This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/wW5JJp_Tw5DERjslA8f06nsNm_4.roa
File:                     wW5JJp_Tw5DERjslA8f06nsNm_4.roa (raw, json)
Hash identifier:          soIoaQ26jxMV+jXruEWHSU8upxFyddMWkhBFffhBkYE=
Subject key identifier:   C1:6E:49:26:9F:D3:C3:90:C4:46:3B:25:03:C7:F4:EA:7B:0D:9B:FE
Certificate issuer:       /CN=e8f239a70043734172d26378bf2106ae72552187
Certificate serial:       019B76EAB1430D916414707D5C5F629A1D60
Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/wW5JJp_Tw5DERjslA8f06nsNm_4.roa
Signing time:             Thu 01 Jan 2026 00:17:30 +0000
ROA not before:           Thu 01 Jan 2026 00:17:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42560
IP address blocks:        37.0.64.0/21 maxlen: 24
                          79.140.144.0/20 maxlen: 24
                          79.140.145.0/24 maxlen: 24
                          79.140.146.0/23 maxlen: 23
                          79.140.153.0/24 maxlen: 24
                          185.12.40.0/22 maxlen: 24
                          185.80.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:b1:43:0d:91:64:14:70:7d:5c:5f:62:9a:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f239a70043734172d26378bf2106ae72552187
        Validity
            Not Before: Jan  1 00:17:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c16e49269fd3c390c4463b2503c7f4ea7b0d9bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:61:84:9a:20:ea:3b:db:bd:bf:bc:4f:b1:cf:
                    c6:27:ed:cb:c9:f3:e1:42:25:69:67:fe:ff:be:c4:
                    22:b9:44:10:ad:88:2d:a4:72:dc:00:90:d8:72:e9:
                    19:46:4d:74:cb:52:f2:76:3a:39:06:0c:a8:38:a3:
                    23:61:bc:bb:fb:6f:07:7c:69:ef:42:59:9a:99:7b:
                    15:e0:cf:e1:61:80:e3:30:9c:b5:c1:c9:99:7e:e5:
                    35:5f:94:0e:e2:d8:12:aa:4d:37:db:a2:e3:f4:ff:
                    27:cf:59:f6:7e:ca:ac:02:1b:7d:c4:3c:94:0f:bc:
                    68:47:d2:e6:83:ff:f6:7e:77:d0:41:bd:03:6e:f8:
                    06:89:16:21:62:97:15:ac:33:80:59:be:5b:69:02:
                    14:6a:00:50:13:d3:c9:b9:2a:ed:17:f1:26:2f:cf:
                    79:b4:c4:2b:03:46:1e:05:d4:2e:55:93:67:fd:64:
                    cc:e6:68:03:34:9a:a5:29:cc:84:6c:af:62:7e:e5:
                    70:89:3c:ca:d1:52:e5:ba:55:c0:77:5d:df:ad:08:
                    c0:4d:64:33:78:94:f1:3e:7b:8c:e0:42:60:a4:9b:
                    89:db:6a:03:ed:36:f3:cf:94:bc:ed:90:e3:18:23:
                    ca:92:7c:57:c6:48:46:07:41:37:13:2e:b6:f1:63:
                    1c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6E:49:26:9F:D3:C3:90:C4:46:3B:25:03:C7:F4:EA:7B:0D:9B:FE
            X509v3 Authority Key Identifier:
                keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/wW5JJp_Tw5DERjslA8f06nsNm_4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.0.64.0/21
                  79.140.144.0/20
                  185.12.40.0/22
                  185.80.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:cd:4f:1a:4e:4a:0e:a9:54:cc:bc:4f:26:6f:51:87:d2:ed:
         d5:e5:67:83:89:c2:4e:a8:cd:14:f2:50:1b:f1:6f:96:d4:14:
         0e:28:73:0a:12:ca:d8:9c:64:20:7b:60:ab:fe:8e:a4:2f:10:
         43:77:d3:bb:8c:7a:98:ce:61:ba:f2:ef:39:d1:48:59:85:51:
         88:35:93:67:2c:7c:d7:b6:6a:18:fa:ff:e9:7c:5b:84:bc:08:
         ae:59:42:9e:06:bd:6e:ac:58:92:bd:43:48:28:08:7b:4c:5b:
         82:72:10:a5:32:0b:8f:08:f0:83:e9:c4:7e:a5:9c:4e:39:27:
         e1:6c:36:47:bf:1f:de:46:67:cb:cd:34:44:d8:ed:d4:bc:d7:
         93:71:89:df:9b:32:92:ed:ae:e4:50:57:be:31:e0:7e:cc:b3:
         fc:c7:b8:a4:11:5b:6c:eb:44:d9:e3:e8:85:7f:28:3f:35:29:
         1e:bf:ca:53:17:17:ac:2a:9c:5a:ad:49:61:da:5d:f6:3a:8a:
         e6:45:73:f3:79:51:44:7f:0a:da:16:a4:26:85:0d:8f:36:d1:
         ac:08:ea:40:6d:19:68:0f:98:12:65:96:b2:de:40:c5:97:a0:
         0a:e0:8d:26:67:3c:9b:4e:cf:0a:9c:68:1d:91:e3:a0:0a:60:
         c9:b1:21:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:16:29 2026 by rpki-client