This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/KtMoxujHDMKqRB6H459cjps8trI.roa
File:                     KtMoxujHDMKqRB6H459cjps8trI.roa (raw, json)
Hash identifier:          saGhvK5NfBuDqT3eJSCSAMkIA6Pwz96+GfVbIkbkoPw=
Subject key identifier:   2A:D3:28:C6:E8:C7:0C:C2:AA:44:1E:87:E3:9F:5C:8E:9B:3C:B6:B2
Certificate issuer:       /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial:       019BE07A4EEC84718E4C70E872EAFF3AD41E
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/KtMoxujHDMKqRB6H459cjps8trI.roa
Signing time:             Wed 21 Jan 2026 12:14:30 +0000
ROA not before:           Wed 21 Jan 2026 12:14:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151331
IP address blocks:        2a14:c380:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e0:7a:4e:ec:84:71:8e:4c:70:e8:72:ea:ff:3a:d4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
        Validity
            Not Before: Jan 21 12:14:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2ad328c6e8c70cc2aa441e87e39f5c8e9b3cb6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:30:a1:a1:47:07:a6:ac:b6:8b:47:b7:27:af:
                    22:41:06:29:d1:4c:cc:b1:93:a8:81:d2:39:76:e2:
                    72:01:57:09:97:47:d2:64:c8:45:84:dc:7f:9b:56:
                    14:c6:c6:5d:05:8a:12:ed:cf:0f:1c:5b:f6:ae:03:
                    92:cd:ba:5f:3e:95:c5:f5:2b:53:b0:ec:24:3e:07:
                    45:66:05:cc:70:11:11:18:1c:4f:42:20:0d:05:7e:
                    da:fe:c6:85:37:3e:34:44:58:c3:41:f0:6f:a0:2a:
                    ab:e4:42:0e:77:de:0a:a2:03:a4:7e:d2:c8:da:65:
                    51:07:04:e3:6f:89:c0:a9:ca:00:36:8a:17:cb:49:
                    39:3c:d1:e6:36:02:46:72:71:26:e1:55:e1:d6:7a:
                    36:64:a0:cf:1e:31:1f:b0:92:25:06:00:54:32:95:
                    f3:d6:c8:38:f4:b9:e6:1e:c7:37:d7:ea:e5:4d:81:
                    5c:6b:6f:85:39:ce:d1:1f:4c:99:8e:1b:59:a7:99:
                    87:f5:cb:4b:9b:a5:6a:a2:76:d2:a5:95:90:03:68:
                    fb:ad:87:0a:e9:e3:0d:eb:98:b1:64:e9:09:f4:9a:
                    7e:59:06:f0:a7:0d:2c:2f:7c:8f:49:d9:5d:9b:08:
                    12:c6:1e:4b:99:10:1c:c4:6a:5d:f0:87:86:54:53:
                    49:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D3:28:C6:E8:C7:0C:C2:AA:44:1E:87:E3:9F:5C:8E:9B:3C:B6:B2
            X509v3 Authority Key Identifier:
                keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/KtMoxujHDMKqRB6H459cjps8trI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:c380:21::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:fd:0d:60:04:8d:94:b9:2f:c8:26:f4:56:5d:78:76:73:1c:
         07:93:7d:be:f4:77:f8:d3:6a:b3:46:41:7a:76:ab:7f:85:8f:
         e0:18:78:5b:bd:e7:3a:c0:a1:a2:4e:f3:19:8d:82:f7:de:24:
         89:33:00:70:99:c2:6d:74:47:c3:37:74:aa:a2:c8:a1:e1:a7:
         62:63:88:47:ea:7e:39:76:71:25:84:e3:2f:64:72:0a:4e:10:
         de:3f:5e:7d:4a:dd:ef:a9:49:4e:ca:08:fc:b5:0f:fa:ef:66:
         aa:cf:67:0c:66:65:75:fe:15:22:db:f9:c1:b1:e0:05:3c:ef:
         6b:42:18:03:e6:5e:e7:19:cc:1a:1e:91:fa:d9:ae:a5:20:ad:
         cc:6e:95:7d:c2:04:f4:ce:6a:4f:a2:c0:9b:f9:98:73:95:9d:
         20:33:5e:f3:ba:2a:36:c6:a6:cd:9d:d4:bc:80:45:3c:c8:13:
         6d:f6:77:b3:89:9e:00:4d:29:58:16:1b:9e:57:d0:90:68:a2:
         19:5b:04:e0:f1:19:3a:75:fc:3e:13:72:55:c4:fb:26:a3:07:
         df:ae:fb:80:79:3c:1e:33:5b:56:af:95:b7:74:f9:cd:d2:15:
         7a:29:53:1d:8b:e0:77:04:56:8d:92:a1:2e:7b:03:7e:c0:58:
         f2:83:33:83
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZvgek7shHGOTHDocur/OtQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2
ZDI1MTIwHhcNMjYwMTIxMTIxNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWQzMjhjNmU4YzcwY2MyYWE0NDFlODdlMzlmNWM4ZTliM2NiNmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTChoUcHpqy2i0e3J68iQQYp0UzM
sZOogdI5duJyAVcJl0fSZMhFhNx/m1YUxsZdBYoS7c8PHFv2rgOSzbpfPpXF9StT
sOwkPgdFZgXMcBERGBxPQiANBX7a/saFNz40RFjDQfBvoCqr5EIOd94KogOkftLI
2mVRBwTjb4nAqcoANooXy0k5PNHmNgJGcnEm4VXh1no2ZKDPHjEfsJIlBgBUMpXz
1sg49LnmHsc31+rlTYFca2+FOc7RH0yZjhtZp5mH9ctLm6VqonbSpZWQA2j7rYcK
6eMN65ixZOkJ9Jp+WQbwpw0sL3yPSdldmwgSxh5LmRAcxGpd8IeGVFNJTQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCrTKMboxwzCqkQeh+OfXI6bPLayMB8GA1UdIwQY
MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt
NTMyMWQ2OWQ5NzlkLzEvS3RNb3h1akhETUtxUkI2SDQ1OWNqcHM4dHJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk
LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhTDgAAh
MA0GCSqGSIb3DQEBCwUAA4IBAQBg/Q1gBI2UuS/IJvRWXXh2cxwHk32+9Hf402qz
RkF6dqt/hY/gGHhbvec6wKGiTvMZjYL33iSJMwBwmcJtdEfDN3Sqosih4adiY4hH
6n45dnElhOMvZHIKThDeP159St3vqUlOygj8tQ/672aqz2cMZmV1/hUi2/nBseAF
PO9rQhgD5l7nGcwaHpH62a6lIK3MbpV9wgT0zmpPosCb+ZhzlZ0gM17zuio2xqbN
ndS8gEU8yBNt9neziZ4ATSlYFhueV9CQaKIZWwTg8Rk6dfw+E3JVxPsmowffrvuA
eTweM1tWr5W3dPnN0hV6KVMdi+B3BFaNkqEuewN+wFjygzOD
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:17:49 2026 by rpki-client