This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/Wm5un5s1l1Uczxx1_V5CG7Ar2bA.roa
File:                     Wm5un5s1l1Uczxx1_V5CG7Ar2bA.roa (raw, json)
Hash identifier:          B9uLWiqoWEc0M4LCpE9t/HNlmsxvolzzjhIuXCpoz+E=
Subject key identifier:   5A:6E:6E:9F:9B:35:97:55:1C:CF:1C:75:FD:5E:42:1B:B0:2B:D9:B0
Certificate issuer:       /CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
Certificate serial:       019B77C7331553711EBCE161E3B949023007
Authority key identifier: E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/Wm5un5s1l1Uczxx1_V5CG7Ar2bA.roa
Signing time:             Thu 01 Jan 2026 04:18:22 +0000
ROA not before:           Thu 01 Jan 2026 04:18:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60086
IP address blocks:        185.59.0.0/22 maxlen: 22
                          2a02:66a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:33:15:53:71:1e:bc:e1:61:e3:b9:49:02:30:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
        Validity
            Not Before: Jan  1 04:18:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a6e6e9f9b3597551ccf1c75fd5e421bb02bd9b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:bb:b2:63:b9:90:59:5a:e2:3b:ac:2c:ab:
                    68:06:36:4b:aa:7e:ea:3a:ca:ae:0c:12:06:c3:b4:
                    b7:60:5b:97:77:a7:69:fd:2b:6d:7c:5b:3d:68:46:
                    28:ba:d7:54:0e:fb:bb:8f:7e:33:b0:b5:c5:d6:4a:
                    31:59:b7:15:0a:0b:04:a7:06:b3:b0:7b:a4:10:1f:
                    1b:a2:94:fd:00:98:c7:c3:6e:96:68:e1:fc:8e:cb:
                    c7:ea:56:94:0f:ad:b4:ea:72:bb:09:c6:4a:a1:70:
                    d6:5b:13:46:ff:2d:7d:53:de:ac:b9:b6:97:f5:91:
                    30:83:c8:1b:f3:96:78:a7:00:23:c8:04:9b:be:23:
                    8a:df:d1:76:db:e9:59:4e:02:8c:27:c0:ab:7d:b1:
                    53:c0:32:8b:c0:ec:4b:88:0a:50:d7:d2:67:db:31:
                    dd:41:1e:b1:c5:0a:ec:c8:3f:fa:bf:d6:57:79:82:
                    5a:56:e8:be:44:c3:fc:52:60:0c:ae:cd:8b:9e:57:
                    f6:84:d3:ab:33:57:ac:92:43:03:37:ea:25:7b:8a:
                    f2:eb:df:eb:06:81:31:a1:ba:aa:35:05:77:d0:a8:
                    37:1b:3e:fc:1b:06:c6:a3:77:02:9d:8b:a9:63:2e:
                    29:3f:ba:0d:9e:9d:d8:21:e6:32:7b:6e:3c:c3:c8:
                    7f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6E:6E:9F:9B:35:97:55:1C:CF:1C:75:FD:5E:42:1B:B0:2B:D9:B0
            X509v3 Authority Key Identifier:
                keyid:E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/Wm5un5s1l1Uczxx1_V5CG7Ar2bA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.59.0.0/22
                IPv6:
                  2a02:66a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:16:97:fe:fc:da:4a:47:51:84:6a:e3:7d:3d:f8:fb:ca:37:
         26:41:da:05:49:ef:a6:8c:bf:02:e6:63:d3:f5:ea:1c:ae:1c:
         5d:b7:b5:d5:47:c6:65:e3:7b:0e:2f:e6:a9:ed:11:a2:b3:4e:
         96:21:8c:3f:c4:b9:7d:e5:fd:6f:1b:94:7a:25:ff:14:0e:8c:
         be:30:aa:e6:1d:21:21:c8:a9:50:93:ec:60:9d:fb:cc:8d:f5:
         b8:4d:3a:b9:81:b3:27:4c:a7:8d:dc:bf:58:d5:b7:82:39:64:
         00:60:2e:fa:81:a8:0e:c8:05:fa:e7:44:80:50:d7:d4:10:5e:
         b2:7c:e7:0f:e9:bf:01:94:2d:a3:58:18:01:96:f1:15:bb:57:
         de:a3:1a:aa:55:66:57:22:62:3f:ab:e1:3c:e7:11:38:0d:3a:
         a3:a2:07:3f:3f:60:fe:95:a2:10:3b:32:75:1b:c1:6f:86:67:
         39:74:66:f9:57:c8:c0:28:38:f5:d8:59:d7:4e:d9:00:3a:ac:
         84:7a:3e:68:11:71:07:51:fb:a8:94:f4:91:74:a5:e4:9a:4e:
         18:00:3d:82:ae:80:77:41:d0:2b:45:4b:d8:61:87:fb:88:be:
         20:64:7e:7d:60:c5:bd:c7:cd:bc:02:97:e7:52:1e:80:70:50:
         0f:7c:90:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:21:14 2026 by rpki-client