This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/Wwcp1RNRxmA9uF4tEDDVqEKz3bE.roa
File:                     Wwcp1RNRxmA9uF4tEDDVqEKz3bE.roa (raw, json)
Hash identifier:          4QLAV/UZO06tZYqJje4l4uj7W3xOnuhocRHE1UC7XUg=
Subject key identifier:   5B:07:29:D5:13:51:C6:60:3D:B8:5E:2D:10:30:D5:A8:42:B3:DD:B1
Certificate issuer:       /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial:       019B7BA33092E2A340602E3215785C85D063
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/Wwcp1RNRxmA9uF4tEDDVqEKz3bE.roa
Signing time:             Thu 01 Jan 2026 22:17:30 +0000
ROA not before:           Thu 01 Jan 2026 22:17:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205087
IP address blocks:        37.143.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:30:92:e2:a3:40:60:2e:32:15:78:5c:85:d0:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
        Validity
            Not Before: Jan  1 22:17:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5b0729d51351c6603db85e2d1030d5a842b3ddb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:95:93:e3:e4:90:45:5f:29:27:8d:2a:69:14:
                    32:96:42:6a:98:e0:8c:f2:5e:7c:2d:60:d6:f0:76:
                    28:1b:33:fa:cf:d2:65:4d:49:9a:7e:c0:50:52:b9:
                    89:07:4d:48:e1:eb:78:63:a4:29:27:92:77:02:25:
                    84:11:97:9e:76:16:14:8a:6a:dc:81:aa:14:5c:06:
                    1c:c3:e6:85:b5:70:a4:c6:eb:fb:ee:14:51:be:8b:
                    07:b5:43:a0:36:16:b3:9a:35:c1:26:ff:70:63:d8:
                    cd:09:94:0c:14:ad:a1:30:d2:cb:6a:89:9d:12:25:
                    59:7b:fb:42:43:80:92:9a:b5:fb:72:47:e3:88:c4:
                    9c:b1:41:47:5f:f6:5d:ba:15:1c:27:e1:81:c7:ab:
                    b6:67:63:6a:bf:c0:b4:91:98:fe:28:a9:ae:e4:6c:
                    68:50:28:40:f9:a3:fc:02:02:e5:30:c8:43:4f:2d:
                    4e:0c:b0:ed:78:93:86:58:5b:09:a2:11:f1:08:ba:
                    9c:83:ff:70:18:58:b7:db:0c:55:4c:31:4c:78:84:
                    ac:a4:84:de:a0:f3:2a:90:ff:18:55:d2:c8:5b:98:
                    24:e0:0e:75:12:6e:79:e0:df:9b:43:5e:a7:be:e5:
                    d2:82:d5:c7:0e:cd:d7:63:14:60:7c:40:8d:97:c5:
                    8e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:07:29:D5:13:51:C6:60:3D:B8:5E:2D:10:30:D5:A8:42:B3:DD:B1
            X509v3 Authority Key Identifier:
                keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/Wwcp1RNRxmA9uF4tEDDVqEKz3bE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.143.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:61:3a:60:67:83:35:69:21:1b:c2:7b:26:66:c3:c6:3d:80:
         55:4a:b8:19:39:fa:3f:8c:e2:43:f4:84:cb:b1:51:e3:50:5e:
         47:50:70:28:e0:d8:9f:9a:10:f6:5c:f8:75:78:5d:4c:ee:80:
         c2:d5:74:41:08:c4:17:09:d2:b8:42:c9:bd:af:9a:f9:d8:56:
         7e:9b:f4:89:82:6a:87:b4:b7:e4:2d:74:63:38:ed:23:c6:53:
         c1:b1:3a:7b:c2:b2:11:c5:1b:c4:38:9f:c7:dd:75:c7:1f:d9:
         eb:83:25:5c:0a:f2:e5:32:d0:ab:5e:3c:89:f9:e0:82:69:1a:
         dc:6b:dd:02:08:39:5a:fd:ea:05:af:7b:17:8c:58:90:31:c3:
         3c:45:33:d2:1b:a7:4b:0d:d7:b5:4f:40:81:94:61:61:02:4d:
         6d:c1:e9:cd:5d:b4:45:e2:b7:b0:bf:a5:97:52:ae:8b:31:13:
         cb:ab:9b:ec:f0:aa:ce:06:e9:5a:16:b4:3f:3a:0a:71:1d:60:
         a6:9f:21:36:53:a4:26:4f:b3:35:17:c1:9b:5c:29:5c:38:c7:
         7a:0c:e2:1e:da:51:69:ea:4f:6b:7b:4c:3f:b0:b6:48:04:7d:
         69:ea:6f:a3:02:e2:df:65:bc:0e:0b:7e:72:ac:6f:33:15:f5:
         1f:0f:e3:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7ozCS4qNAYC4yFXhchdBjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NGRlNjU5NzU5YjAyNzQxMjRhN2I0ODFkMDk3Njg0MGI3
YWRlMDYwHhcNMjYwMTAxMjIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjA3MjlkNTEzNTFjNjYwM2RiODVlMmQxMDMwZDVhODQyYjNkZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspWT4+SQRV8pJ40qaRQylkJqmOCM
8l58LWDW8HYoGzP6z9JlTUmafsBQUrmJB01I4et4Y6QpJ5J3AiWEEZeedhYUimrc
gaoUXAYcw+aFtXCkxuv77hRRvosHtUOgNhazmjXBJv9wY9jNCZQMFK2hMNLLaomd
EiVZe/tCQ4CSmrX7ckfjiMScsUFHX/ZduhUcJ+GBx6u2Z2Nqv8C0kZj+KKmu5Gxo
UChA+aP8AgLlMMhDTy1ODLDteJOGWFsJohHxCLqcg/9wGFi32wxVTDFMeISspITe
oPMqkP8YVdLIW5gk4A51Em554N+bQ16nvuXSgtXHDs3XYxRgfECNl8WOywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFsHKdUTUcZgPbheLRAw1ahCs92xMB8GA1UdIwQY
MBaAFNRN5ll1mwJ0Ekp7SB0JdoQLet4GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUUzbVdYV2JBblFTU250SUhRbDJoQXQ2M2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83NTIxNmQtNjg0Yi00N2NjLWE5NWUt
ZGI0ZDM5ZGM0ZWM3LzEvV3djcDFSTlJ4bUE5dUY0dEVERFZxRUt6M2JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83NTIxNmQtNjg0Yi00N2NjLWE5NWUtZGI0ZDM5ZGM0ZWM3
LzEvMUUzbVdYV2JBblFTU250SUhRbDJoQXQ2M2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJY+pMA0G
CSqGSIb3DQEBCwUAA4IBAQBxYTpgZ4M1aSEbwnsmZsPGPYBVSrgZOfo/jOJD9ITL
sVHjUF5HUHAo4NifmhD2XPh1eF1M7oDC1XRBCMQXCdK4Qsm9r5r52FZ+m/SJgmqH
tLfkLXRjOO0jxlPBsTp7wrIRxRvEOJ/H3XXHH9nrgyVcCvLlMtCrXjyJ+eCCaRrc
a90CCDla/eoFr3sXjFiQMcM8RTPSG6dLDde1T0CBlGFhAk1twenNXbRF4rewv6WX
Uq6LMRPLq5vs8KrOBulaFrQ/OgpxHWCmnyE2U6QmT7M1F8GbXClcOMd6DOIe2lFp
6k9re0w/sLZIBH1p6m+jAuLfZbwOC35yrG8zFfUfD+Pk
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:54:45 2026 by rpki-client