This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/wTB4tZGHHQPv-PQUvHNe4gZ_jgo.roa
File:                     wTB4tZGHHQPv-PQUvHNe4gZ_jgo.roa (raw, json)
Hash identifier:          TYdOeOy0mx3TMxWyBFFWn8nDjGPanVPmVWlj7zHMp90=
Subject key identifier:   C1:30:78:B5:91:87:1D:03:EF:F8:F4:14:BC:73:5E:E2:06:7F:8E:0A
Certificate issuer:       /CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Certificate serial:       019B76EB785709DFFE80A212B686E5E583F0
Authority key identifier: 93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/wTB4tZGHHQPv-PQUvHNe4gZ_jgo.roa
Signing time:             Thu 01 Jan 2026 00:18:21 +0000
ROA not before:           Thu 01 Jan 2026 00:18:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200603
IP address blocks:        80.244.3.0/24 maxlen: 24
                          185.79.125.0/24 maxlen: 24
                          2a13:5740::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:78:57:09:df:fe:80:a2:12:b6:86:e5:e5:83:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
        Validity
            Not Before: Jan  1 00:18:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c13078b591871d03eff8f414bc735ee2067f8e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:da:d0:eb:1e:8d:a5:6f:e9:56:70:f4:14:cf:
                    08:38:27:51:f1:17:8d:52:a7:5a:20:8a:66:c0:44:
                    92:d0:21:53:40:70:73:55:75:09:73:b8:b4:b8:d3:
                    a3:7f:35:7a:52:37:63:14:45:de:c2:4f:86:7c:6f:
                    8b:a2:b3:81:b9:86:5a:04:f9:ff:c4:2a:40:1e:62:
                    72:78:0c:4d:f0:8c:c4:80:fb:5f:fa:ca:b6:36:c8:
                    1a:d8:a5:51:de:3b:81:65:ea:82:2d:93:29:66:e9:
                    9f:84:0a:83:68:d3:57:68:42:3f:4b:87:4b:15:8e:
                    0d:7c:be:d8:59:22:c7:91:3f:8d:e1:ee:aa:d3:d2:
                    11:26:61:21:5c:57:a2:e0:8a:73:fc:55:fb:3a:ba:
                    ef:f1:9f:6a:83:c8:45:ee:4c:91:69:13:71:ae:0f:
                    26:2c:21:e5:19:25:3a:d3:3e:2c:dc:52:0d:56:57:
                    6e:43:d9:9f:e6:83:5f:6f:4b:43:e0:f2:15:bb:74:
                    ef:39:d5:58:7c:82:f8:38:ec:75:61:0a:a4:db:39:
                    2d:a2:28:85:a4:dc:5d:26:09:2c:b1:df:cd:f9:b3:
                    78:e8:8b:cb:11:d6:22:35:8f:b7:92:08:2b:bd:d5:
                    cf:c2:2c:19:fb:55:c7:08:a9:29:ca:d9:85:dd:6e:
                    cc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:30:78:B5:91:87:1D:03:EF:F8:F4:14:BC:73:5E:E2:06:7F:8E:0A
            X509v3 Authority Key Identifier:
                keyid:93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/wTB4tZGHHQPv-PQUvHNe4gZ_jgo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.244.3.0/24
                  185.79.125.0/24
                IPv6:
                  2a13:5740::/29

    Signature Algorithm: sha256WithRSAEncryption
         32:47:e3:1e:16:90:f1:ff:e9:ae:5d:8f:c5:34:05:1f:39:1a:
         71:90:9f:f8:9c:13:39:97:51:54:05:87:ab:5a:c3:a0:0e:4c:
         98:2d:8b:d3:28:9c:ff:17:c2:bd:a5:de:11:51:1e:3d:a6:b4:
         9d:4f:09:21:0e:1a:31:98:11:db:a2:65:f3:1a:12:2f:45:45:
         3a:64:1d:b8:48:4c:b6:d5:5e:a0:c3:25:51:b4:7d:9f:12:26:
         cc:7c:12:cf:1a:9a:44:50:ea:dc:61:e3:85:2d:da:73:99:5a:
         6a:8c:52:bd:c2:28:e1:40:c5:76:6c:51:b6:af:78:b8:55:b0:
         58:8a:1c:0e:b9:bd:81:4b:c4:d8:88:5a:90:c6:3e:38:92:7b:
         5f:e5:5e:00:5c:a0:bf:d4:d3:59:88:d1:08:48:aa:ac:c1:61:
         f6:73:82:f0:f9:a2:54:e9:69:d2:9d:ae:8a:22:4a:3c:15:95:
         da:64:2f:83:b3:0f:55:b1:e1:54:37:47:25:55:f0:e2:59:9b:
         35:7e:a2:b8:ca:2b:10:1e:40:53:fb:e0:67:57:09:dd:0b:c6:
         81:0f:5e:cb:16:45:0d:d1:e6:3b:8a:e6:aa:36:d3:a8:4e:56:
         d8:ac:d5:92:dc:01:ed:00:2c:68:e5:23:ae:65:ee:44:3b:3b:
         48:00:e4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:12:00 2026 by rpki-client