This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/oW0C-k4390azUSS_-13XzI_AVfY.roa
File:                     oW0C-k4390azUSS_-13XzI_AVfY.roa (raw, json)
Hash identifier:          rzcyrGergvNW2GLz+g1GX+/P72a2swYsTQgABXmO4lQ=
Subject key identifier:   A1:6D:02:FA:4E:37:F7:46:B3:51:24:BF:FB:5D:D7:CC:8F:C0:55:F6
Certificate issuer:       /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial:       019C396121FAF7A28C406D03228D1FB1FD21
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/oW0C-k4390azUSS_-13XzI_AVfY.roa
Signing time:             Sat 07 Feb 2026 18:33:12 +0000
ROA not before:           Sat 07 Feb 2026 18:33:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58232
IP address blocks:        176.65.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:39:61:21:fa:f7:a2:8c:40:6d:03:22:8d:1f:b1:fd:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
        Validity
            Not Before: Feb  7 18:33:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a16d02fa4e37f746b35124bffb5dd7cc8fc055f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:95:16:dc:6c:a9:f7:51:3b:db:1d:89:bb:3b:
                    2f:ac:52:ac:95:73:fa:fc:75:c1:9d:9e:aa:e5:9e:
                    9a:a9:c1:01:64:f8:e9:b7:63:09:8c:c4:17:d4:9b:
                    ba:86:4e:8b:50:39:80:ef:ea:f1:f6:43:cc:2a:f7:
                    a6:ed:e7:50:25:b0:41:07:d8:56:10:44:40:c1:5c:
                    4e:db:d8:e3:ac:48:65:ae:bb:56:4b:04:9d:cb:48:
                    7c:66:15:66:58:9c:4c:88:0f:de:6f:23:52:da:08:
                    23:fc:4a:b4:1b:64:b7:e9:18:24:8b:b3:29:b3:b4:
                    ab:98:d8:f8:0c:81:d1:6b:ca:e3:46:87:37:26:cc:
                    14:5c:af:ea:37:a1:48:af:84:14:9d:de:e5:66:1f:
                    c6:9b:9d:82:4e:73:ad:d0:ca:68:24:3f:fe:bd:df:
                    f7:06:1c:aa:53:53:7b:c7:9d:32:dd:d0:b8:6f:bf:
                    7b:22:7f:8f:d5:be:44:06:6e:ad:fb:4b:6f:91:48:
                    2a:e4:67:5c:3f:39:c5:9b:cc:eb:a8:4b:3d:78:e7:
                    65:84:66:08:0d:e7:be:c9:d0:0d:45:ac:84:83:06:
                    50:f1:cd:21:87:78:4b:84:1f:cc:38:7b:48:40:f6:
                    a3:68:65:f1:9a:12:53:ee:b9:5e:d1:0e:c1:95:56:
                    05:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6D:02:FA:4E:37:F7:46:B3:51:24:BF:FB:5D:D7:CC:8F:C0:55:F6
            X509v3 Authority Key Identifier:
                keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/oW0C-k4390azUSS_-13XzI_AVfY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.65.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:d6:00:d9:84:be:47:c4:17:c5:c4:3b:64:af:1b:a1:a7:69:
         65:0a:b2:1d:dd:01:b2:53:62:3c:a3:e1:e9:82:66:9b:00:1f:
         5e:74:56:10:19:3b:6f:60:20:00:c3:51:0c:f6:09:00:a5:5d:
         22:8e:b2:4f:64:ce:22:50:ec:2f:27:1a:f1:c7:4c:0a:ad:1a:
         5c:90:7d:c0:03:30:2b:27:f0:e6:8a:d7:e3:a8:aa:e8:a0:a0:
         72:8b:7a:53:b4:9e:c5:fd:30:ad:86:78:30:4f:6e:0c:87:3c:
         a0:a4:37:55:11:ee:64:fd:f0:93:72:c0:55:39:0f:d5:f1:ee:
         a5:20:54:7c:f6:c6:62:13:00:14:67:e6:d8:86:4b:24:82:43:
         40:24:1c:8e:72:24:89:c7:ff:2b:0f:87:68:1e:ac:35:98:ec:
         b8:81:71:7b:12:2b:6b:a9:3d:ac:bb:76:7b:02:b6:45:2e:01:
         a0:cf:f7:61:f2:a7:21:66:fe:59:0b:18:73:33:7e:5d:04:57:
         8e:82:63:68:f2:b6:4b:ac:43:39:45:3a:06:9c:b2:71:21:f7:
         f6:13:b1:8d:4d:ef:4c:55:40:f9:38:8a:9e:1b:9c:e4:7d:45:
         c2:fc:24:51:3b:a0:c0:ec:05:84:d2:73:45:f2:29:67:69:8b:
         84:b0:94:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZw5YSH696KMQG0DIo0fsf0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx
MTI4YzMwHhcNMjYwMjA3MTgzMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTZkMDJmYTRlMzdmNzQ2YjM1MTI0YmZmYjVkZDdjYzhmYzA1NWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5UW3Gyp91E72x2JuzsvrFKslXP6
/HXBnZ6q5Z6aqcEBZPjpt2MJjMQX1Ju6hk6LUDmA7+rx9kPMKvem7edQJbBBB9hW
EERAwVxO29jjrEhlrrtWSwSdy0h8ZhVmWJxMiA/ebyNS2ggj/Eq0G2S36Rgki7Mp
s7SrmNj4DIHRa8rjRoc3JswUXK/qN6FIr4QUnd7lZh/Gm52CTnOt0MpoJD/+vd/3
BhyqU1N7x50y3dC4b797In+P1b5EBm6t+0tvkUgq5GdcPznFm8zrqEs9eOdlhGYI
Dee+ydANRayEgwZQ8c0hh3hLhB/MOHtIQPajaGXxmhJT7rle0Q7BlVYFVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKFtAvpON/dGs1Ekv/td18yPwFX2MB8GA1UdIwQY
MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt
MzE5YjBjODc0NDQwLzEvb1cwQy1rNDM5MGF6VVNTXy0xM1h6SV9BVmZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw
LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsEGMMA0G
CSqGSIb3DQEBCwUAA4IBAQAw1gDZhL5HxBfFxDtkrxuhp2llCrId3QGyU2I8o+Hp
gmabAB9edFYQGTtvYCAAw1EM9gkApV0ijrJPZM4iUOwvJxrxx0wKrRpckH3AAzAr
J/DmitfjqKrooKByi3pTtJ7F/TCthngwT24MhzygpDdVEe5k/fCTcsBVOQ/V8e6l
IFR89sZiEwAUZ+bYhkskgkNAJByOciSJx/8rD4doHqw1mOy4gXF7EitrqT2su3Z7
ArZFLgGgz/dh8qchZv5ZCxhzM35dBFeOgmNo8rZLrEM5RToGnLJxIff2E7GNTe9M
VUD5OIqeG5zkfUXC/CRRO6DA7AWE0nNF8ilnaYuEsJTR
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:22:59 2026 by rpki-client