This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/HWGUebs3EWNszWIfhL8txyJZ4Wc.roa
File:                     HWGUebs3EWNszWIfhL8txyJZ4Wc.roa (raw, json)
Hash identifier:          Kkv1FkwV95pLZojGSMytjvxl12xKvZhsibGSapIvxNM=
Subject key identifier:   1D:61:94:79:BB:37:11:63:6C:CD:62:1F:84:BF:2D:C7:22:59:E1:67
Certificate issuer:       /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial:       019B7BA5125890CBA5CE6F7F5B01C58D4F54
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/HWGUebs3EWNszWIfhL8txyJZ4Wc.roa
Signing time:             Thu 01 Jan 2026 22:19:34 +0000
ROA not before:           Thu 01 Jan 2026 22:19:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        46.227.40.0/24 maxlen: 24
                          46.227.41.0/24 maxlen: 24
                          46.227.42.0/24 maxlen: 24
                          46.227.43.0/24 maxlen: 24
                          46.227.44.0/24 maxlen: 24
                          46.227.45.0/24 maxlen: 24
                          46.227.47.0/24 maxlen: 24
                          185.31.204.0/24 maxlen: 24
                          185.31.205.0/24 maxlen: 24
                          185.31.206.0/24 maxlen: 24
                          185.31.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 16:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a5:12:58:90:cb:a5:ce:6f:7f:5b:01:c5:8d:4f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
        Validity
            Not Before: Jan  1 22:19:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1d619479bb3711636ccd621f84bf2dc72259e167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b7:1a:95:94:72:95:8d:87:e7:f8:5b:9c:c9:
                    18:26:d5:8e:cf:ed:77:e5:08:b2:17:4e:75:fe:92:
                    9c:2a:98:e8:17:7b:ca:df:7c:ad:0d:59:55:ae:46:
                    a5:e4:6f:c4:35:51:01:0a:35:42:a2:f3:c8:8b:a3:
                    a3:29:30:07:ec:86:72:2d:cb:02:1c:2e:a0:a0:f0:
                    d1:4b:24:a7:de:e5:98:52:85:28:d4:29:79:7a:59:
                    ae:9e:78:cb:77:29:9e:f0:18:2c:3e:b8:05:f0:7f:
                    fd:11:13:f7:0b:b8:88:18:f2:e0:9c:05:b2:79:bc:
                    2b:51:12:cb:75:ff:ae:98:06:e9:c8:27:72:00:38:
                    e5:f2:3e:ae:7f:71:21:29:47:67:87:29:a3:83:a5:
                    cc:46:3b:5d:06:73:60:bb:f4:53:7f:2a:53:cd:27:
                    c0:9d:58:90:28:3c:e9:7b:92:99:62:5f:75:7a:ee:
                    e6:e0:80:0c:fa:a2:b5:2f:35:b5:4d:c5:5e:c7:0c:
                    f4:2c:b8:cd:1c:10:55:ab:1d:8d:c9:63:56:d8:fb:
                    37:24:24:f0:e8:45:bf:9d:42:2b:09:5d:5d:50:e6:
                    62:91:9c:47:bf:2d:a7:0b:08:a8:a7:eb:f0:5a:f4:
                    92:cc:2c:44:d7:0b:80:e2:b9:85:48:85:c9:fd:6d:
                    bb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:61:94:79:BB:37:11:63:6C:CD:62:1F:84:BF:2D:C7:22:59:E1:67
