This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/ww6ypu6XKZLBnCmu95aBOLrx3W4.roa
File:                     ww6ypu6XKZLBnCmu95aBOLrx3W4.roa (raw, json)
Hash identifier:          MJWr+hVoOJcU+dBCIlq6NQXj1hTEMRYcYO7YQk9u0qQ=
Subject key identifier:   C3:0E:B2:A6:EE:97:29:92:C1:9C:29:AE:F7:96:81:38:BA:F1:DD:6E
Certificate issuer:       /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial:       019B7C12A02E2052CA6C9D23D80247EEB3E9
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/ww6ypu6XKZLBnCmu95aBOLrx3W4.roa
Signing time:             Fri 02 Jan 2026 00:19:14 +0000
ROA not before:           Fri 02 Jan 2026 00:19:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209090
IP address blocks:        80.67.186.0/24 maxlen: 24
                          2001:913:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:a0:2e:20:52:ca:6c:9d:23:d8:02:47:ee:b3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
        Validity
            Not Before: Jan  2 00:19:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c30eb2a6ee972992c19c29aef7968138baf1dd6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:fb:ae:8c:ff:da:bc:51:91:74:f2:8f:1e:
                    2a:a3:de:46:d7:6d:73:0d:db:2f:e6:c2:c9:34:ba:
                    d5:ef:96:3f:3c:1e:b0:7e:bf:da:bf:15:bc:ec:c6:
                    31:21:6a:3a:46:5d:46:4f:07:ca:30:5a:1e:9b:e0:
                    8c:ec:8e:7a:0d:ac:10:36:ec:79:21:88:fd:32:41:
                    90:1a:16:98:58:b5:5f:5d:94:17:df:52:34:77:b1:
                    82:1f:f6:0d:e7:93:d6:f7:85:c6:d3:fe:c8:3d:ff:
                    49:97:80:74:59:ac:3e:cf:48:b6:24:04:23:b5:69:
                    2c:e3:23:36:d7:86:68:27:f8:92:f4:9f:2a:b1:94:
                    9f:7b:da:9c:70:de:41:21:ba:55:78:65:2f:ac:c0:
                    39:c9:b4:1e:35:8c:c7:07:c1:c0:f6:b4:25:a7:5e:
                    82:36:1d:c1:0d:20:e1:36:e7:a5:14:ca:44:6c:da:
                    79:69:14:1b:26:5d:58:f0:87:f8:4f:93:69:b4:f0:
                    e0:13:f0:fb:39:f8:0d:e6:1a:17:45:e0:18:59:b5:
                    08:00:fc:8f:ea:d0:b6:6f:21:61:d5:a4:c8:ac:64:
                    e7:72:32:4f:de:90:65:cf:1f:24:8e:61:8f:f2:ca:
                    9e:94:ea:15:20:0c:4c:46:de:98:ea:bb:67:8d:11:
                    39:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0E:B2:A6:EE:97:29:92:C1:9C:29:AE:F7:96:81:38:BA:F1:DD:6E
            X509v3 Authority Key Identifier:
                keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/ww6ypu6XKZLBnCmu95aBOLrx3W4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.67.186.0/24
                IPv6:
                  2001:913:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         07:c0:ab:4d:b7:3f:4c:97:a0:c9:0d:62:fa:b2:d4:70:3c:e9:
         73:aa:9b:7b:31:49:05:0c:4f:01:c3:de:f6:7b:d8:51:28:84:
         7c:49:c6:ec:a1:32:a5:94:cc:e9:c6:3e:af:52:35:b5:6c:d4:
         eb:12:15:7c:eb:95:dc:2b:06:16:35:f6:ee:8d:0d:39:64:84:
         67:1a:c8:29:0b:16:2b:6f:1f:40:8d:b2:df:54:fe:cb:91:8a:
         47:51:b2:64:c2:2b:f0:bf:29:53:54:0f:89:40:20:64:20:83:
         90:9e:95:3e:d2:e9:76:64:d5:41:56:35:9a:0c:ff:c6:2e:d8:
         69:32:7d:d6:0f:ae:55:a0:59:17:a5:bd:f6:d0:3a:79:ae:4d:
         da:47:4d:c9:d6:ea:43:84:f1:b9:18:34:de:47:33:5b:b1:17:
         63:f5:c6:29:2c:f0:da:b2:85:0e:44:0d:fc:7a:bb:f8:36:93:
         19:bb:53:18:8a:a9:c6:c4:c3:81:dd:5d:82:08:6c:86:a3:aa:
         1c:2a:51:9e:f6:ec:1a:96:4e:f1:74:29:34:db:d8:c5:fa:35:
         b1:94:1d:f9:79:e9:6e:26:99:ce:75:b8:5b:7b:fd:6d:8a:76:
         f8:2e:c8:d6:15:93:9b:e5:c8:53:56:19:a8:78:20:c9:32:2a:
         05:c5:88:17
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZt8EqAuIFLKbJ0j2AJH7rPpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl
ZjRmZWEwHhcNMjYwMTAyMDAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzBlYjJhNmVlOTcyOTkyYzE5YzI5YWVmNzk2ODEzOGJhZjFkZDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua/7roz/2rxRkXTyjx4qo95G121z
Ddsv5sLJNLrV75Y/PB6wfr/avxW87MYxIWo6Rl1GTwfKMFoem+CM7I56DawQNux5
IYj9MkGQGhaYWLVfXZQX31I0d7GCH/YN55PW94XG0/7IPf9Jl4B0Waw+z0i2JAQj
tWks4yM214ZoJ/iS9J8qsZSfe9qccN5BIbpVeGUvrMA5ybQeNYzHB8HA9rQlp16C
Nh3BDSDhNuelFMpEbNp5aRQbJl1Y8If4T5NptPDgE/D7OfgN5hoXReAYWbUIAPyP
6tC2byFh1aTIrGTncjJP3pBlzx8kjmGP8sqelOoVIAxMRt6Y6rtnjRE50QIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFMMOsqbulymSwZwprveWgTi68d1uMB8GA1UdIwQY
MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt
YTY1MjMzYjNlOTc1LzEvd3c2eXB1NlhLWkxCbkNtdTk1YUJPTHJ4M1c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1
LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAUEO6MA4E
AgACMAgDBgQgAQkTUDANBgkqhkiG9w0BAQsFAAOCAQEAB8CrTbc/TJegyQ1i+rLU
cDzpc6qbezFJBQxPAcPe9nvYUSiEfEnG7KEypZTM6cY+r1I1tWzU6xIVfOuV3CsG
FjX27o0NOWSEZxrIKQsWK28fQI2y31T+y5GKR1GyZMIr8L8pU1QPiUAgZCCDkJ6V
PtLpdmTVQVY1mgz/xi7YaTJ91g+uVaBZF6W99tA6ea5N2kdNydbqQ4TxuRg03kcz
W7EXY/XGKSzw2rKFDkQN/Hq7+DaTGbtTGIqpxsTDgd1dgghshqOqHCpRnvbsGpZO
8XQpNNvYxfo1sZQd+XnpbiaZznW4W3v9bYp2+C7I1hWTm+XIU1YZqHggyTIqBcWI
Fw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:49:46 2026 by rpki-client