This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/wwGJXI1Q4Ez5sml_ZmTVacx8kBM.roa
File:                     wwGJXI1Q4Ez5sml_ZmTVacx8kBM.roa (raw, json)
Hash identifier:          sku+gN8eL3JC9irfaIS3rJD2l21DtLI/BG8hhkJ6nL0=
Subject key identifier:   C3:01:89:5C:8D:50:E0:4C:F9:B2:69:7F:66:64:D5:69:CC:7C:90:13
Certificate issuer:       /CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Certificate serial:       019B7E380194E2FD0B9D5392181DB966FA20
Authority key identifier: 7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/wwGJXI1Q4Ez5sml_ZmTVacx8kBM.roa
Signing time:             Fri 02 Jan 2026 10:19:18 +0000
ROA not before:           Fri 02 Jan 2026 10:19:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     12703
IP address blocks:        185.71.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:01:94:e2:fd:0b:9d:53:92:18:1d:b9:66:fa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
        Validity
            Not Before: Jan  2 10:19:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c301895c8d50e04cf9b2697f6664d569cc7c9013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e4:55:82:9d:1f:9f:bd:c6:32:5b:be:1e:2e:
                    23:15:5e:1e:1f:e0:bb:85:c3:2d:86:61:e1:11:53:
                    18:dc:85:b8:1a:ea:1d:4d:5d:86:44:8b:73:f1:87:
                    59:74:9a:ab:8d:5b:8a:74:53:0c:19:8b:95:05:b7:
                    32:aa:82:ae:e1:c4:e5:93:3e:ee:f2:9f:99:96:f6:
                    37:33:c6:9a:bf:47:5b:01:57:01:a9:89:75:b2:34:
                    f4:fa:b4:5e:74:1c:be:f4:b8:ca:6d:36:32:26:74:
                    8f:f9:29:a1:7e:9d:a1:d4:5d:a1:cd:a4:e0:cc:20:
                    77:05:74:da:34:c3:48:0b:26:c9:9b:05:e2:a8:15:
                    75:cf:3b:eb:aa:31:50:4d:dd:6e:64:a4:27:38:44:
                    83:03:2f:c7:45:fa:0a:80:32:7b:af:5d:72:ff:0b:
                    f7:74:01:c3:30:e8:ff:e8:3b:71:fa:fb:af:c8:3b:
                    8b:60:15:86:63:c0:7f:42:90:aa:1c:84:7f:f4:68:
                    fe:c7:33:ef:76:13:6b:ba:20:25:9f:5e:40:0e:5a:
                    13:55:01:ef:e5:4a:ef:bb:a6:06:26:da:90:e8:39:
                    03:f1:ed:80:a9:ba:65:78:c1:32:d2:23:9a:51:bc:
                    46:5c:82:f3:07:71:01:42:c0:ef:28:6f:61:af:8f:
                    97:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:01:89:5C:8D:50:E0:4C:F9:B2:69:7F:66:64:D5:69:CC:7C:90:13
            X509v3 Authority Key Identifier:
                keyid:7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/wwGJXI1Q4Ez5sml_ZmTVacx8kBM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.71.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:1a:b1:ff:32:cb:05:8e:b1:37:b1:90:78:19:90:cf:12:ee:
         76:83:36:60:e8:19:ef:12:e1:55:9d:ee:d6:24:84:7f:53:78:
         88:7d:75:58:b0:f2:dd:a6:bb:1b:f6:65:c0:28:52:cc:93:3c:
         2d:ee:da:8b:28:fd:6e:ba:6d:74:2b:40:10:43:db:67:ff:cb:
         5c:f7:8a:6b:cb:47:56:ea:b3:5e:b1:2f:88:1c:d8:ed:b1:e2:
         f6:8f:01:19:80:8c:20:b2:b0:e0:1e:b6:77:cc:59:0c:32:00:
         e9:53:a3:05:06:2a:9b:66:24:a3:9d:e0:3b:ed:bb:fc:67:39:
         f3:77:ff:14:f0:7f:2b:b5:5d:81:59:66:6e:06:34:1a:6b:a6:
         97:b8:94:49:24:32:5b:ad:d9:b9:c0:c3:52:dc:22:0e:1c:bc:
         0c:82:f9:1b:c6:83:07:72:e0:6a:16:eb:de:0b:d0:e7:8d:61:
         34:b1:5d:e2:84:c3:35:75:53:fc:cf:2a:08:68:ea:2e:cf:73:
         2e:06:94:65:3e:84:6f:bc:48:60:0f:1e:fb:a8:59:b2:f1:8e:
         de:0e:4f:51:b1:23:59:37:d4:fd:8b:75:4e:55:9b:df:10:1f:
         65:70:81:e9:29:8a:4e:a4:d9:ea:bb:50:c3:78:64:b0:0c:46:
         f2:7a:32:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+OAGU4v0LnVOSGB25ZvogMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNWRiYjBiOWUzNTM4MTg1ZjNlNmQ2ZTNjN2RhMmY4OTIy
YzhjZTAwHhcNMjYwMTAyMTAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzAxODk1YzhkNTBlMDRjZjliMjY5N2Y2NjY0ZDU2OWNjN2M5MDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeRVgp0fn73GMlu+Hi4jFV4eH+C7
hcMthmHhEVMY3IW4GuodTV2GRItz8YdZdJqrjVuKdFMMGYuVBbcyqoKu4cTlkz7u
8p+ZlvY3M8aav0dbAVcBqYl1sjT0+rRedBy+9LjKbTYyJnSP+Smhfp2h1F2hzaTg
zCB3BXTaNMNICybJmwXiqBV1zzvrqjFQTd1uZKQnOESDAy/HRfoKgDJ7r11y/wv3
dAHDMOj/6Dtx+vuvyDuLYBWGY8B/QpCqHIR/9Gj+xzPvdhNruiAln15ADloTVQHv
5Urvu6YGJtqQ6DkD8e2AqbpleMEy0iOaUbxGXILzB3EBQsDvKG9hr4+X8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMMBiVyNUOBM+bJpf2Zk1WnMfJATMB8GA1UdIwQY
MBaAFHxduwueNTgYXz5tbjx9oviSLIzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkYyN0M1NDFPQmhmUG0xdVBIMmktSklzak9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lODEyMGMtNzQ1MS00NWFlLTg5YjAt
NzVmNmU1MjkxODZmLzEvd3dHSlhJMVE0RXo1c21sX1ptVFZhY3g4a0JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lODEyMGMtNzQ1MS00NWFlLTg5YjAtNzVmNmU1MjkxODZm
LzEvZkYyN0M1NDFPQmhmUG0xdVBIMmktSklzak9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUe4MA0G
CSqGSIb3DQEBCwUAA4IBAQAmGrH/MssFjrE3sZB4GZDPEu52gzZg6BnvEuFVne7W
JIR/U3iIfXVYsPLdprsb9mXAKFLMkzwt7tqLKP1uum10K0AQQ9tn/8tc94pry0dW
6rNesS+IHNjtseL2jwEZgIwgsrDgHrZ3zFkMMgDpU6MFBiqbZiSjneA77bv8Zznz
d/8U8H8rtV2BWWZuBjQaa6aXuJRJJDJbrdm5wMNS3CIOHLwMgvkbxoMHcuBqFuve
C9DnjWE0sV3ihMM1dVP8zyoIaOouz3MuBpRlPoRvvEhgDx77qFmy8Y7eDk9RsSNZ
N9T9i3VOVZvfEB9lcIHpKYpOpNnqu1DDeGSwDEbyejJ5
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:35:14 2026 by rpki-client