This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/HWSoE4fH8z7cpQmMgCQjHg7pkq4.roa
File:                     HWSoE4fH8z7cpQmMgCQjHg7pkq4.roa (raw, json)
Hash identifier:          oZWuIu54uOtv30XUphqHrr6wzKAadRn0thnex/98uK4=
Subject key identifier:   1D:64:A8:13:87:C7:F3:3E:DC:A5:09:8C:80:24:23:1E:0E:E9:92:AE
Certificate issuer:       /CN=66e3ed06e88e5591d9096676951555c0dc535c19
Certificate serial:       019B7AC8ABEB3ACCE26A1395707101215E0C
Authority key identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/HWSoE4fH8z7cpQmMgCQjHg7pkq4.roa
Signing time:             Thu 01 Jan 2026 18:18:50 +0000
ROA not before:           Thu 01 Jan 2026 18:18:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207218
IP address blocks:        185.28.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:ab:eb:3a:cc:e2:6a:13:95:70:71:01:21:5e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66e3ed06e88e5591d9096676951555c0dc535c19
        Validity
            Not Before: Jan  1 18:18:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1d64a81387c7f33edca5098c8024231e0ee992ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:85:5e:92:06:a7:58:e1:26:8b:7c:fc:52:f1:
                    96:a2:80:d2:f3:1a:92:d1:18:81:ce:ba:71:bb:ac:
                    b9:a4:c4:78:9f:3b:a0:fb:54:9c:bf:3f:89:1b:c0:
                    c7:14:f0:18:e8:c2:b9:46:1c:65:36:11:58:15:44:
                    59:da:79:b8:44:d5:21:9f:05:29:ef:9d:01:a2:3a:
                    b5:8a:ac:09:13:63:4d:1e:a2:df:84:f9:e9:ae:6e:
                    2f:c9:b5:f4:90:2a:0a:89:50:b6:04:08:38:60:46:
                    36:50:b8:fd:41:64:83:28:62:8c:51:9f:74:a4:3f:
                    e9:df:3c:2b:4a:aa:5e:f3:0a:7e:e7:99:34:bc:10:
                    a8:f5:f3:cd:55:10:df:d8:ee:0f:de:06:e6:88:58:
                    9c:54:b9:9f:38:86:e8:ad:25:e8:61:4f:fb:ab:45:
                    a8:91:da:2c:f9:de:0a:f7:07:66:bf:96:5d:93:72:
                    31:72:67:1f:df:46:cc:f3:ad:69:66:85:6b:d3:ff:
                    33:0e:64:f5:9c:52:73:b9:57:2b:24:97:19:39:6c:
                    cf:a6:cf:28:fa:93:10:62:86:87:15:54:e2:c9:c6:
                    88:a0:6c:a0:83:3f:c5:c3:c7:02:c9:45:f4:7c:06:
                    ce:48:8c:0a:67:f5:12:35:d6:0d:73:56:4a:a9:25:
                    23:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:64:A8:13:87:C7:F3:3E:DC:A5:09:8C:80:24:23:1E:0E:E9:92:AE
            X509v3 Authority Key Identifier:
                keyid:66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/HWSoE4fH8z7cpQmMgCQjHg7pkq4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.28.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:e5:3e:d5:31:57:f5:c6:17:55:0b:68:cf:10:9a:b5:d4:2e:
         2b:54:13:34:f8:6e:33:44:dd:b7:60:1a:46:26:8e:04:1e:08:
         4b:ea:0e:e6:a4:97:48:de:2c:6b:26:0c:8f:a9:b7:84:b2:0b:
         c1:e2:a9:67:66:73:71:9f:9f:9b:74:8c:30:0c:d5:ec:31:9a:
         96:a8:14:90:47:1f:4a:64:cd:93:43:17:a1:7d:dd:0d:91:6d:
         60:7c:ed:04:dd:ac:31:3e:08:ed:cd:7c:e8:32:6c:e9:1d:57:
         e5:58:cc:41:8d:84:03:c3:18:4e:df:90:06:8a:93:f1:51:74:
         57:ca:7b:67:f7:b7:6e:cf:0b:bf:47:f3:4e:4a:36:04:eb:56:
         b6:80:ba:90:a6:34:dc:bb:78:ce:e0:a6:dd:c0:45:39:41:ff:
         5d:05:ea:ed:e8:30:17:81:31:7f:6b:63:00:85:6c:76:0c:df:
         59:28:5f:f9:a1:f2:28:9f:ba:c7:db:bd:18:7c:b0:5b:36:4a:
         e4:c2:15:5b:0d:02:18:1a:57:d5:ec:de:72:f1:86:f3:5e:e3:
         39:68:b3:a4:4c:6a:40:ff:4b:85:dc:ca:6c:45:06:99:30:75:
         ed:39:06:be:60:ea:60:aa:de:9c:30:58:26:eb:e2:d4:a3:c9:
         19:7f:3e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:13 2026 by rpki-client