This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/mwF9VOIvrElH23ZHoopKdym-Aho.roa
File:                     mwF9VOIvrElH23ZHoopKdym-Aho.roa (raw, json)
Hash identifier:          W+Ohr/XPhsb0nPw8AWIrEke6fDAFH5wEmSuFFviMKNc=
Subject key identifier:   9B:01:7D:54:E2:2F:AC:49:47:DB:76:47:A2:8A:4A:77:29:BE:02:1A
Certificate issuer:       /CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Certificate serial:       019B797E2DB1DE9A757D7576AC7B1DF78717
Authority key identifier: FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/mwF9VOIvrElH23ZHoopKdym-Aho.roa
Signing time:             Thu 01 Jan 2026 12:17:50 +0000
ROA not before:           Thu 01 Jan 2026 12:17:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     26114
IP address blocks:        62.115.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 09:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:2d:b1:de:9a:75:7d:75:76:ac:7b:1d:f7:87:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0ed92ec94321dcb219d37f38d907e183244bd
        Validity
            Not Before: Jan  1 12:17:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9b017d54e22fac4947db7647a28a4a7729be021a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0e:26:9e:5c:f6:8f:7e:67:b7:95:f5:56:0f:
                    c9:8f:db:7d:70:25:e0:22:3b:06:1b:6c:8a:08:f6:
                    38:5c:b7:3d:1a:f9:9f:b9:4e:61:8d:e6:d1:87:3d:
                    e4:12:35:43:dd:be:4c:76:13:88:53:e1:97:51:29:
                    31:ba:05:27:38:b5:1b:5c:21:2a:77:db:8b:a2:38:
                    33:75:54:c7:22:c6:e3:5f:0b:c3:d2:c3:48:28:44:
                    73:84:01:89:33:5b:cb:08:ca:ec:79:9e:b2:32:a6:
                    0b:30:01:e3:db:ac:be:69:70:1a:3d:84:55:36:e6:
                    02:3a:37:39:53:2d:db:b8:aa:74:21:a6:91:26:c9:
                    da:1c:9f:bd:be:7d:7d:d3:a1:83:4f:8e:58:fd:fd:
                    43:98:64:97:d8:bf:1c:d6:e5:5f:d7:76:e9:86:6c:
                    0c:ec:fa:63:e0:32:81:e3:84:e2:9c:09:3a:c0:29:
                    73:84:34:7c:27:c9:0d:b5:55:eb:86:9a:97:a0:16:
                    ea:01:bc:fe:02:96:33:9d:fb:ec:ba:5d:de:7e:44:
                    19:0a:fa:fd:20:40:fb:e9:90:a3:2b:a9:32:28:51:
                    9d:d2:5c:fa:87:e8:f5:61:a1:71:d5:69:2d:03:8c:
                    3c:da:ef:ed:fd:03:8a:76:09:1b:00:89:d9:0e:14:
                    ee:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:01:7D:54:E2:2F:AC:49:47:DB:76:47:A2:8A:4A:77:29:BE:02:1A
            X509v3 Authority Key Identifier:
                keyid:FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/mwF9VOIvrElH23ZHoopKdym-Aho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.115.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:cb:3d:58:65:c7:a8:59:33:c7:f9:99:48:ac:f3:b7:1f:74:
