This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/Wgv3nP3KPCzK8Vc3Ujwc5tCZFEY.roa
File:                     Wgv3nP3KPCzK8Vc3Ujwc5tCZFEY.roa (raw, json)
Hash identifier:          sZiUtGsuan8lIISLSvNoUUBLxQveJeIACDPYwQFWZys=
Subject key identifier:   5A:0B:F7:9C:FD:CA:3C:2C:CA:F1:57:37:52:3C:1C:E6:D0:99:14:46
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       019B7BA4B9314E988297C392A516DFC4298F
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/Wgv3nP3KPCzK8Vc3Ujwc5tCZFEY.roa
Signing time:             Thu 01 Jan 2026 22:19:11 +0000
ROA not before:           Thu 01 Jan 2026 22:19:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43395
IP address blocks:        46.148.35.0/24 maxlen: 24
                          46.148.36.0/24 maxlen: 24
                          46.148.38.0/24 maxlen: 24
                          46.148.40.0/24 maxlen: 24
                          46.148.43.0/24 maxlen: 24
                          46.148.44.0/24 maxlen: 24
                          46.148.45.0/24 maxlen: 24
                          46.148.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:b9:31:4e:98:82:97:c3:92:a5:16:df:c4:29:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: Jan  1 22:19:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a0bf79cfdca3c2ccaf15737523c1ce6d0991446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:04:5a:89:39:10:9a:f9:5d:d0:95:87:fd:
                    54:84:7d:4b:d3:dd:e7:73:96:59:ad:db:ae:66:8c:
                    ed:79:5e:65:02:65:2d:8e:cb:c8:3d:80:04:bf:19:
                    e7:78:ef:1c:62:d9:86:cd:ba:15:42:d6:15:9c:19:
                    9a:86:2a:bc:47:62:75:07:be:78:31:dd:67:8e:83:
                    80:6f:a5:bf:15:8f:97:d4:e9:0c:59:29:76:73:92:
                    1e:c6:d1:5e:84:04:6c:bc:b2:16:0c:44:0a:fe:48:
                    7f:06:c5:fe:5c:e0:75:c2:64:68:4b:b5:95:9f:e9:
                    bd:9e:99:cb:e9:ba:6b:13:56:fd:c6:78:45:f5:83:
                    d7:92:64:31:d4:00:a7:14:41:9a:59:33:be:ef:69:
                    32:a4:50:5b:c3:6b:b4:d2:a0:1e:72:6c:f0:3b:ce:
                    20:6f:3d:e1:bf:7e:42:f4:97:7e:fc:06:9a:4a:81:
                    01:f7:ac:fc:d1:4a:78:b5:bd:a2:ef:fb:8f:b4:41:
                    2e:92:21:4b:9e:65:a5:d8:f1:b0:c1:7b:b9:43:98:
                    49:b4:91:96:e4:84:98:c2:7e:fe:a3:5a:29:bd:1e:
                    7d:d8:8d:3c:8b:af:43:bb:72:23:99:11:bc:4f:41:
                    72:5a:0d:a3:fd:b3:36:b4:72:8e:ab:f5:e4:d5:f4:
                    17:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0B:F7:9C:FD:CA:3C:2C:CA:F1:57:37:52:3C:1C:E6:D0:99:14:46
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/Wgv3nP3KPCzK8Vc3Ujwc5tCZFEY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.148.35.0-46.148.36.255
                  46.148.38.0/24
                  46.148.40.0/24
                  46.148.43.0-46.148.46.255

    Signature Algorithm: sha256WithRSAEncryption
         26:6d:15:45:fc:e9:57:73:34:49:2a:e3:54:db:7d:7d:da:77:
         36:73:02:0c:d1:87:76:f7:8e:29:19:d2:59:64:4a:83:d0:38:
         d7:97:c4:77:67:14:2f:01:b3:99:23:e4:af:40:1b:ee:fd:00:
         22:0b:e3:de:2b:5e:bd:7e:01:81:74:80:19:12:bf:1b:13:39:
         55:93:ce:80:e2:53:92:09:a1:99:f3:2d:29:11:55:49:04:3c:
         64:f1:bc:2c:45:27:74:cb:1e:66:31:af:84:17:99:92:d9:c4:
         e3:32:a4:a6:e9:5c:99:a6:42:a9:d6:ad:9c:5a:32:f2:43:f3:
         2c:7e:6b:d8:a3:ec:6b:3c:3b:b6:6a:e9:65:a9:d8:fe:4a:c7:
         ee:23:43:0f:3f:43:f5:19:ca:25:fd:86:16:08:39:21:15:b3:
         72:86:c6:ee:c1:d1:4a:f7:33:7b:a7:c0:ad:c6:b9:59:1c:d8:
         99:6d:f5:fb:b0:8d:e4:f4:66:2a:69:44:da:c9:d8:fe:6d:a4:
         72:ef:b8:00:32:4f:f1:46:7f:26:d7:78:24:00:69:b8:65:32:
         ea:31:06:af:ec:9f:af:f1:b5:43:79:c9:65:29:98:61:28:aa:
         98:bc:5d:3b:b1:54:7a:46:be:fa:bf:6a:66:c7:fb:21:9b:2b:
         81:ad:70:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:04:40 2026 by rpki-client