            X509v3 Authority Key Identifier:
                keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/HWGUebs3EWNszWIfhL8txyJZ4Wc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.227.40.0-46.227.45.255
                  46.227.47.0/24
                  185.31.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:28:3d:b5:85:64:20:73:d7:32:77:1b:f5:5e:4f:2b:ff:28:
         fc:05:35:50:82:51:e2:57:cb:59:3f:9d:de:9a:07:b0:fd:6a:
         7e:4f:df:40:c3:c0:a7:9d:f8:5a:0d:1a:77:8c:90:c8:69:e2:
         24:24:77:48:53:97:f2:ff:fe:a2:db:92:8b:90:fd:c1:1e:ed:
         ec:99:28:1c:fd:1c:74:2e:d9:08:29:54:90:5f:1d:9c:b8:76:
         8d:d4:ac:1e:1e:ca:2e:af:e1:b1:0d:92:84:09:e8:de:8e:ed:
         d9:80:07:5c:a8:ac:5d:cd:7d:26:b6:27:ef:18:e0:96:75:0a:
         f0:6e:26:a2:0d:e7:c4:03:06:b5:d7:f5:b5:dd:b9:cd:fe:77:
         12:ac:e1:65:5c:2c:0b:88:fc:46:7d:43:9b:4e:d2:2f:ea:88:
         d4:f6:2d:50:25:71:f4:f6:60:ae:3f:22:b5:df:3a:e2:14:31:
         98:8d:75:a8:78:37:ac:a6:92:ce:c8:b1:11:7d:db:c2:69:0e:
         62:09:1c:43:dd:78:8f:69:7b:d0:0e:06:10:ce:8c:9d:5a:49:
         b9:24:d3:4e:33:f5:78:d4:94:55:8e:cb:8f:d9:ec:5c:16:75:
         27:52:a0:de:54:ed:ef:58:65:aa:a7:cf:09:21:67:94:99:42:
         36:82:4b:c7
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZt7pRJYkMulzm9/WwHFjU9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZDhmNjIwOTk5NTA2Y2M4NmQ3NTQ4ZWE3MjgyYmIxMjlm
MDJkNjgwHhcNMjYwMTAxMjIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDYxOTQ3OWJiMzcxMTYzNmNjZDYyMWY4NGJmMmRjNzIyNTllMTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LcalZRylY2H5/hbnMkYJtWOz+13
5QiyF051/pKcKpjoF3vK33ytDVlVrkal5G/ENVEBCjVCovPIi6OjKTAH7IZyLcsC
HC6goPDRSySn3uWYUoUo1Cl5elmunnjLdyme8BgsPrgF8H/9ERP3C7iIGPLgnAWy
ebwrURLLdf+umAbpyCdyADjl8j6uf3EhKUdnhymjg6XMRjtdBnNgu/RTfypTzSfA
nViQKDzpe5KZYl91eu7m4IAM+qK1LzW1TcVexwz0LLjNHBBVqx2NyWNW2Ps3JCTw
6EW/nUIrCV1dUOZikZxHvy2nCwiop+vwWvSSzCxE1wuA4rmFSIXJ/W275QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFB1hlHm7NxFjbM1iH4S/LcciWeFnMB8GA1UdIwQY
MBaAFCPY9iCZlQbMhtdUjqcoK7Ep8C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2Et
NGZkYzQ4ZGE4ZjMzLzEvSFdHVWViczNFV05zeldJZmhMOHR4eUpaNFdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2EtNGZkYzQ4ZGE4ZjMz
LzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAMu4ygD
BAEu4ywDBAAu4y8DBAK5H8wwDQYJKoZIhvcNAQELBQADggEBAFEoPbWFZCBz1zJ3
G/VeTyv/KPwFNVCCUeJXy1k/nd6aB7D9an5P30DDwKed+FoNGneMkMhp4iQkd0hT
l/L//qLbkouQ/cEe7eyZKBz9HHQu2QgpVJBfHZy4do3UrB4eyi6v4bENkoQJ6N6O
7dmAB1yorF3NfSa2J+8Y4JZ1CvBuJqIN58QDBrXX9bXduc3+dxKs4WVcLAuI/EZ9
Q5tO0i/qiNT2LVAlcfT2YK4/IrXfOuIUMZiNdah4N6ymks7IsRF928JpDmIJHEPd
eI9pe9AOBhDOjJ1aSbkk004z9XjUlFWOy4/Z7FwWdSdSoN5U7e9YZaqnzwkhZ5SZ
QjaCS8c=
-----END CERTIFICATE-----
Generated at Sat Jan 3 01:35:52 2026 by rpki-client