This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wm-uKmWI1u9HviduA_UmnkiOuoc.roa
File:                     wm-uKmWI1u9HviduA_UmnkiOuoc.roa (raw, json)
Hash identifier:          njirFRsWOoRWFxNu3bBwPn/knqF2GwaQBYCsx7hSN48=
Subject key identifier:   C2:6F:AE:2A:65:88:D6:EF:47:BE:27:6E:03:F5:26:9E:48:8E:BA:87
Certificate issuer:       /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial:       019B7F14B85A3DFD744B45D153AA1B6A555F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wm-uKmWI1u9HviduA_UmnkiOuoc.roa
Signing time:             Fri 02 Jan 2026 14:20:22 +0000
ROA not before:           Fri 02 Jan 2026 14:20:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59711
IP address blocks:        62.192.96.0/23 maxlen: 23
                          213.169.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:b8:5a:3d:fd:74:4b:45:d1:53:aa:1b:6a:55:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
        Validity
            Not Before: Jan  2 14:20:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c26fae2a6588d6ef47be276e03f5269e488eba87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:dd:5e:e0:47:2e:55:b8:fb:31:70:63:cc:
                    f7:e4:f2:1c:54:6d:68:2d:7b:ac:3b:cd:c4:93:21:
                    26:36:bb:59:e9:33:9e:84:4e:5e:e4:63:4f:8b:e1:
                    97:ee:20:ca:5d:bb:e6:1f:1c:a0:b8:40:ad:59:3a:
                    ea:06:d0:92:8f:4f:c7:ca:e7:b8:a7:d2:c6:e3:61:
                    c0:1d:50:36:84:2e:aa:4a:a7:33:eb:9f:c7:d2:19:
                    62:72:da:64:c1:45:79:b7:72:74:29:d6:33:d2:55:
                    a4:10:f4:34:9f:72:b7:af:0c:f7:8a:7f:c9:5a:25:
                    e0:b1:10:cf:8c:7e:d4:c5:57:6e:f2:d5:8c:f2:e1:
                    f2:5d:5b:55:bf:fd:1e:27:46:d9:7f:e5:b0:66:3e:
                    33:76:1e:20:da:36:49:4f:a6:00:85:7b:8c:0a:ef:
                    9c:88:3d:5d:ee:e7:02:9e:6b:14:c9:d4:df:8e:cd:
                    bf:33:bc:0e:ef:85:50:66:be:e2:1a:df:5a:88:80:
                    a1:b2:ba:39:10:61:31:63:ff:34:a6:81:78:8f:38:
                    96:6e:2a:b1:da:63:fe:ef:35:22:d5:d6:28:47:33:
                    c4:64:89:72:55:c3:bd:c6:42:55:bc:62:5c:05:82:
                    02:e5:b0:1c:99:01:56:26:d5:a5:3e:a1:57:ab:ab:
                    7b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6F:AE:2A:65:88:D6:EF:47:BE:27:6E:03:F5:26:9E:48:8E:BA:87
            X509v3 Authority Key Identifier:
                keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wm-uKmWI1u9HviduA_UmnkiOuoc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.192.96.0/23
                  213.169.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:62:49:ea:66:7a:06:b7:12:1f:d2:64:75:96:7d:6b:00:2c:
         b8:ae:ee:37:97:47:07:50:45:ba:4e:2c:20:25:88:de:d6:0d:
         86:0b:18:5a:93:a2:c4:86:89:e1:ec:51:61:c9:35:0f:e4:2a:
         f1:10:d7:64:31:48:ba:e6:0a:f8:91:81:34:00:f1:8e:3b:6f:
         61:31:dd:03:75:a7:cc:3a:43:76:06:b1:50:9d:19:7c:2d:7e:
         10:8c:86:51:99:a1:92:78:84:f9:3a:aa:bc:8b:55:5f:84:cd:
         f2:a8:77:01:56:e3:23:a7:ef:21:42:18:05:78:93:ff:5d:2f:
         81:50:f4:b0:16:f3:39:e3:23:39:2f:c6:e3:da:c5:a1:69:48:
         b8:67:5d:2e:27:ce:86:90:db:71:8f:4c:87:eb:91:8b:ac:07:
         a9:4b:c7:5b:8c:01:8d:aa:e8:be:49:72:84:0f:0b:b2:9a:46:
         6c:6e:5e:5d:94:b9:7f:f3:59:f6:7a:2b:ec:e9:e8:d8:9c:82:
         ab:75:ed:d9:bc:82:d2:d8:99:78:07:25:1c:85:c3:ad:88:28:
         cb:a5:f6:82:b5:71:2d:8f:c9:45:08:ff:18:78:2d:30:07:e5:
         bc:5c:62:db:2e:df:51:82:fa:ef:e8:98:82:82:e5:9f:22:64:
         13:cb:1c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:45:21 2026 by rpki-client