         da:4a:d9:dc:a8:d8:70:9b:fa:3b:2f:f3:d7:64:77:6e:1e:98:
         11:4e:e2:0d:14:2a:98:d2:b4:7f:ba:a4:9e:9d:23:94:ff:d4:
         3b:2f:e0:49:cc:9a:5a:7a:68:3f:92:fa:50:d6:f8:e5:7a:27:
         ce:69:e7:65:dc:25:80:f0:51:67:a0:88:e2:c0:12:fd:3a:b9:
         6e:d8:77:91:e0:8b:27:5e:f0:2f:aa:59:b1:22:84:76:cc:06:
         40:2c:5c:c6:80:22:25:40:e2:7f:fd:5b:5a:14:fb:10:4a:7e:
         ad:82:68:e4:70:20:60:8d:d1:2f:49:44:09:6e:44:35:f4:61:
         11:99:ac:66:f8:30:57:da:5e:9f:d3:0b:d3:1f:16:32:ea:f9:
         e6:e9:43:54:ed:94:f2:f7:64:80:ed:ae:12:17:95:c3:b3:ec:
         a6:b6:f9:69:e9:b6:66:86:0b:34:42:e3:8b:9a:68:b0:6b:70:
         74:c5:dd:36:8e:b8:f3:25:ea:e1:7a:f8:2a:73:b5:0d:8f:e5:
         dd:5e:6f:da:95:2a:83:3d:e2:1d:b7:87:0b:6e:11:23:c7:6a:
         74:c6:a4:9b:f2:f2:de:a2:ce:cd:61:99:0c:bf:c7:69:8b:3e:
         6c:fd:c1:4b
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZt5fi2x3pp1fXV2rHsd94cXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYTBlZDkyZWM5NDMyMWRjYjIxOWQzN2YzOGQ5MDdlMTgz
MjQ0YmQwHhcNMjYwMTAxMTIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjAxN2Q1NGUyMmZhYzQ5NDdkYjc2NDdhMjhhNGE3NzI5YmUwMjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw4mnlz2j35nt5X1Vg/Jj9t9cCXg
IjsGG2yKCPY4XLc9GvmfuU5hjebRhz3kEjVD3b5MdhOIU+GXUSkxugUnOLUbXCEq
d9uLojgzdVTHIsbjXwvD0sNIKERzhAGJM1vLCMrseZ6yMqYLMAHj26y+aXAaPYRV
NuYCOjc5Uy3buKp0IaaRJsnaHJ+9vn1906GDT45Y/f1DmGSX2L8c1uVf13bphmwM
7Ppj4DKB44TinAk6wClzhDR8J8kNtVXrhpqXoBbqAbz+ApYznfvsul3efkQZCvr9
IED76ZCjK6kyKFGd0lz6h+j1YaFx1WktA4w82u/t/QOKdgkbAInZDhTuGwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJsBfVTiL6xJR9t2R6KKSncpvgIaMB8GA1UdIwQY
MBaAFPug7ZLslDIdyyGdN/ONkH4YMkS9MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02RHRrdXlVTWgzTElaMDM4NDJRZmhneVJMMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvNTkzNDgyLWQ3NjItNDQwOS1iODUw
LTIwYzQ0YTgxZjk3Ny8xL213RjlWT0l2ckVsSDIzWkhvb3BLZHltLUFoby5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTQvNTkzNDgyLWQ3NjItNDQwOS1iODUwLTIwYzQ0YTgxZjk3
Ny8xLzEtNkR0a3V5VU1oM0xJWjAzODQyUWZoZ3lSTDAuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA+c/Qw
DQYJKoZIhvcNAQELBQADggEBAI7LPVhlx6hZM8f5mUis87cfdNpK2dyo2HCb+jsv
89dkd24emBFO4g0UKpjStH+6pJ6dI5T/1Dsv4EnMmlp6aD+S+lDW+OV6J85p52Xc
JYDwUWegiOLAEv06uW7Yd5Hgiyde8C+qWbEihHbMBkAsXMaAIiVA4n/9W1oU+xBK
fq2CaORwIGCN0S9JRAluRDX0YRGZrGb4MFfaXp/TC9MfFjLq+ebpQ1TtlPL3ZIDt
rhIXlcOz7Ka2+WnptmaGCzRC44uaaLBrcHTF3TaOuPMl6uF6+CpztQ2P5d1eb9qV
KoM94h23hwtuESPHanTGpJvy8t6izs1hmQy/x2mLPmz9wUs=
-----END CERTIFICATE-----
Generated at Fri Jan 9 16:26:59 2026 by rpki-client