:1d:2a:60:94:c5:83:f7:bd:23:dc:e6:47:29:49:19:
         58:99:b0:47:34:ff:96:a8:1f:05:47:9d:ff:3e:c4:ee:af:ae:
         e5:f3:05:f3:8a:d2:4c:31:8c:26:f2:9e:76:96:59:82:dc:01:
         a9:34:14:40:d3:3a:d4:29:07:a5:a0:96:8e:08:48:f0:66:ae:
         2f:2a:4b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:47:49 2025 by rpki-client