This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/WN6nm9P1utuZWbfPP4NpFvTEUfc.roa
File:                     WN6nm9P1utuZWbfPP4NpFvTEUfc.roa (raw, json)
Hash identifier:          vxFDJKyu6Fl9t1C3JXTJl+d0N1fXG6sGHHUW42DW59s=
Subject key identifier:   58:DE:A7:9B:D3:F5:BA:DB:99:59:B7:CF:3F:83:69:16:F4:C4:51:F7
Certificate issuer:       /CN=3158a934189cf05891f8c4e599d0b98957e99729
Certificate serial:       019B7D5B071619AEECB77537486831E8B624
Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/WN6nm9P1utuZWbfPP4NpFvTEUfc.roa
Signing time:             Fri 02 Jan 2026 06:17:56 +0000
ROA not before:           Fri 02 Jan 2026 06:17:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198347
IP address blocks:        37.18.192.0/19 maxlen: 24
                          185.140.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:07:16:19:ae:ec:b7:75:37:48:68:31:e8:b6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729
        Validity
            Not Before: Jan  2 06:17:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=58dea79bd3f5badb9959b7cf3f836916f4c451f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a6:7c:47:5b:7b:f9:80:18:f6:07:b4:17:c0:
                    38:9a:1a:d2:59:8e:c4:f8:42:77:91:ea:52:b5:50:
                    c1:02:ee:61:4f:c3:a3:f6:11:f9:b3:f1:ef:c1:3d:
                    4d:a0:f6:e0:f1:30:4d:80:da:98:b4:0f:45:2f:c9:
                    ae:70:e6:7c:96:e9:b6:17:d4:16:d7:15:d1:83:67:
                    36:76:55:42:7f:bd:0c:8d:dd:3e:c4:4a:28:89:3b:
                    f5:55:65:69:93:16:76:5b:9f:a1:24:3b:15:9c:8c:
                    d3:0d:5b:3b:2a:bb:7c:0c:5e:d8:04:d5:9a:2f:ec:
                    c5:a9:c7:ff:1d:18:8f:52:df:87:0c:29:6c:27:e3:
                    99:bd:ba:d2:e9:9f:0d:0d:98:80:bb:ae:ee:21:b3:
                    a2:ab:39:d6:19:7c:81:a6:b1:86:a0:a0:fc:5b:c4:
                    14:20:3f:c2:89:27:15:fd:0d:0e:90:b4:d2:d3:fe:
                    40:c7:d3:a6:8b:c0:c5:03:74:4c:be:1e:ca:48:19:
                    9b:db:ab:af:0c:5c:fb:89:9d:a5:55:f5:fe:6a:fb:
                    f1:44:5e:e1:a2:ce:1c:c0:1a:0e:1c:de:83:2c:c7:
                    45:69:a4:b6:25:f4:7d:44:3c:ef:d4:ae:7a:99:f8:
                    00:18:2e:40:c8:06:95:3f:60:77:cb:3f:cb:e8:9b:
                    76:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DE:A7:9B:D3:F5:BA:DB:99:59:B7:CF:3F:83:69:16:F4:C4:51:F7
            X509v3 Authority Key Identifier:
                keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/WN6nm9P1utuZWbfPP4NpFvTEUfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.18.192.0/19
                  185.140.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:b9:57:c0:81:63:bb:e8:97:2c:54:5a:26:73:4a:12:44:3e:
         bb:21:29:da:c7:39:5b:a3:cc:fd:9b:a8:40:8f:2a:2a:01:72:
         5c:31:9f:f7:15:5e:35:5d:fb:49:9f:ec:ff:45:6a:bb:ea:06:
         12:df:69:fb:30:2b:c3:2b:c1:ee:26:62:ac:b3:b9:87:8b:67:
         c2:46:1e:da:85:ad:58:a4:f9:4a:20:10:10:e0:c4:b6:54:bd:
         4c:55:c0:41:67:b1:f5:d8:c6:0a:20:d5:ae:dc:c2:2f:68:f7:
         12:cb:c8:d4:49:61:8e:13:33:b7:db:c6:d6:cd:82:5a:58:70:
         71:22:b3:87:9b:8c:b2:2f:7e:73:c5:9e:18:33:03:1c:cb:7e:
         3f:85:3c:54:12:49:44:b3:f1:57:22:90:d7:1a:4b:50:76:5e:
         24:3c:52:19:15:d0:e6:e6:98:1d:11:ad:73:d8:16:87:ed:c5:
         d4:33:55:3b:bc:35:cd:01:ee:38:d7:51:58:74:77:db:ec:02:
         31:49:2a:1f:fd:84:b9:6c:55:93:c1:98:78:fd:94:45:44:98:
         4d:ca:ff:46:a9:d8:08:66:da:44:36:f4:96:de:6e:51:ff:03:
         f0:82:67:3b:3a:44:00:83:51:b7:9d:95:53:be:31:23:80:5c:
         1f:55:2a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:28:40 2026 by rpki-client