This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/29_WowYfqJe9zWky2i9zd1IMKO8.roa
File:                     29_WowYfqJe9zWky2i9zd1IMKO8.roa (raw, json)
Hash identifier:          t5yfXmceGMHi1hJ7+A0WmF++eREcNUx+HaoZlDGeCzE=
Subject key identifier:   DB:DF:D6:A3:06:1F:A8:97:BD:CD:69:32:DA:2F:73:77:52:0C:28:EF
Certificate issuer:       /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial:       019B7BA53CDF41DE52DD6BE8387FB586AFB4
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/29_WowYfqJe9zWky2i9zd1IMKO8.roa
Signing time:             Thu 01 Jan 2026 22:19:45 +0000
ROA not before:           Thu 01 Jan 2026 22:19:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     64404
IP address blocks:        94.45.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a5:3c:df:41:de:52:dd:6b:e8:38:7f:b5:86:af:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
        Validity
            Not Before: Jan  1 22:19:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dbdfd6a3061fa897bdcd6932da2f7377520c28ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:86:f4:36:31:9c:5f:1d:27:ae:cf:64:f3:92:
                    fd:4e:c6:d6:84:d6:f3:50:d1:fa:b3:cd:29:a4:f9:
                    b8:91:4f:30:b7:0d:12:e1:5a:49:d8:bf:82:98:8e:
                    d1:02:5e:4e:ab:e2:cd:c4:94:1d:f1:14:96:55:32:
                    b1:d5:4d:4c:cc:30:c5:ea:54:df:b6:9c:db:da:58:
                    aa:ef:ff:46:44:57:36:23:da:f3:83:8c:83:4c:46:
                    7b:01:d2:81:ca:62:d7:4f:ba:de:a6:df:82:10:a7:
                    3c:6a:75:2f:21:ac:d7:f9:a4:63:98:40:6c:62:40:
                    65:84:8a:03:64:72:7e:bd:18:a0:94:c8:cc:9c:1a:
                    11:02:ae:87:ca:ef:07:7e:76:c0:69:04:28:1e:ce:
                    cf:35:90:49:42:dd:8a:20:c7:6e:72:e1:fc:d4:d8:
                    f1:3f:25:f6:e7:f9:89:e0:55:12:51:db:80:a0:e3:
                    f4:1a:ab:8c:c0:33:50:58:a5:16:8c:e1:08:9e:1c:
                    d9:f2:7d:55:a5:7c:2c:65:cf:50:cf:38:b0:e8:1f:
                    43:db:6b:10:5f:91:9b:98:67:55:bb:f9:6c:13:42:
                    1d:e1:48:56:5c:ff:db:72:3a:06:87:dc:2f:47:46:
                    ac:89:fa:0e:72:17:ab:7d:60:8a:34:49:ec:e0:d1:
                    c1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DF:D6:A3:06:1F:A8:97:BD:CD:69:32:DA:2F:73:77:52:0C:28:EF
            X509v3 Authority Key Identifier:
                keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/29_WowYfqJe9zWky2i9zd1IMKO8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.45.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         84:95:94:9b:c7:ba:1c:06:9a:d9:5b:de:f8:e7:6d:ff:89:9f:
         1b:a8:7e:19:02:fd:c8:67:a3:81:ca:dc:33:86:22:20:01:17:
         eb:84:25:c5:69:f9:b0:e3:80:dd:fe:0a:4d:3a:18:ad:fb:18:
         00:de:c4:07:a0:54:7d:b9:b6:f9:5e:49:ee:3d:a9:bb:19:32:
         29:6b:de:b6:b7:09:e5:9f:3b:8d:d8:65:28:50:50:8a:9a:b9:
         bc:52:3e:64:f4:30:cc:b1:5a:70:19:e8:b6:05:fb:64:2e:0b:
         9a:fd:2e:5a:27:5a:ff:f4:a5:f8:b0:35:a5:2b:be:b1:6b:32:
         9c:cf:e8:bd:b4:00:48:70:60:70:62:13:db:22:90:3c:e4:60:
         d4:0d:f3:a8:47:44:d0:54:8d:64:e6:e9:4c:8b:5d:31:0b:52:
         92:89:0b:8e:b7:f1:ab:6d:3a:df:65:e2:bd:d6:92:a1:bb:79:
         6a:63:b7:1a:80:e4:81:32:cf:54:9f:52:74:0c:f2:10:08:d9:
         e0:6a:a1:a6:d2:45:11:a7:8f:90:83:0b:d9:71:00:07:6c:39:
         42:81:1a:b2:79:45:e7:65:8f:eb:d4:2f:d2:27:02:ac:8e:f3:
         5d:c2:48:30:09:70:c2:a8:28:44:e7:ef:80:7c:17:40:73:af:
         54:47:49:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7pTzfQd5S3WvoOH+1hq+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDc5YzQyOWE3MTQ2ZjFmOWFhMDQ5YmRiNDJjYTk1MTQ0
Yjc0ZGEwHhcNMjYwMTAxMjIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmRmZDZhMzA2MWZhODk3YmRjZDY5MzJkYTJmNzM3NzUyMGMyOGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA94b0NjGcXx0nrs9k85L9TsbWhNbz
UNH6s80ppPm4kU8wtw0S4VpJ2L+CmI7RAl5Oq+LNxJQd8RSWVTKx1U1MzDDF6lTf
tpzb2liq7/9GRFc2I9rzg4yDTEZ7AdKBymLXT7rept+CEKc8anUvIazX+aRjmEBs
YkBlhIoDZHJ+vRiglMjMnBoRAq6Hyu8HfnbAaQQoHs7PNZBJQt2KIMducuH81Njx
PyX25/mJ4FUSUduAoOP0GquMwDNQWKUWjOEInhzZ8n1VpXwsZc9Qzziw6B9D22sQ
X5GbmGdVu/lsE0Id4UhWXP/bcjoGh9wvR0asifoOcherfWCKNEns4NHBawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNvf1qMGH6iXvc1pMtovc3dSDCjvMB8GA1UdIwQY
MBaAFAYHnEKacUbx+aoEm9tCypUUS3TaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdlY1FwcHhSdkg1cWdTYjIwTEtsUlJMZE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83NDA1ODktODVjZC00OTdhLTkwYzEt
YTJmOWE4YTUxYmIwLzEvMjlfV293WWZxSmU5eldreTJpOXpkMUlNS084LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi83NDA1ODktODVjZC00OTdhLTkwYzEtYTJmOWE4YTUxYmIw
LzEvQmdlY1FwcHhSdkg1cWdTYjIwTEtsUlJMZE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFXi3gMA0G
CSqGSIb3DQEBCwUAA4IBAQCElZSbx7ocBprZW974523/iZ8bqH4ZAv3IZ6OBytwz
hiIgARfrhCXFafmw44Dd/gpNOhit+xgA3sQHoFR9ubb5XknuPam7GTIpa962twnl
nzuN2GUoUFCKmrm8Uj5k9DDMsVpwGei2BftkLgua/S5aJ1r/9KX4sDWlK76xazKc
z+i9tABIcGBwYhPbIpA85GDUDfOoR0TQVI1k5ulMi10xC1KSiQuOt/GrbTrfZeK9
1pKhu3lqY7cagOSBMs9Un1J0DPIQCNngaqGm0kURp4+QgwvZcQAHbDlCgRqyeUXn
ZY/r1C/SJwKsjvNdwkgwCXDCqChE5++AfBdAc69UR0nq
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:07:01 2026 by rpki-client