This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/M1xpquK399A5wByDEtKHq_wqClk.roa
File:                     M1xpquK399A5wByDEtKHq_wqClk.roa (raw, json)
Hash identifier:          zVgRyEKABrkhckv/3fAzW08qm0hqJsbaTBszAR7kayA=
Subject key identifier:   33:5C:69:AA:E2:B7:F7:D0:39:C0:1C:83:12:D2:87:AB:FC:2A:0A:59
Certificate issuer:       /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial:       019B7F158BA2D00B059B10BBCA74350C8ED4
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/M1xpquK399A5wByDEtKHq_wqClk.roa
Signing time:             Fri 02 Jan 2026 14:21:17 +0000
ROA not before:           Fri 02 Jan 2026 14:21:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137443
IP address blocks:        185.243.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:8b:a2:d0:0b:05:9b:10:bb:ca:74:35:0c:8e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
        Validity
            Not Before: Jan  2 14:21:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=335c69aae2b7f7d039c01c8312d287abfc2a0a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:a9:7b:e9:14:bc:73:1b:55:b0:7b:79:31:
                    e0:07:7c:ea:18:94:87:5b:17:5a:7d:66:21:53:ba:
                    9b:bb:29:df:54:2c:3f:25:4d:8a:34:c4:b3:b6:23:
                    08:79:ad:77:d9:a8:ca:71:1e:97:dc:47:39:1f:e6:
                    42:21:ab:73:4a:2f:0c:30:79:e3:57:90:d7:04:04:
                    6c:0f:be:38:a2:93:1e:1e:b5:db:85:4a:a1:82:51:
                    02:a6:b9:04:a5:fa:a8:41:e0:0d:b5:54:9c:e5:60:
                    09:74:82:71:68:a3:ec:ac:67:15:f8:0c:88:36:ab:
                    9f:a5:02:57:c5:13:39:60:b3:1c:5d:24:82:d0:d1:
                    73:86:3c:79:05:13:1f:d7:d8:49:b5:4c:ff:c6:fa:
                    5b:8d:2e:93:38:14:4b:14:2d:13:97:41:cf:c4:8a:
                    d1:e3:28:9c:6a:86:35:41:4f:73:9c:46:d8:0c:c3:
                    10:d8:82:12:19:cf:49:e6:2b:bc:17:28:48:66:06:
                    14:57:5c:03:ae:f4:13:10:d1:b2:bb:da:63:f6:cb:
                    68:7e:b4:d8:03:86:84:40:46:c7:23:eb:80:b8:1f:
                    80:b1:80:cb:2e:4e:1e:31:77:ca:9b:1b:e9:b4:40:
                    ef:7b:ee:80:82:94:2e:03:b3:b9:63:64:45:ba:8e:
                    0b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5C:69:AA:E2:B7:F7:D0:39:C0:1C:83:12:D2:87:AB:FC:2A:0A:59
            X509v3 Authority Key Identifier:
                keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/M1xpquK399A5wByDEtKHq_wqClk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.243.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:7f:06:52:7c:c4:f0:e9:f8:74:23:fc:3d:53:69:af:9f:6e:
         bd:72:83:9d:dc:34:26:39:3b:64:13:27:1d:60:2d:e1:21:03:
         93:34:71:23:b2:1c:ac:f1:3f:b5:26:80:99:4e:46:f2:a0:8a:
         37:b1:91:0c:37:73:82:1a:11:61:cf:d6:be:5e:97:f6:4d:8d:
         6b:4a:ae:f1:fa:29:9a:04:9f:ea:63:cb:4c:92:32:42:34:9f:
         62:31:d4:98:c8:46:3e:7f:40:c9:22:8f:54:2a:ff:9d:bc:a4:
         20:50:4d:24:4e:14:2a:45:c9:c9:67:9f:55:13:42:22:09:cb:
         3f:f2:c1:2a:3e:ef:a6:ce:a7:7e:1c:3b:a0:e1:14:05:da:6e:
         06:43:19:07:33:31:65:5d:2c:3f:61:db:68:88:b0:be:9c:f0:
         99:fc:20:2b:24:37:7f:eb:99:f8:76:5e:50:e1:7b:98:cc:26:
         3c:20:60:08:fd:c4:72:80:e8:52:7b:d6:e8:b7:96:63:9f:94:
         ad:0a:5e:10:c1:a6:9e:3b:eb:a1:0a:bb:89:fe:a4:cf:05:63:
         7b:b6:85:01:c3:c5:60:54:84:5e:52:26:2a:8c:f0:f1:83:a7:
         2c:f9:96:8d:90:c1:b4:af:70:de:76:f4:36:97:61:9a:7f:2b:
         91:90:26:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:09:29 2026 by rpki-client