This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/wntuteFp_hWVEVUhXXzIfGeZGYg.roa
File:                     wntuteFp_hWVEVUhXXzIfGeZGYg.roa (raw, json)
Hash identifier:          COpIba0jOKYphmoFlVevEYtGvAQbqGOdq7aV51RcCa8=
Subject key identifier:   C2:7B:6E:B5:E1:69:FE:15:95:11:55:21:5D:7C:C8:7C:67:99:19:88
Certificate issuer:       /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial:       019B7AC8645C5FF61CF04505153DEA0877A9
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/wntuteFp_hWVEVUhXXzIfGeZGYg.roa
Signing time:             Thu 01 Jan 2026 18:18:31 +0000
ROA not before:           Thu 01 Jan 2026 18:18:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61207
IP address blocks:        87.237.208.0/21 maxlen: 21
                          89.221.240.0/23 maxlen: 23
                          89.221.243.0/24 maxlen: 24
                          89.221.247.0/24 maxlen: 24
                          89.221.248.0/21 maxlen: 21
                          185.15.120.0/22 maxlen: 22
                          185.215.196.0/22 maxlen: 22
                          185.215.196.0/24 maxlen: 24
                          195.35.82.0/23 maxlen: 23
                          2a02:fc00::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 12:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:64:5c:5f:f6:1c:f0:45:05:15:3d:ea:08:77:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
        Validity
            Not Before: Jan  1 18:18:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c27b6eb5e169fe15951155215d7cc87c67991988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:83:2e:66:19:ac:6d:d7:60:7a:af:97:3f:
                    ea:62:66:75:13:8d:d3:10:87:d1:be:0e:28:e4:e0:
                    66:19:94:ae:6d:85:76:cb:1b:6e:27:3a:13:12:9b:
                    9f:84:59:16:cf:8e:b3:1d:a9:cb:98:b6:d0:03:72:
                    1e:16:35:83:c1:66:6c:20:6e:93:f5:23:d3:e1:6c:
                    bf:18:5d:97:bf:64:32:93:01:e2:d2:7f:f6:ee:01:
                    23:bc:60:90:56:20:ad:2c:a6:63:43:bc:69:27:04:
                    dd:d2:33:f2:29:2b:f6:a4:82:3f:42:17:63:b6:0e:
                    37:16:02:c1:5f:32:ac:ed:82:43:4a:f9:88:46:0f:
                    35:e1:b6:ee:63:26:b3:bd:05:b0:77:08:83:c6:9a:
                    58:bd:24:5e:f3:9c:9f:d4:5b:93:ff:9c:b3:d6:b1:
                    20:c2:76:03:f7:e0:85:6e:48:40:7e:f9:23:b9:0c:
                    1f:8d:c7:20:d4:be:e1:8f:9b:67:31:04:82:d7:5e:
                    49:21:4d:b2:a2:63:22:50:ea:4d:4a:fe:38:c0:6b:
                    03:8a:7c:85:9e:1a:59:be:60:ee:30:67:66:c4:d0:
                    78:86:4d:c0:c4:39:3f:15:aa:49:5d:fc:e2:bb:03:
                    24:b0:ad:c7:99:af:fe:1e:e8:06:66:51:88:4e:df:
                    d5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7B:6E:B5:E1:69:FE:15:95:11:55:21:5D:7C:C8:7C:67:99:19:88
            X509v3 Authority Key Identifier:
                keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/wntuteFp_hWVEVUhXXzIfGeZGYg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.237.208.0/21
                  89.221.240.0/23
                  89.221.243.0/24
                  89.221.247.0-89.221.255.255
                  185.15.120.0/22
                  185.215.196.0/22
                  195.35.82.0/23
                IPv6:
                  2a02:fc00::/29

    Signature Algorithm: sha256WithRSAEncryption
         26:b0:34:09:ba:93:6e:c0:a4:6b:e1:cd:68:78:01:96:56:d3:
         fe:36:93:f5:06:28:90:c0:bf:35:f0:f7:92:f2:5b:16:37:0e:
         2a:b6:46:27:ec:96:57:9a:4b:ca:8a:28:a6:ef:ed:3b:92:8b:
         58:7a:9f:81:4b:32:ef:3b:cd:73:cb:91:a4:14:e9:82:42:95:
         be:c4:2c:9a:fb:ad:4d:87:8e:82:e1:15:04:7b:08:54:58:39:
         7c:4b:17:71:48:17:f0:93:48:83:c8:cc:76:63:15:50:cd:4a:
         6c:45:37:9e:bc:17:31:72:ac:bb:d3:fc:02:55:e3:b3:c0:67:
         a5:8e:dd:a6:31:70:25:64:5e:ce:90:c9:b9:0b:d8:cf:86:ab:
         d1:a1:08:f7:a8:e7:b1:65:74:9e:12:4d:73:12:22:08:89:37:
         dc:f9:a1:2c:69:e5:5e:ea:48:76:84:e5:07:2f:c7:0f:39:e5:
         94:12:49:f0:9a:43:44:49:70:5b:72:13:da:71:b6:78:54:1f:
         98:e6:06:0f:33:b2:8f:74:91:e7:db:9c:5b:d0:83:99:85:6f:
         e2:f4:3b:f1:34:b5:16:1f:6f:77:65:29:53:7b:cf:b0:f0:52:
         33:44:e9:63:3b:2f:11:07:81:99:ce:3c:d4:6e:3e:93:44:81:
         34:8d:41:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:13:34 2026 by rpki-client