This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/MJP1d4e-dGP316pN4YKGXwBEB6A.roa
File:                     MJP1d4e-dGP316pN4YKGXwBEB6A.roa (raw, json)
Hash identifier:          7LX7W8xSif8sjS3tismw58R9gQWQatJHTsKvQpRfAW8=
Subject key identifier:   30:93:F5:77:87:BE:74:63:F7:D7:AA:4D:E1:82:86:5F:00:44:07:A0
Certificate issuer:       /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial:       019B7B367D450C0E7116F4D5F4477D205937
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/MJP1d4e-dGP316pN4YKGXwBEB6A.roa
Signing time:             Thu 01 Jan 2026 20:18:47 +0000
ROA not before:           Thu 01 Jan 2026 20:18:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35775
IP address blocks:        5.83.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:7d:45:0c:0e:71:16:f4:d5:f4:47:7d:20:59:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
        Validity
            Not Before: Jan  1 20:18:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3093f57787be7463f7d7aa4de182865f004407a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:a9:70:b1:36:cd:4d:99:99:04:de:b7:08:
                    a1:bd:52:f3:56:48:5d:93:ce:df:ee:40:cb:02:ce:
                    1e:f7:81:0c:6e:49:91:a4:a9:22:6e:8e:95:96:a3:
                    7b:02:39:3e:a3:bf:6a:a2:0e:3c:7d:90:f6:d9:b5:
                    c5:c7:85:8b:07:74:0c:70:e5:71:3f:5e:75:59:14:
                    c5:a2:88:f1:c6:7b:8c:f8:79:44:4c:35:74:62:a4:
                    ca:48:d4:cc:a8:51:c8:ea:75:c5:9c:c1:79:93:eb:
                    16:54:a4:c8:8e:53:46:7c:c1:fc:7c:a7:1e:10:72:
                    56:99:89:60:54:a6:1d:ad:22:e2:18:f4:2c:b2:f7:
                    62:75:93:d7:c6:ef:b9:65:55:e0:dd:76:a3:8f:56:
                    ed:cd:5b:09:ef:d3:0f:80:ee:1d:ad:dd:26:cb:0f:
                    c8:00:d5:05:72:18:d5:09:d7:18:9f:92:e5:54:5e:
                    a6:92:20:20:52:0d:27:4c:25:40:3f:1b:ec:24:f3:
                    70:be:03:a6:f4:a0:5e:b4:c8:f0:54:e5:24:78:7d:
                    1d:d9:46:fb:4d:43:28:76:3d:fb:91:08:dc:b6:56:
                    db:23:d6:9d:bc:7e:ff:2e:48:87:12:e4:3c:0e:a4:
                    3a:1a:bc:cf:7a:a5:5b:56:0c:88:15:29:c6:c1:14:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:93:F5:77:87:BE:74:63:F7:D7:AA:4D:E1:82:86:5F:00:44:07:A0
            X509v3 Authority Key Identifier:
                keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/MJP1d4e-dGP316pN4YKGXwBEB6A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:9c:51:f7:98:43:52:8e:3c:a8:8f:1c:a0:7e:54:e6:20:2a:
         d8:c5:e1:12:8f:27:45:24:8b:33:29:04:d2:42:b9:43:ad:f0:
         a9:cf:95:95:2d:c4:5c:10:0a:a8:2a:35:03:49:a1:34:b1:ef:
         06:59:dc:2b:ed:a2:1d:95:00:be:4f:81:b2:fa:95:f4:71:52:
         96:66:2c:10:18:ed:b5:1b:23:4f:3a:f5:de:f4:6d:67:ca:00:
         0e:fd:a1:30:d6:52:16:25:de:e7:53:23:83:63:87:5f:c4:f8:
         a5:40:6f:43:89:02:2c:cd:93:31:ef:e9:6a:e8:08:38:95:ba:
         74:37:60:cd:38:3c:ad:3d:ff:16:d2:94:68:e1:e7:b8:d6:51:
         1e:38:c5:af:63:27:f7:39:8c:72:f8:48:95:3f:be:81:d6:46:
         e6:6f:f0:66:5a:f8:43:a6:91:cf:32:29:b6:40:c5:0c:70:58:
         60:c5:6c:f7:8f:f4:21:0a:4e:19:a6:f7:f7:01:6b:f7:67:33:
         1b:d3:f9:06:91:e3:03:20:d5:ed:bb:08:e1:53:11:05:b7:c8:
         2d:74:95:3a:8f:81:ef:a6:b4:e9:f3:0c:7c:bf:ed:79:61:cd:
         f9:dd:0f:99:87:41:c7:c9:26:2a:81:4f:10:aa:59:29:85:5a:
         b0:e3:a9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:12:59 2026 by rpki-client