This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/w_LZxwyOUgD4IGBy1szvQwuznT8.roa
File:                     w_LZxwyOUgD4IGBy1szvQwuznT8.roa (raw, json)
Hash identifier:          YO+GhiXP/lIUMsu3S7EDreywlrg58HTztRPtniTveWM=
Subject key identifier:   C3:F2:D9:C7:0C:8E:52:00:F8:20:60:72:D6:CC:EF:43:0B:B3:9D:3F
Certificate issuer:       /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial:       019B7CEE3930B4F89E24F664F6B67EC8611D
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/w_LZxwyOUgD4IGBy1szvQwuznT8.roa
Signing time:             Fri 02 Jan 2026 04:19:05 +0000
ROA not before:           Fri 02 Jan 2026 04:19:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205724
IP address blocks:        46.227.174.0/24 maxlen: 24
                          2a02:7a00:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Jan 2026 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:39:30:b4:f8:9e:24:f6:64:f6:b6:7e:c8:61:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
        Validity
            Not Before: Jan  2 04:19:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c3f2d9c70c8e5200f8206072d6ccef430bb39d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ea:ec:c1:18:18:3e:14:7e:c2:c5:47:27:d4:
                    ca:c1:00:d7:b3:b9:fa:6f:d4:cf:3e:cf:16:98:d1:
                    9a:74:32:a5:2e:66:2b:2a:63:b3:bd:88:d1:e3:82:
                    2e:d1:8c:ae:17:2e:de:70:c1:41:66:50:49:83:0b:
                    f5:02:90:7c:c6:78:6f:2d:0e:bc:ed:1c:61:ac:f2:
                    f5:3f:58:4a:61:9a:71:12:3d:61:85:32:4e:04:8b:
                    5a:3b:0d:a3:f0:77:fd:bf:54:ab:51:56:e6:db:95:
                    12:f7:16:2c:74:d2:b9:f8:da:79:82:36:e5:c4:51:
                    32:10:4b:fd:1f:27:8b:91:68:c6:e1:5a:82:5c:53:
                    38:6e:82:a1:e5:2d:a5:93:94:bc:a9:ee:98:fa:cd:
                    a3:30:ed:e6:3d:38:92:f2:db:c8:7f:44:c8:d3:05:
                    fb:ed:96:1b:08:17:2e:b3:d1:a9:c9:5a:3d:b3:36:
                    3a:00:0c:83:19:f7:ef:94:e6:5a:44:fd:f9:ca:e2:
                    45:cf:6a:b2:80:cf:ec:04:f9:fd:21:a7:df:e3:3c:
                    eb:fa:7a:06:6b:4a:07:ef:7a:6e:7f:05:d8:cb:aa:
                    25:3f:62:65:36:73:22:d3:84:94:23:bf:d5:e6:a5:
                    1c:bc:e4:a9:7c:b6:1d:35:8e:3b:0a:db:b1:bb:23:
                    d8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F2:D9:C7:0C:8E:52:00:F8:20:60:72:D6:CC:EF:43:0B:B3:9D:3F
            X509v3 Authority Key Identifier:
                keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/w_LZxwyOUgD4IGBy1szvQwuznT8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.227.174.0/24
                IPv6:
                  2a02:7a00:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:cc:ac:76:b4:d9:80:24:7e:13:a3:af:42:6f:05:61:c7:33:
         81:4a:06:82:fb:8e:7a:ec:9f:ed:b2:e7:5a:a9:03:99:af:b1:
         f8:87:a3:0e:e6:17:bb:9e:b4:8e:a2:29:42:79:46:0d:75:35:
         39:27:8c:b0:2a:25:5f:fb:2a:d6:44:e3:ba:d0:c3:0f:6c:a5:
         6d:84:14:d6:ad:3e:fc:61:1d:b1:55:fc:1d:b3:a4:0a:5a:5c:
         77:60:28:e4:83:07:c8:0b:6b:b2:7b:38:45:cb:57:f0:9d:85:
         8f:a9:ba:4e:5a:37:51:fc:0c:60:28:37:57:ff:43:69:e7:1b:
         ef:dc:2f:45:5b:7e:82:84:24:fe:3c:78:80:2f:1b:5c:60:03:
         27:bf:b3:7a:1c:ae:08:6a:c3:17:c3:d6:54:c3:8e:1f:b3:7e:
         10:d7:a1:2d:87:51:b3:0c:2a:fa:c6:df:23:eb:a3:9b:5a:e9:
         60:3e:44:1b:6e:d9:40:e0:f0:2a:cd:fd:4d:22:7d:af:1b:71:
         33:46:42:35:39:2c:07:b4:2b:4b:11:54:43:02:24:83:91:b9:
         4c:b3:08:3f:c9:b7:3b:b6:11:a2:7f:ab:ff:2d:55:6c:65:84:
         fd:7f:d7:61:49:c1:45:43:ac:17:86:83:f0:87:53:77:bd:b7:
         51:c0:76:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 16:10:43 2026 by rpki-client