This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/W3hhR_MWm8FikTPJRp6o_VQnXA0.roa
File:                     W3hhR_MWm8FikTPJRp6o_VQnXA0.roa (raw, json)
Hash identifier:          vK6MxICKcDVyVjVjG79m8c8QbxgeoBaApQBho1dzztk=
Subject key identifier:   5B:78:61:47:F3:16:9B:C1:62:91:33:C9:46:9E:A8:FD:54:27:5C:0D
Certificate issuer:       /CN=e889cbbf69e3a67caa83b54debec2722e5536883
Certificate serial:       019B7EA6E0A144509019DE2B4EE82D1E6D3F
Authority key identifier: E8:89:CB:BF:69:E3:A6:7C:AA:83:B5:4D:EB:EC:27:22:E5:53:68:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6InLv2njpnyqg7VN6-wnIuVTaIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/W3hhR_MWm8FikTPJRp6o_VQnXA0.roa
Signing time:             Fri 02 Jan 2026 12:20:24 +0000
ROA not before:           Fri 02 Jan 2026 12:20:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202468
IP address blocks:        185.74.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/6InLv2njpnyqg7VN6-wnIuVTaIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/6InLv2njpnyqg7VN6-wnIuVTaIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6InLv2njpnyqg7VN6-wnIuVTaIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:e0:a1:44:50:90:19:de:2b:4e:e8:2d:1e:6d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e889cbbf69e3a67caa83b54debec2722e5536883
        Validity
            Not Before: Jan  2 12:20:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5b786147f3169bc1629133c9469ea8fd54275c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:20:7b:f8:b6:8c:1d:1b:d2:a5:5d:a8:b5:68:
                    f6:92:83:3d:35:da:aa:b0:0a:15:b6:53:e4:75:ba:
                    bb:0b:55:4e:1a:40:e8:21:8e:73:81:21:a0:17:ce:
                    60:63:b2:cd:30:65:08:bf:7f:48:16:87:c3:da:89:
                    b6:ed:b2:50:9b:22:23:98:0f:55:85:07:89:22:1e:
                    6d:9d:10:b2:9b:8b:e4:1e:ba:90:3e:a8:64:e5:dc:
                    bc:35:5b:61:88:f0:45:d8:0b:ad:80:d5:d4:af:fd:
                    0e:35:f3:2b:81:6b:66:65:2f:ab:1f:9f:38:6e:94:
                    5f:7f:45:6e:96:ac:05:de:08:9a:d4:40:38:28:06:
                    44:59:b5:81:7a:5c:d2:76:07:8f:ba:df:21:2e:d3:
                    4a:58:40:1f:39:c6:d8:4f:fa:dd:4f:63:b3:34:b5:
                    03:e0:3a:77:cc:46:3e:ae:dc:3f:fb:08:5c:68:04:
                    12:3d:d6:95:5e:b9:17:cd:51:24:3f:00:c7:43:46:
                    c4:5e:1b:27:ca:25:84:f7:4b:db:f6:3a:a3:f6:3a:
                    86:cf:8c:68:87:90:48:e0:bf:fb:8c:73:91:3a:b1:
                    28:10:b1:5a:d5:51:99:ce:46:c0:ca:1f:35:51:f1:
                    d6:43:47:8b:43:8a:cc:ba:a9:14:db:71:e8:29:a9:
                    f2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:78:61:47:F3:16:9B:C1:62:91:33:C9:46:9E:A8:FD:54:27:5C:0D
            X509v3 Authority Key Identifier:
                keyid:E8:89:CB:BF:69:E3:A6:7C:AA:83:B5:4D:EB:EC:27:22:E5:53:68:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6InLv2njpnyqg7VN6-wnIuVTaIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/W3hhR_MWm8FikTPJRp6o_VQnXA0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/6InLv2njpnyqg7VN6-wnIuVTaIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.74.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:4f:28:0f:2e:07:c2:2f:a9:03:4a:b1:2e:58:03:92:76:29:
         04:3b:32:37:4e:82:db:89:b1:2b:53:67:f3:f4:07:c9:d8:77:
         49:20:8c:10:41:7a:80:6a:6b:ca:a5:09:09:6d:92:6e:54:02:
         e7:a4:e6:40:40:e2:76:3d:88:14:9d:e3:f0:3b:70:9e:6a:a7:
         fd:3a:fd:7c:b4:22:fa:95:bf:8b:4d:01:10:e6:e1:d2:4a:4c:
         0c:28:f6:6b:48:c3:8e:5a:6d:c0:80:45:3c:87:79:30:76:b9:
         a2:eb:26:36:6b:f8:84:b6:29:e4:05:9b:8b:ca:ab:1b:c8:45:
         a8:1e:2d:db:b3:a8:84:f7:1d:0e:af:4a:cc:49:a0:a1:13:67:
         c6:d9:24:b8:03:e2:01:5e:fb:56:f4:9a:0d:61:bf:63:bd:c0:
         93:03:fc:ff:7c:18:3a:44:5e:e4:37:ab:11:7e:8e:00:e1:4a:
         65:a1:c9:f4:bb:de:68:2c:0d:bf:ed:88:c2:ee:c4:5e:7d:d3:
         21:c6:58:b4:92:cd:22:6d:14:bc:cc:b4:9b:77:b2:55:bf:d2:
         5a:3f:36:82:e8:ac:67:1e:49:b8:c4:1f:88:9a:9b:5f:bb:db:
         23:70:92:5e:77:ae:07:be:ea:c4:c5:b9:47:6a:79:8c:4a:24:
         cc:56:b0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:24:00 2026 by rpki-client