This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/wt29L0kw6F2mUURKehVNYRWY7ww.roa
File:                     wt29L0kw6F2mUURKehVNYRWY7ww.roa (raw, json)
Hash identifier:          uytmnZgbcHOqU6GDB/PFJ6/sYh8eKtXoeEIef5E9CfM=
Subject key identifier:   C2:DD:BD:2F:49:30:E8:5D:A6:51:44:4A:7A:15:4D:61:15:98:EF:0C
Certificate issuer:       /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial:       019B7EA6EE6BB99568DACA0786814F36695F
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/wt29L0kw6F2mUURKehVNYRWY7ww.roa
Signing time:             Fri 02 Jan 2026 12:20:27 +0000
ROA not before:           Fri 02 Jan 2026 12:20:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57207
IP address blocks:        95.140.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:ee:6b:b9:95:68:da:ca:07:86:81:4f:36:69:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
        Validity
            Not Before: Jan  2 12:20:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2ddbd2f4930e85da651444a7a154d611598ef0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1a:4b:be:7a:d5:0d:4d:03:3e:00:cc:9f:3b:
                    5d:90:03:90:6f:8e:b4:ad:ae:4a:47:22:7c:c7:c7:
                    74:83:98:3c:14:51:02:f3:5f:f2:11:b6:24:cd:ab:
                    94:05:40:86:19:0c:e5:fb:b6:b2:10:e6:67:75:9b:
                    bf:b3:a2:6b:19:4e:b1:25:7f:1e:fc:7e:90:be:be:
                    35:e8:28:e1:78:5c:fb:4b:f5:38:f3:f3:d9:d3:82:
                    6e:51:32:dc:e3:cb:3b:34:28:d9:74:b7:7c:17:da:
                    05:b9:f4:53:02:9e:a5:ec:03:1b:6c:f7:6a:be:60:
                    cd:8e:43:60:62:fc:fd:47:6f:b8:4f:d8:8d:ba:bb:
                    fb:0e:35:59:31:ce:01:69:36:6d:f1:f7:14:ed:02:
                    39:df:e6:94:fa:b7:87:3b:ed:95:f9:ff:51:01:d1:
                    57:14:76:61:fe:a4:e3:7d:0f:f3:89:fa:47:a2:24:
                    ae:11:70:47:a1:ef:5f:68:8e:ab:e1:8a:db:09:fb:
                    21:8f:9b:aa:84:ce:59:0e:17:3a:ab:18:49:a7:ac:
                    38:d6:51:56:fc:e1:8f:32:01:62:15:e9:ee:de:74:
                    a6:2a:0a:22:95:e6:13:9a:fc:fd:c0:d7:16:bd:9e:
                    58:8c:c0:d6:ac:62:b9:d8:42:19:3a:34:6c:db:2b:
                    0d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DD:BD:2F:49:30:E8:5D:A6:51:44:4A:7A:15:4D:61:15:98:EF:0C
            X509v3 Authority Key Identifier:
                keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/wt29L0kw6F2mUURKehVNYRWY7ww.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.140.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:4d:3e:15:ec:eb:e7:88:1b:57:6d:30:d2:01:86:f1:8b:b8:
         e3:8d:54:9f:77:e8:f9:f0:3f:35:b4:76:c0:30:a4:31:42:30:
         d8:0f:fa:89:f7:a3:a7:2c:d6:3a:f8:e1:64:d6:2f:2e:eb:c1:
         27:a3:3d:42:53:d5:42:d2:48:ef:fd:3d:b6:d1:e3:d9:1b:b7:
         d8:78:fa:0e:68:de:7e:c3:6d:1b:43:0f:b4:03:76:01:98:f0:
         88:4b:dd:9e:e5:f0:f6:84:7f:38:fb:53:69:73:fa:86:af:6e:
         50:9d:d7:7f:ad:8e:31:62:37:6e:9e:b9:9f:ff:54:29:c8:d4:
         ed:8f:23:04:51:20:83:44:f6:f4:1b:e8:22:0a:e8:1d:dd:14:
         35:a3:74:d4:67:29:ab:5d:18:62:e6:cf:45:2e:12:8f:e3:a8:
         89:a1:f3:61:70:25:e5:2b:5a:24:3c:7e:25:a2:59:4c:64:48:
         6d:a8:6c:ee:92:30:77:d2:67:5c:c3:0e:41:60:c5:68:5a:2e:
         74:f7:04:79:1c:ca:54:6c:50:6a:b6:14:e7:ca:df:6f:d1:f3:
         7b:60:b1:ad:50:44:fc:5a:16:d4:cf:07:2c:41:6b:31:6d:09:
         7c:e4:42:c7:57:88:24:0d:42:e9:33:73:a0:c2:0f:0b:a8:b1:
         e7:bf:4e:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+pu5ruZVo2soHhoFPNmlfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk
OWNlMTYwHhcNMjYwMTAyMTIyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmRkYmQyZjQ5MzBlODVkYTY1MTQ0NGE3YTE1NGQ2MTE1OThlZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBpLvnrVDU0DPgDMnztdkAOQb460
ra5KRyJ8x8d0g5g8FFEC81/yEbYkzauUBUCGGQzl+7ayEOZndZu/s6JrGU6xJX8e
/H6Qvr416CjheFz7S/U48/PZ04JuUTLc48s7NCjZdLd8F9oFufRTAp6l7AMbbPdq
vmDNjkNgYvz9R2+4T9iNurv7DjVZMc4BaTZt8fcU7QI53+aU+reHO+2V+f9RAdFX
FHZh/qTjfQ/zifpHoiSuEXBHoe9faI6r4YrbCfshj5uqhM5ZDhc6qxhJp6w41lFW
/OGPMgFiFenu3nSmKgoileYTmvz9wNcWvZ5YjMDWrGK52EIZOjRs2ysNcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMLdvS9JMOhdplFESnoVTWEVmO8MMB8GA1UdIwQY
MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt
MGY2NmMxODg3OTE2LzEvd3QyOUwwa3c2RjJtVVVSS2VoVk5ZUldZN3d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2
LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4x6MA0G
CSqGSIb3DQEBCwUAA4IBAQAvTT4V7OvniBtXbTDSAYbxi7jjjVSfd+j58D81tHbA
MKQxQjDYD/qJ96OnLNY6+OFk1i8u68Enoz1CU9VC0kjv/T220ePZG7fYePoOaN5+
w20bQw+0A3YBmPCIS92e5fD2hH84+1Npc/qGr25Qndd/rY4xYjdunrmf/1QpyNTt
jyMEUSCDRPb0G+giCugd3RQ1o3TUZymrXRhi5s9FLhKP46iJofNhcCXlK1okPH4l
ollMZEhtqGzukjB30mdcww5BYMVoWi509wR5HMpUbFBqthTnyt9v0fN7YLGtUET8
WhbUzwcsQWsxbQl85ELHV4gkDULpM3Ogwg8LqLHnv051
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:52:07 2026 by rpki-client