This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WwpYSm8_GzzpIoQtFd4L-HvVxKk.roa
File:                     WwpYSm8_GzzpIoQtFd4L-HvVxKk.roa (raw, json)
Hash identifier:          x/RCYDNkvZxSXNWqg//Ys37pdn8HoSR3mnl4gCvzuk8=
Subject key identifier:   5B:0A:58:4A:6F:3F:1B:3C:E9:22:84:2D:15:DE:0B:F8:7B:D5:C4:A9
Certificate issuer:       /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial:       019C20239DD438E96F4F85FB65C9971134B6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WwpYSm8_GzzpIoQtFd4L-HvVxKk.roa
Signing time:             Mon 02 Feb 2026 20:55:30 +0000
ROA not before:           Mon 02 Feb 2026 20:55:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15083
IP address blocks:        144.31.20.0/22 maxlen: 24
                          144.31.88.0/24 maxlen: 24
                          144.31.124.0/24 maxlen: 24
                          150.241.92.0/24 maxlen: 24
                          150.241.95.0/24 maxlen: 24
                          150.241.100.0/24 maxlen: 24
                          150.241.101.0/24 maxlen: 24
                          150.241.102.0/24 maxlen: 24
                          150.241.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:20:23:9d:d4:38:e9:6f:4f:85:fb:65:c9:97:11:34:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
        Validity
            Not Before: Feb  2 20:55:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5b0a584a6f3f1b3ce922842d15de0bf87bd5c4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:22:e2:08:62:b9:12:3e:24:92:65:a0:05:
                    3f:37:bc:29:2c:5a:e6:aa:12:8c:c2:c7:af:7c:b7:
                    34:bc:af:c2:ff:46:99:d8:cb:2e:25:75:8a:da:fe:
                    e3:50:a9:5f:81:c1:d8:ef:dc:89:97:72:13:9f:ba:
                    54:f3:89:74:a6:4e:4c:e5:26:71:86:29:a9:71:71:
                    6f:be:7e:69:d0:d1:f1:ce:98:75:f9:16:0e:ea:06:
                    3d:7b:fc:84:38:32:b2:e1:75:4d:d3:01:62:50:af:
                    6c:44:22:37:a3:84:0e:1a:9d:d7:3c:b0:22:d3:eb:
                    20:76:3a:b9:7c:45:97:6a:bc:5d:da:7f:f5:5a:cb:
                    7c:b6:01:ed:eb:a3:3d:14:84:db:60:12:a0:0e:48:
                    0c:a1:bb:58:c9:4b:f0:33:b9:6f:8d:3f:19:a0:e4:
                    1b:17:37:d9:f6:22:bd:0e:c0:8a:ca:24:46:b4:1e:
                    50:ab:8c:d9:10:52:db:54:6d:27:ea:aa:8b:86:7e:
                    f5:07:25:7e:fc:ae:d5:d4:87:57:63:05:9f:de:90:
                    9f:6f:e1:9a:2c:28:7f:00:54:97:d9:03:ac:e0:49:
                    6a:1e:60:31:e5:80:8f:a6:6c:0c:5a:ca:8d:41:f8:
                    95:74:94:90:fd:b1:14:67:2d:cb:dd:17:5c:ac:48:
                    79:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0A:58:4A:6F:3F:1B:3C:E9:22:84:2D:15:DE:0B:F8:7B:D5:C4:A9
            X509v3 Authority Key Identifier:
                keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WwpYSm8_GzzpIoQtFd4L-HvVxKk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.31.20.0/22
                  144.31.88.0/24
                  144.31.124.0/24
                  150.241.92.0/24
                  150.241.95.0/24
                  150.241.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:db:e3:e9:7f:e4:2d:79:41:83:3e:08:ee:5e:cc:ce:cd:32:
         4d:32:c2:91:c2:b0:05:0b:66:b7:3f:f9:6c:95:0f:4b:a7:07:
         78:1e:7b:39:b5:53:09:63:6c:fe:55:0b:39:6d:78:e7:72:a2:
         b8:90:96:77:93:a1:4a:10:59:9e:50:98:c2:0e:3c:16:ad:e0:
         9f:18:f5:a1:ac:22:fe:37:05:47:34:f4:2e:50:6b:36:fb:25:
         e1:07:c5:cc:ea:d8:a9:d5:17:56:8a:9d:a7:5e:75:b5:ff:61:
         a2:66:c7:88:c4:a4:98:0f:01:f7:62:90:3e:f4:3f:40:9b:82:
         b8:ca:e2:0e:eb:b4:7b:65:4d:08:fb:d2:b6:c8:d5:b6:70:76:
         92:4a:61:5f:9d:e6:ab:1d:ae:42:ca:27:ea:80:b7:75:8d:f9:
         b8:5c:a4:94:4a:f9:a8:28:2c:df:0d:74:83:0f:ed:ef:c8:cf:
         dc:08:26:09:6d:c5:7b:43:f6:82:05:f5:85:2b:af:07:3e:2f:
         1f:94:9c:e0:30:e0:64:5b:8e:48:41:97:a7:cd:32:84:9b:dc:
         90:06:68:8d:8d:56:29:58:cb:34:40:56:11:6f:0a:d9:fa:83:
         69:7e:fa:5e:ba:d2:46:50:af:7c:d2:38:2f:6f:c7:8a:d3:00:
         3c:0d:52:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 10:06:09 2026 by rpki-client