This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/h-w3bAbfFKEQZ6TzPyZWg_mnH38.roa
File:                     h-w3bAbfFKEQZ6TzPyZWg_mnH38.roa (raw, json)
Hash identifier:          zud6rrdKB68sPZedKRRSWbaDWeVhd50z7EdhQ7bDmyk=
Subject key identifier:   87:EC:37:6C:06:DF:14:A1:10:67:A4:F3:3F:26:56:83:F9:A7:1F:7F
Certificate issuer:       /CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
Certificate serial:       019B7AC85C72542C35F3F807321BDC4FDFFF
Authority key identifier: 8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/h-w3bAbfFKEQZ6TzPyZWg_mnH38.roa
Signing time:             Thu 01 Jan 2026 18:18:29 +0000
ROA not before:           Thu 01 Jan 2026 18:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206591
IP address blocks:        185.181.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:5c:72:54:2c:35:f3:f8:07:32:1b:dc:4f:df:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
        Validity
            Not Before: Jan  1 18:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=87ec376c06df14a11067a4f33f265683f9a71f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:c0:aa:46:87:ba:36:b7:0b:e4:20:4e:88:
                    c0:17:90:cf:62:47:7f:65:1b:ed:c8:0f:24:b0:fe:
                    cb:a4:04:22:9a:ec:b1:7f:3c:ac:c6:bd:db:65:3f:
                    98:87:a8:b6:ec:39:fe:d7:47:8f:3b:80:87:f4:df:
                    7b:a8:36:51:27:7b:3f:2b:bd:92:ef:3d:b4:f2:21:
                    ce:23:95:2e:13:18:b5:fa:ee:2f:44:51:3b:07:a8:
                    2f:1a:b1:d1:5e:d7:31:76:90:e3:39:cc:7f:50:22:
                    d3:00:de:8f:2a:4a:0a:1d:fe:99:a4:6e:a8:44:27:
                    e5:84:7b:07:1f:48:35:7d:18:fa:bb:42:f3:5b:1b:
                    22:94:db:10:58:e8:a0:08:71:cb:e3:65:c2:73:fe:
                    d9:9e:5d:76:e5:3d:6e:32:3c:11:ca:50:a8:b9:7a:
                    19:b6:44:5a:e2:45:d3:39:0c:c0:43:b5:3a:e6:5a:
                    3c:8d:b8:7b:20:b9:90:d1:55:04:2a:c7:00:22:c7:
                    43:48:80:7b:19:7e:23:45:35:a9:a7:d7:89:7a:2e:
                    67:d3:65:d7:c6:9b:d2:b2:85:ba:e5:e8:31:a6:9f:
                    c1:94:62:5c:f7:2c:89:0f:5f:d9:62:cc:f2:c4:b2:
                    30:7a:cd:63:32:ca:82:bb:3e:ff:0f:85:8f:d6:7a:
                    91:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EC:37:6C:06:DF:14:A1:10:67:A4:F3:3F:26:56:83:F9:A7:1F:7F
            X509v3 Authority Key Identifier:
                keyid:8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/h-w3bAbfFKEQZ6TzPyZWg_mnH38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.181.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:ed:37:90:26:f6:c8:85:43:e6:0f:b0:3f:4a:0a:7f:9e:72:
         72:68:9b:87:6f:0a:96:b0:06:47:68:48:87:39:d9:a1:f0:a2:
         c6:67:68:61:13:b7:35:70:e1:e7:20:a2:f3:12:87:b1:12:2c:
         f4:9a:86:bf:02:a4:f0:b3:ee:d7:1d:e5:0a:59:fb:2a:82:cc:
         51:39:3c:86:42:fa:ea:58:ea:02:91:c0:97:08:e9:93:4f:f3:
         0e:09:86:7d:1e:fe:13:1a:21:6c:1b:e0:f0:4b:10:0f:0f:21:
         8d:8c:d6:0b:50:9c:e3:26:26:ac:d7:a9:35:ff:83:4f:fc:a8:
         66:96:04:09:1a:8a:a5:62:c9:36:92:bb:81:d6:d9:5b:ad:28:
         f5:71:a9:ff:e7:60:b7:2e:8c:29:e6:5e:1c:5c:22:26:82:41:
         69:26:a8:91:f4:60:7e:2f:1f:fa:00:4b:83:55:28:87:56:04:
         18:44:ba:5a:17:5b:c2:6d:92:28:da:00:50:56:fa:eb:71:39:
         46:91:1f:1c:cf:52:5c:bd:cb:29:ff:8e:cc:a3:03:82:77:c8:
         3b:7a:a3:e5:42:01:b1:9e:14:f3:8a:70:9d:6d:f0:f2:ff:1c:
         5f:6e:c9:2b:cf:b1:ec:78:1f:d5:a3:20:51:81:26:3c:45:46:
         77:97:0e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:16:23 2026 by rpki-client