This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/MOd1w7flMfCwv3SyFF--8p3elzE.roa
File:                     MOd1w7flMfCwv3SyFF--8p3elzE.roa (raw, json)
Hash identifier:          EYwivvrV/eFyx237VqFEYH6spoOnfr8g4cHpOeBFaeU=
Subject key identifier:   30:E7:75:C3:B7:E5:31:F0:B0:BF:74:B2:14:5F:BE:F2:9D:DE:97:31
Certificate issuer:       /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial:       019B7AC78E987AD0B7F41F786693370B8EBB
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/MOd1w7flMfCwv3SyFF--8p3elzE.roa
Signing time:             Thu 01 Jan 2026 18:17:37 +0000
ROA not before:           Thu 01 Jan 2026 18:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48359
IP address blocks:        109.232.5.0/24 maxlen: 24
                          185.126.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:8e:98:7a:d0:b7:f4:1f:78:66:93:37:0b:8e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
        Validity
            Not Before: Jan  1 18:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=30e775c3b7e531f0b0bf74b2145fbef29dde9731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:12:9b:6e:4b:c9:5a:48:07:82:ae:90:89:a1:
                    a0:d0:cd:24:98:8f:97:19:86:59:02:6d:46:f4:50:
                    aa:68:27:0c:1e:53:c8:a2:20:ac:32:49:a1:67:70:
                    a5:79:88:de:13:d2:fb:37:c6:11:0d:3e:7b:9c:d3:
                    19:f3:fb:de:e4:62:cd:41:5f:07:21:f5:38:9a:52:
                    b8:b4:a3:37:02:15:c7:8a:0b:08:36:45:de:20:27:
                    04:67:0e:b5:2a:b3:02:a2:47:1b:25:6e:66:11:6e:
                    15:06:f4:69:bd:b9:a7:c5:ee:5a:9d:6c:64:e8:60:
                    fc:99:05:07:82:14:cf:9e:71:4d:92:c2:37:d8:af:
                    11:a2:d6:40:0c:a4:be:7a:42:6e:23:f9:03:39:52:
                    b3:b8:e6:05:b6:f5:82:ab:90:af:34:60:13:e1:7c:
                    90:52:d9:37:e7:eb:52:7c:64:6c:64:66:8f:43:c0:
                    48:39:0f:47:a0:7a:b7:57:43:61:ac:70:95:e5:24:
                    98:e5:18:37:c0:7f:58:d4:5f:19:7b:a7:db:ad:df:
                    ed:07:26:85:53:cf:e0:4d:84:6a:5f:2f:ab:71:31:
                    e5:54:3c:42:53:98:c8:3f:36:9b:e6:b9:98:72:89:
                    ec:0e:a6:48:ac:d2:12:fc:ca:3a:4d:1a:30:d2:9c:
                    8e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E7:75:C3:B7:E5:31:F0:B0:BF:74:B2:14:5F:BE:F2:9D:DE:97:31
            X509v3 Authority Key Identifier:
                keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/MOd1w7flMfCwv3SyFF--8p3elzE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.232.5.0/24
                  185.126.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:8f:95:ee:a8:99:a2:7f:75:f1:09:9a:2b:9f:ec:56:a2:24:
         d2:c3:f3:0e:72:d8:c8:cd:dd:b5:eb:26:e2:69:9d:5b:4c:88:
         16:ec:b4:b5:f3:c0:66:99:a6:95:e3:e2:c0:c8:8b:ec:20:6f:
         f9:1a:de:c4:68:7f:44:6b:e3:4f:5c:8d:17:65:e4:d1:fc:a4:
         a5:50:9c:7c:a6:a5:81:4f:a4:4c:97:a0:73:a6:fa:e8:c8:3d:
         bd:dc:ba:02:5d:56:7d:3d:98:93:57:3a:e4:1c:99:18:5b:80:
         80:94:4d:72:0a:30:4c:11:08:66:11:3c:9d:20:d0:d2:2b:10:
         28:07:4a:07:79:31:66:f0:7a:78:ed:9f:3d:18:d4:d7:58:64:
         1b:eb:3c:34:e0:70:dc:ca:00:58:c7:f5:13:29:66:fe:15:d4:
         a9:06:8c:5d:43:c2:6c:2d:e6:6b:71:03:0a:b8:c8:5a:19:13:
         58:00:d4:81:a3:b1:a6:da:fc:09:bf:60:ff:2f:0f:0f:49:23:
         8c:a7:05:c1:87:4b:85:ff:35:e0:96:0c:f5:dc:2f:24:ee:0b:
         b0:a1:49:cb:92:d6:72:70:e0:4e:67:8f:d2:96:a1:60:1d:97:
         d6:5c:89:85:e0:9b:66:f2:ab:22:84:e0:87:e5:ac:e8:e9:b6:
         52:ce:37:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:53:56 2026 by rpki-client