This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/wmgMC-Q6JuN93VgNPFr0Kgc7Ccw.roa
File:                     wmgMC-Q6JuN93VgNPFr0Kgc7Ccw.roa (raw, json)
Hash identifier:          f3Jy9HVFL90ndYeuF9Ld4iOUbDw2OjbP9NnJ95IlJxU=
Subject key identifier:   C2:68:0C:0B:E4:3A:26:E3:7D:DD:58:0D:3C:5A:F4:2A:07:3B:09:CC
Certificate issuer:       /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial:       019A5E6B3CD3498D5A3C3D8ADF847154EA9E
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/wmgMC-Q6JuN93VgNPFr0Kgc7Ccw.roa
Signing time:             Fri 07 Nov 2025 13:04:37 +0000
ROA not before:           Fri 07 Nov 2025 13:04:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     43641
IP address blocks:        185.23.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 21:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:5e:6b:3c:d3:49:8d:5a:3c:3d:8a:df:84:71:54:ea:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
        Validity
            Not Before: Nov  7 13:04:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c2680c0be43a26e37ddd580d3c5af42a073b09cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:00:71:64:29:1c:02:ab:a1:10:0a:0e:3f:b0:
                    1d:45:d6:c9:68:8a:08:9e:52:c3:46:0f:05:66:40:
                    8a:32:72:46:0c:da:85:b5:01:f5:69:01:51:98:ce:
                    dd:b0:65:0c:a1:90:8a:73:b3:c9:7b:a8:ed:5f:3e:
                    ae:bf:8f:ae:f6:85:56:96:3b:4b:7c:8f:5f:0e:ec:
                    52:fc:5f:7a:cb:4e:f6:e5:89:59:02:4c:33:53:46:
                    85:11:6d:2f:ad:a5:dc:8d:d4:0d:9d:1c:04:04:b1:
                    99:2a:29:e7:3f:c2:29:c9:5a:15:aa:60:94:57:3e:
                    28:69:a7:c2:fa:10:fb:66:36:95:e0:0b:b0:23:e8:
                    d4:e6:4e:b6:32:e2:4f:6e:e9:f7:3e:63:68:9b:e9:
                    69:e2:ed:ba:4c:55:45:f9:2b:38:08:ec:84:9a:ab:
                    bc:fa:40:7a:6e:bc:c6:79:cd:a8:a1:5e:75:9f:5e:
                    95:fb:99:cb:48:88:ee:ec:6f:b7:8e:bc:c6:ad:11:
                    16:e1:1d:02:f9:01:07:66:86:67:df:7e:02:a9:1b:
                    80:2d:a3:c9:c8:55:da:4f:20:6d:ad:f4:e1:33:70:
                    49:3a:19:f9:c9:fd:3b:d1:ce:25:07:5c:44:11:db:
                    83:2a:32:fd:b5:4e:3e:28:1a:ed:11:4b:62:32:81:
                    47:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:68:0C:0B:E4:3A:26:E3:7D:DD:58:0D:3C:5A:F4:2A:07:3B:09:CC
            X509v3 Authority Key Identifier:
                keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/wmgMC-Q6JuN93VgNPFr0Kgc7Ccw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.23.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:1b:d7:8f:ef:c8:05:3c:0e:d5:b7:fb:85:1e:87:0c:3d:d7:
         fd:da:47:36:dd:0a:2b:14:d5:ac:62:c7:cc:47:0f:ee:eb:e5:
         9a:9c:1d:91:11:59:b6:b8:76:21:6a:7c:a3:fe:10:a0:a5:45:
         fb:1c:18:18:a0:05:39:7c:4d:e6:bc:ef:df:d4:b7:45:19:21:
         7d:33:28:6d:62:dd:5d:04:57:fe:23:62:16:24:fe:d8:90:95:
         9a:29:d0:2b:0d:d0:85:3a:5a:e4:52:bc:5a:8d:69:6b:4a:4f:
         bd:71:a0:e4:a3:b2:13:35:19:e2:99:53:09:ac:f4:d4:e4:97:
         70:18:b9:34:6e:d1:8b:c5:ec:b3:a5:16:88:f3:c1:93:e0:72:
         9f:6f:56:78:c2:be:41:a0:9a:c8:0a:e1:ab:67:70:db:6b:99:
         e0:d0:eb:09:38:aa:bc:80:61:85:36:82:5f:cc:c7:89:a8:e0:
         35:2e:9c:3d:15:96:87:25:38:18:90:2f:de:9e:d3:3e:5d:2e:
         ae:35:d4:c0:90:f1:52:88:a6:8d:5d:85:51:46:b0:eb:96:78:
         57:45:29:23:e4:4d:51:92:64:7c:9c:aa:70:01:a0:7a:3d:14:
         1d:79:dd:4e:86:d6:4a:46:c6:af:ab:f3:64:6e:20:e7:bd:1f:
         5e:88:88:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 06:32:17 2025 by rpki-client