This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/40WOA288Q_jSUFllbasR15JjMsc.roa
File:                     40WOA288Q_jSUFllbasR15JjMsc.roa (raw, json)
Hash identifier:          A94QwYbFqJm6hs1SWfNhMYpDaq8tC8TaimLHf8Tikbg=
Subject key identifier:   E3:45:8E:03:6F:3C:43:F8:D2:50:59:65:6D:AB:11:D7:92:63:32:C7
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       019BE1AD05FB9FF8912DEF54E2CA7454829D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/40WOA288Q_jSUFllbasR15JjMsc.roa
Signing time:             Wed 21 Jan 2026 17:49:31 +0000
ROA not before:           Wed 21 Jan 2026 17:49:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205168
IP address blocks:        151.247.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e1:ad:05:fb:9f:f8:91:2d:ef:54:e2:ca:74:54:82:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Jan 21 17:49:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e3458e036f3c43f8d25059656dab11d7926332c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:fb:aa:05:d7:11:71:af:6f:6d:84:1f:10:
                    87:53:a9:df:8c:2c:54:fa:90:dc:fa:ca:ec:d2:32:
                    44:e3:cc:6e:30:4f:87:7e:bb:41:6d:35:80:16:a6:
                    0f:bb:78:d6:05:2a:14:9f:1b:74:37:7d:c3:e8:95:
                    2b:72:dd:0a:6b:8f:47:dc:4e:45:4a:69:be:db:09:
                    3e:f7:1c:a7:f3:39:4b:cc:74:ce:4b:c0:2d:48:ed:
                    31:7e:b6:c6:fe:a7:1e:3f:94:ab:6e:f1:60:de:db:
                    98:1a:a4:7f:84:51:12:cd:81:ca:e9:29:d0:25:c7:
                    3c:4f:dc:b9:9a:fd:55:a7:a9:8a:fa:93:38:06:57:
                    f9:91:56:1e:13:fa:b4:b7:f2:1b:81:9d:d0:2b:2c:
                    ba:88:b2:33:f0:51:86:eb:f6:ce:b6:6c:80:6d:d9:
                    1f:42:f6:38:26:34:9b:77:ed:db:9f:e4:83:12:d4:
                    cf:34:ac:aa:97:cb:17:5d:aa:a7:96:5b:bc:2f:7c:
                    a4:78:75:46:8f:2d:e7:0e:7d:1c:c1:8d:35:9f:3f:
                    76:6f:e2:1f:f7:56:18:02:d3:f9:ea:db:94:17:fa:
                    f0:9a:c9:cc:f3:60:2e:2d:07:7c:f3:ab:22:52:92:
                    37:8a:29:81:c5:9d:d8:62:4b:1b:b8:2d:cb:5f:5e:
                    8a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:45:8E:03:6F:3C:43:F8:D2:50:59:65:6D:AB:11:D7:92:63:32:C7
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/40WOA288Q_jSUFllbasR15JjMsc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.247.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:4e:5b:95:78:48:8c:af:c0:53:0c:c7:14:91:64:db:37:70:
         71:56:0c:7b:40:d2:84:6a:39:17:96:dc:91:21:ae:23:fd:14:
         31:28:23:f6:ff:ca:79:a1:46:87:49:1f:84:1d:3d:4b:b1:d6:
         97:bf:19:03:72:bd:25:ee:0f:30:a1:7f:49:7d:b5:cb:88:fc:
         2c:ea:dc:9c:a7:bd:1d:e7:57:8c:d0:26:01:15:b7:b0:59:7c:
         df:d8:8a:5f:ff:23:02:06:51:3e:2a:b8:33:c4:93:b2:fa:0c:
         4a:a2:f5:09:5e:f5:09:b5:54:02:29:21:fa:70:65:9e:cf:08:
         42:e7:3e:4d:48:2d:58:19:92:20:15:97:6a:76:14:0d:0a:fe:
         d4:7e:53:38:aa:a0:26:cd:a4:e9:12:d4:da:be:a6:3f:5a:78:
         93:ab:97:62:ca:f4:b0:5d:da:77:5b:cd:b7:b4:5b:2c:1d:de:
         c4:96:c3:fa:6d:a5:85:9c:45:06:b8:ae:6d:57:73:67:b2:25:
         66:7a:fa:bf:90:17:ac:93:be:60:35:0e:13:b0:3a:4a:d6:e1:
         9a:97:07:dc:e8:ac:e8:20:1b:17:6c:40:00:26:99:6c:7b:41:
         8b:09:19:3c:fc:b1:9b:9d:b9:aa:88:58:e2:7d:9e:b4:69:de:
         7d:13:c1:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZvhrQX7n/iRLe9U4sp0VIKdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMTIxMTc0OTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzQ1OGUwMzZmM2M0M2Y4ZDI1MDU5NjU2ZGFiMTFkNzkyNjMzMmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtX7qgXXEXGvb22EHxCHU6nfjCxU
+pDc+srs0jJE48xuME+HfrtBbTWAFqYPu3jWBSoUnxt0N33D6JUrct0Ka49H3E5F
Smm+2wk+9xyn8zlLzHTOS8AtSO0xfrbG/qceP5SrbvFg3tuYGqR/hFESzYHK6SnQ
Jcc8T9y5mv1Vp6mK+pM4Blf5kVYeE/q0t/IbgZ3QKyy6iLIz8FGG6/bOtmyAbdkf
QvY4JjSbd+3bn+SDEtTPNKyql8sXXaqnllu8L3ykeHVGjy3nDn0cwY01nz92b+If
91YYAtP56tuUF/rwmsnM82AuLQd886siUpI3iimBxZ3YYksbuC3LX16K3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFONFjgNvPEP40lBZZW2rEdeSYzLHMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvNDBXT0EyODhRX2pTVUZsbGJhc1IxNUpqTXNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/cTMA0G
CSqGSIb3DQEBCwUAA4IBAQA9TluVeEiMr8BTDMcUkWTbN3BxVgx7QNKEajkXltyR
Ia4j/RQxKCP2/8p5oUaHSR+EHT1LsdaXvxkDcr0l7g8woX9JfbXLiPws6tycp70d
51eM0CYBFbewWXzf2Ipf/yMCBlE+KrgzxJOy+gxKovUJXvUJtVQCKSH6cGWezwhC
5z5NSC1YGZIgFZdqdhQNCv7UflM4qqAmzaTpEtTavqY/WniTq5diyvSwXdp3W823
tFssHd7ElsP6baWFnEUGuK5tV3NnsiVmevq/kBesk75gNQ4TsDpK1uGalwfc6Kzo
IBsXbEAAJplse0GLCRk8/LGbnbmqiFjifZ60ad59E8Eg
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:16:48 2026 by rpki-client