This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/WpUIGP06eptdw3HvJXEXaq0nbZE.roa
File:                     WpUIGP06eptdw3HvJXEXaq0nbZE.roa (raw, json)
Hash identifier:          htiyR7KetN+O2yvc71NkM/dclEdrNUy7FljxlennH9w=
Subject key identifier:   5A:95:08:18:FD:3A:7A:9B:5D:C3:71:EF:25:71:17:6A:AD:27:6D:91
Certificate issuer:       /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial:       019B7DCB08CF3AC2BA42D288D0EDA003A762
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/WpUIGP06eptdw3HvJXEXaq0nbZE.roa
Signing time:             Fri 02 Jan 2026 08:20:16 +0000
ROA not before:           Fri 02 Jan 2026 08:20:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8788
IP address blocks:        178.211.96.0/19 maxlen: 20
                          178.211.112.0/20 maxlen: 20
                          193.138.87.0/24 maxlen: 24
                          194.32.108.0/23 maxlen: 23
                          194.32.108.0/24 maxlen: 24
                          194.32.109.0/24 maxlen: 24
                          194.32.110.0/24 maxlen: 24
                          212.26.128.0/19 maxlen: 19
                          212.26.140.0/24 maxlen: 24
                          212.80.32.0/19 maxlen: 20
                          2a00:e780::/32 maxlen: 32
                          2a00:e780:2::/48 maxlen: 48
                          2a00:e780:a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:08:cf:3a:c2:ba:42:d2:88:d0:ed:a0:03:a7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
        Validity
            Not Before: Jan  2 08:20:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a950818fd3a7a9b5dc371ef2571176aad276d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:f3:13:19:e4:b3:81:96:c4:04:ae:99:28:
                    9d:aa:3b:dc:df:b2:e5:82:bf:46:df:24:bd:91:0e:
                    ea:05:07:5e:71:23:fd:59:92:fc:57:c8:4c:d1:8a:
                    7e:d3:7b:3f:67:bc:15:50:ed:82:40:25:28:26:70:
                    4a:ff:78:a5:b3:d7:d4:47:2a:35:bd:15:d8:16:b1:
                    a0:57:c8:50:90:4f:61:3a:3c:63:4c:67:28:4f:94:
                    60:b9:95:49:55:30:8f:bd:0b:cc:c1:9d:43:ba:36:
                    b3:45:c6:d2:5a:0c:81:86:84:b7:88:e4:82:81:13:
                    e4:95:1a:36:1d:e5:df:18:a5:2b:d1:4b:66:85:10:
                    92:01:b1:1c:98:48:76:44:8e:be:a3:89:e2:3c:5b:
                    3d:25:3e:1f:8c:05:c9:83:fd:61:4d:9a:05:2e:b9:
                    ce:e0:31:e0:42:4d:b7:16:0f:3a:71:09:f1:dc:52:
                    a1:4a:36:ac:fc:6f:9d:a6:53:87:73:0c:c9:0b:c3:
                    07:24:9c:91:c2:f2:6d:67:dc:3d:d5:c1:d6:e8:92:
                    93:b4:d2:a0:cb:a7:d2:b2:43:81:2b:dc:63:ec:e4:
                    0d:44:00:ac:e2:73:1d:ab:23:4c:46:54:89:23:92:
                    bb:2f:e4:51:10:8a:68:87:55:65:4d:38:ba:e7:eb:
                    f5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:95:08:18:FD:3A:7A:9B:5D:C3:71:EF:25:71:17:6A:AD:27:6D:91
            X509v3 Authority Key Identifier:
                keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/WpUIGP06eptdw3HvJXEXaq0nbZE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.211.96.0/19
                  193.138.87.0/24
                  194.32.108.0-194.32.110.255
                  212.26.128.0/19
                  212.80.32.0/19
                IPv6:
                  2a00:e780::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:69:06:d1:fd:11:2b:c2:de:80:9c:65:9e:57:8d:b5:50:35:
         dd:8d:8f:39:86:d7:a4:16:a5:e1:09:42:f9:9b:9c:2b:b2:fc:
         88:20:c2:c8:03:fa:41:ec:94:16:0d:5e:c3:ab:11:7e:9b:63:
         74:41:93:6e:5d:eb:f6:9b:c6:8c:28:75:95:bf:01:7d:b9:0f:
         01:78:3e:91:3c:ff:48:c0:7a:95:78:7d:75:dc:be:ea:bb:9f:
         7e:43:7c:72:4a:b5:c2:3b:f6:b5:90:be:07:c3:86:88:ec:b8:
         72:9f:6a:b8:09:8a:e2:6d:a5:57:c3:b6:ad:34:97:2a:43:df:
         3f:5f:5a:0e:c0:56:97:3c:3d:d5:60:18:bd:94:02:62:92:7a:
         0e:00:23:3d:b7:47:92:41:6a:d0:9a:4e:f8:7e:92:d2:29:7b:
         2b:c0:52:19:d9:97:4e:27:dd:ae:9c:89:8d:af:4e:cd:aa:02:
         47:2e:f8:d5:0d:87:d1:86:62:f3:f4:18:8d:f7:64:79:e8:35:
         c5:80:91:6b:d9:bf:48:02:39:4e:8d:29:91:5a:96:d9:6c:a1:
         05:d7:10:59:c4:eb:83:e9:5c:64:f6:d6:0f:31:f8:52:42:13:
         f9:c4:15:af:ba:81:b1:99:ee:01:e4:8b:e2:45:23:af:1c:9e:
         05:55:34:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:10:24 2026 by rpki-client