This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/WinsYSv7lvXHmHSC7YQ0267ZglY.roa
File:                     WinsYSv7lvXHmHSC7YQ0267ZglY.roa (raw, json)
Hash identifier:          OvB0n9pCf/mjeiCd2Er0y4UitnwwLmsZ3xFJsXerVIY=
Subject key identifier:   5A:29:EC:61:2B:FB:96:F5:C7:98:74:82:ED:84:34:DB:AE:D9:82:56
Certificate issuer:       /CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7
Certificate serial:       019B7EA63F0A347343B163FEE8C60F45B349
Authority key identifier: 62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/WinsYSv7lvXHmHSC7YQ0267ZglY.roa
Signing time:             Fri 02 Jan 2026 12:19:42 +0000
ROA not before:           Fri 02 Jan 2026 12:19:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        185.226.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 02:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:3f:0a:34:73:43:b1:63:fe:e8:c6:0f:45:b3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7
        Validity
            Not Before: Jan  2 12:19:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a29ec612bfb96f5c7987482ed8434dbaed98256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:16:6d:71:bb:00:82:19:75:77:ab:4a:9b:0c:
                    e7:77:22:04:e3:e2:43:0c:df:a4:c1:34:de:5c:86:
                    63:a4:ad:9b:73:67:b8:9d:d3:ad:3f:35:8d:76:59:
                    0a:f2:7f:f1:84:17:61:c9:6b:20:d2:b2:f6:35:be:
                    71:3b:85:e9:17:46:43:3e:dc:a0:af:4c:74:37:c3:
                    bc:30:95:5a:89:e7:7c:00:dc:a0:3d:12:f6:fb:5e:
                    f7:fa:79:c0:7b:00:f8:7a:d7:54:6f:30:0f:79:88:
                    91:14:ad:f9:fb:47:74:54:14:af:db:48:63:d4:b7:
                    e3:c7:90:22:37:53:7c:56:c3:48:88:25:a7:5a:0e:
                    5e:77:de:54:a1:97:7a:6d:78:9d:56:d6:96:3c:0d:
                    bc:87:2b:d5:ff:8e:81:37:d2:29:b9:64:48:e4:0d:
                    79:0c:e5:05:72:0d:b3:89:d4:1a:5c:00:b8:8a:9e:
                    7b:68:bf:c0:97:56:d4:21:4f:bb:d1:a3:35:41:94:
                    41:76:a7:31:68:d6:9a:f7:47:c1:50:2e:5d:7e:17:
                    b0:15:48:cc:6f:7e:af:ed:39:38:65:da:1e:b3:4e:
                    41:51:f5:c8:6a:b3:49:c3:55:c9:50:25:e0:f9:4a:
                    46:84:02:71:80:51:28:49:70:53:d6:b3:6e:c7:a4:
                    9f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:29:EC:61:2B:FB:96:F5:C7:98:74:82:ED:84:34:DB:AE:D9:82:56
            X509v3 Authority Key Identifier:
                keyid:62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/WinsYSv7lvXHmHSC7YQ0267ZglY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:df:0a:7e:e1:74:38:fe:83:66:de:04:c7:e3:e6:af:b7:d0:
         63:f6:d0:a1:2d:fa:4b:7a:7e:cb:52:e4:b2:11:5a:8a:aa:e8:
         ac:ae:d4:44:d8:c5:83:94:38:c0:76:fc:8d:8f:f3:b5:23:54:
         7e:95:b1:1e:3b:26:97:c3:2e:a8:de:d6:2a:b2:a0:8e:34:fe:
         db:f4:69:a2:84:a6:c3:7b:bc:6f:0a:7b:f7:4a:a8:91:ce:cb:
         c9:2d:5c:0d:7e:69:03:7d:46:51:bc:27:ff:be:6d:d6:24:b6:
         0c:d1:e6:36:3e:af:8b:b2:43:32:ed:ad:d8:a7:a1:4c:d3:6c:
         53:86:6d:af:36:be:e5:34:d3:18:5e:e9:0f:7b:e6:01:62:19:
         e6:cc:22:f1:b8:d0:fd:f4:71:18:43:d7:11:43:14:6b:34:dc:
         b9:d5:94:48:aa:67:69:a6:72:bc:aa:0b:02:47:dc:29:7c:4b:
         b7:19:dd:e5:24:81:b8:df:c0:f9:dd:01:1c:68:8e:6d:88:64:
         c4:03:c7:a0:df:0e:e4:17:9b:59:41:d3:5d:22:d8:b1:b7:71:
         e3:56:42:2a:c6:59:ee:24:6c:31:3e:59:d9:03:f4:e2:79:b0:
         9a:3e:5a:29:05:ac:71:31:5b:cf:fb:55:d9:88:81:dd:9d:d7:
         70:35:b4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 08:22:56 2026 by rpki-client