This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/wGOi-hc1qunRv3mfhlCNuwgWq88.roa
File:                     wGOi-hc1qunRv3mfhlCNuwgWq88.roa (raw, json)
Hash identifier:          VEFeNu27Mw/MaO7I2TqKbQuNe8tJIgFySJ8plRBHBzM=
Subject key identifier:   C0:63:A2:FA:17:35:AA:E9:D1:BF:79:9F:86:50:8D:BB:08:16:AB:CF
Certificate issuer:       /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial:       019B7C805F5762CDFEC2B4C076E522A316C8
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/wGOi-hc1qunRv3mfhlCNuwgWq88.roa
Signing time:             Fri 02 Jan 2026 02:19:06 +0000
ROA not before:           Fri 02 Jan 2026 02:19:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50515
IP address blocks:        92.55.144.0/24 maxlen: 24
                          92.55.147.0/24 maxlen: 24
                          188.247.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:5f:57:62:cd:fe:c2:b4:c0:76:e5:22:a3:16:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
        Validity
            Not Before: Jan  2 02:19:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c063a2fa1735aae9d1bf799f86508dbb0816abcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:1a:0d:10:87:59:46:34:d3:38:d8:08:48:
                    65:d3:c0:12:e6:a7:bd:36:68:76:e6:ad:96:fe:f4:
                    a5:d7:27:0b:20:bf:b9:5b:12:38:23:fc:20:23:22:
                    4d:51:2e:2f:81:05:95:5a:a7:65:ea:e3:9f:41:9f:
                    0f:77:61:09:c5:22:f5:6d:80:0d:10:69:a2:c6:50:
                    0c:f8:3a:c9:fb:54:d1:2e:40:57:61:c3:2a:cb:f5:
                    98:bb:21:28:10:6a:12:e3:f6:05:67:b7:55:3e:2a:
                    12:72:d0:6c:dc:30:8e:11:14:60:56:f9:40:9c:b4:
                    13:38:7a:b4:f1:f1:13:dd:73:7e:ab:65:f4:74:f0:
                    04:74:d6:e2:6a:a5:8c:83:92:ab:80:97:8e:9d:94:
                    da:37:f1:57:e8:35:d4:20:08:fa:af:6c:32:2d:e9:
                    fa:f6:fa:ae:d1:34:e9:ab:46:8e:72:0f:6f:59:5d:
                    ef:03:4f:6e:6e:3a:73:f1:74:52:32:4e:86:8e:48:
                    db:36:43:8f:91:a8:35:02:e4:df:bb:92:6e:26:4e:
                    39:49:f4:1d:0c:0f:02:16:69:5f:9f:95:fd:5a:54:
                    ca:2b:f4:dd:08:be:dc:e9:ff:20:2c:0d:99:f5:54:
                    c9:7f:28:f3:8f:d1:4c:3e:02:9c:a7:ca:e1:54:88:
                    48:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:63:A2:FA:17:35:AA:E9:D1:BF:79:9F:86:50:8D:BB:08:16:AB:CF
            X509v3 Authority Key Identifier:
                keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/wGOi-hc1qunRv3mfhlCNuwgWq88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.55.144.0/24
                  92.55.147.0/24
                  188.247.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:44:33:1a:5a:0c:e4:76:e3:56:3b:f9:0f:83:85:c3:fb:8c:
         41:47:71:f1:4f:8c:37:27:e5:4e:ff:ed:06:72:02:81:06:80:
         9c:f7:02:35:e4:ff:77:c4:fc:f5:82:81:14:90:e9:9f:91:09:
         32:9b:c3:34:fa:2c:3a:05:99:7d:2c:4c:97:17:74:54:78:e9:
         fe:a5:d9:ca:ec:62:4a:43:b1:34:44:0d:ae:3f:e4:58:e1:60:
         09:a3:91:3e:08:f1:c3:63:c4:07:6f:4d:e2:2c:ed:bc:2f:c1:
         0c:cc:27:3b:06:b8:1f:81:c9:4d:65:31:cd:4a:66:34:a4:dd:
         6e:d4:0e:93:67:40:c7:4e:a9:b1:15:aa:64:f7:ae:3a:ac:b0:
         a1:a4:a2:2b:65:43:cd:06:cf:d0:32:9e:a0:f6:8d:89:90:f7:
         13:cd:22:60:20:5f:cc:a4:13:42:47:00:53:ea:1d:f2:e1:02:
         1c:9f:b3:4d:79:e2:a6:a8:8f:0f:d5:35:77:15:13:31:ee:2a:
         67:dc:7e:c8:32:8f:b3:c9:58:52:b2:1e:67:4a:65:94:fa:a2:
         fd:6a:a9:76:5c:a1:40:72:3f:50:9d:e3:7e:18:49:79:a7:01:
         7d:f6:b2:c7:1f:d6:8e:b1:d9:8c:1d:d0:76:75:15:06:dd:98:
         bf:8b:ec:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:07:10 2026 by rpki-client