This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/wpp5N-qFZf6mBWRq9vnWEnrEQBQ.roa
File:                     wpp5N-qFZf6mBWRq9vnWEnrEQBQ.roa (raw, json)
Hash identifier:          cleLa85DUO7TQWnRxwz4qVeqexG2xRWnRgTyEvhQH04=
Subject key identifier:   C2:9A:79:37:EA:85:65:FE:A6:05:64:6A:F6:F9:D6:12:7A:C4:40:14
Certificate issuer:       /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial:       019B7BA49AEAD88E459842628EC94DDC9113
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/wpp5N-qFZf6mBWRq9vnWEnrEQBQ.roa
Signing time:             Thu 01 Jan 2026 22:19:03 +0000
ROA not before:           Thu 01 Jan 2026 22:19:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58033
IP address blocks:        45.135.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:9a:ea:d8:8e:45:98:42:62:8e:c9:4d:dc:91:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
        Validity
            Not Before: Jan  1 22:19:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c29a7937ea8565fea605646af6f9d6127ac44014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3c:4f:c3:c4:2a:e9:4a:79:97:1d:e0:f6:99:
                    56:25:a0:19:b3:96:14:71:da:cf:fb:26:59:72:c6:
                    a0:81:4c:5c:74:4f:1b:40:67:c7:5f:5d:f0:5b:80:
                    2c:b2:0a:bb:41:46:b3:5e:07:52:88:b6:9a:a1:81:
                    47:4a:33:11:e4:e2:53:3f:0c:f3:05:b5:e8:1c:3c:
                    e3:38:a2:50:4a:1c:4f:09:de:91:8e:3f:8d:c2:61:
                    0c:2d:4d:0c:15:31:7b:91:6e:72:1c:68:29:2e:aa:
                    2b:54:d5:fc:3a:5f:1f:5b:0c:f4:63:5f:9b:5a:a4:
                    07:4e:19:6c:fc:46:21:4a:10:24:e1:65:4e:65:61:
                    f4:c4:ad:92:cf:65:e6:f3:a4:c8:7a:8b:bd:7f:25:
                    79:d2:28:25:fa:0c:08:18:cb:38:a9:bf:b1:81:87:
                    ef:89:09:eb:40:ba:88:db:49:33:8e:6b:2a:5f:33:
                    ef:71:76:0e:27:2c:e7:65:e0:e4:49:82:45:21:37:
                    9d:22:3d:a3:30:cc:52:b2:86:fc:94:4f:28:76:f7:
                    50:31:ac:ce:c0:9d:62:28:83:fb:01:c4:7b:40:6c:
                    97:80:8c:00:a3:58:9e:5e:3d:7a:4f:9c:06:6b:7f:
                    00:e1:4f:de:09:81:49:4d:d2:2d:00:be:e5:6a:48:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9A:79:37:EA:85:65:FE:A6:05:64:6A:F6:F9:D6:12:7A:C4:40:14
            X509v3 Authority Key Identifier:
                keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/wpp5N-qFZf6mBWRq9vnWEnrEQBQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:db:66:99:06:6b:72:64:a9:57:d0:d3:10:99:30:aa:38:78:
         d7:3e:32:61:9a:48:1c:f1:29:de:11:4a:a3:c9:c6:a8:76:17:
         ce:fb:fc:bf:20:da:22:33:c2:6b:29:eb:06:7b:09:a8:d5:43:
         73:a6:3b:43:23:88:a3:f3:67:a0:49:97:f0:3a:25:21:af:04:
         a3:84:1d:c4:b7:8c:06:7f:89:34:55:93:d8:57:9b:94:c1:ac:
         56:30:ea:bf:11:13:fa:5d:39:7c:06:1f:be:bd:82:46:9e:23:
         d8:3e:69:fe:7b:1c:d4:66:ee:fe:2a:66:c7:40:1e:36:fd:ce:
         82:df:43:43:f4:25:79:c2:fe:f5:fd:52:a1:00:f3:bb:a6:28:
         1b:0c:48:6b:4f:a1:0e:fc:f4:41:1f:fe:50:08:90:f3:8b:93:
         ca:3c:71:74:47:f6:42:03:2d:45:46:92:ba:e4:fc:25:3a:15:
         82:16:4b:ba:c1:01:f1:0c:3e:8f:53:dc:59:f3:13:70:8b:4d:
         d3:cc:73:45:11:c3:ce:40:c4:1b:87:ac:1c:ce:26:2c:c4:ca:
         4e:36:5a:bd:d1:a4:01:23:e7:72:93:03:42:3a:57:48:7c:08:
         2f:97:74:e8:ab:93:24:9b:ba:ce:ca:75:af:d3:2e:c2:93:4e:
         1b:8d:c9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:36:15 2026 by rpki-client