This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/WGGxRGnSpSQM4E5fz2l8fx0ruxM.roa
File:                     WGGxRGnSpSQM4E5fz2l8fx0ruxM.roa (raw, json)
Hash identifier:          zDZbumDhMR6Ghkp07YAiTeEiF3v2S77fftVITSxto9g=
Subject key identifier:   58:61:B1:44:69:D2:A5:24:0C:E0:4E:5F:CF:69:7C:7F:1D:2B:BB:13
Certificate issuer:       /CN=6d9ff4a53a3db0f432820cd737d543f867a972d8
Certificate serial:       019B7A5B55B6F930685AB96A2FFAE5853802
Authority key identifier: 6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/WGGxRGnSpSQM4E5fz2l8fx0ruxM.roa
Signing time:             Thu 01 Jan 2026 16:19:24 +0000
ROA not before:           Thu 01 Jan 2026 16:19:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41902
IP address blocks:        46.17.128.0/21 maxlen: 24
                          46.17.128.0/22 maxlen: 24
                          46.17.128.0/24 maxlen: 24
                          46.17.129.0/24 maxlen: 24
                          46.17.130.0/24 maxlen: 24
                          46.17.131.0/24 maxlen: 24
                          46.17.132.0/22 maxlen: 24
                          46.17.132.0/24 maxlen: 24
                          46.17.133.0/24 maxlen: 24
                          46.17.134.0/24 maxlen: 24
                          46.17.135.0/24 maxlen: 24
                          194.36.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:55:b6:f9:30:68:5a:b9:6a:2f:fa:e5:85:38:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ff4a53a3db0f432820cd737d543f867a972d8
        Validity
            Not Before: Jan  1 16:19:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5861b14469d2a5240ce04e5fcf697c7f1d2bbb13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fb:0d:d5:5f:d2:70:c4:0b:a3:da:5e:ac:38:
                    ff:7d:6f:a7:e2:60:6d:64:d1:65:3b:ae:fb:be:f2:
                    9a:91:e3:de:43:7c:2c:c3:49:88:3c:38:ea:ab:b2:
                    4c:85:06:53:bf:e8:97:d9:38:46:bd:b6:07:b5:a1:
                    a4:d3:18:8b:96:6e:08:52:e4:d2:36:67:e3:a8:43:
                    87:e9:81:0c:0d:25:6c:1d:a5:c2:1c:be:4f:9a:08:
                    a7:20:19:11:df:42:7e:ba:a2:19:3a:63:a4:95:e4:
                    f7:9d:44:68:7b:e4:86:56:01:8b:d2:49:68:9c:ac:
                    2c:00:ee:6c:3f:b0:5a:6e:64:83:3d:f3:49:05:90:
                    5b:38:21:f1:24:31:a3:a2:ef:77:26:cc:e6:3f:d6:
                    cd:9c:01:c3:2e:7b:c1:2c:e0:60:f1:6a:fe:e2:0e:
                    cd:b4:aa:f0:a1:d2:94:7b:f9:82:6b:2f:3f:6f:e8:
                    20:ae:82:d6:7e:62:d7:55:c4:91:40:d7:ce:af:ec:
                    8e:60:8f:64:fd:7f:29:31:16:d9:57:83:8d:2e:ef:
                    21:1d:22:6b:f2:06:a0:84:6e:4d:52:c9:b9:cc:ee:
                    4a:1c:10:35:23:3e:2d:e9:05:c1:0b:24:d9:3e:35:
                    ff:fa:f5:1e:63:d4:b1:e8:a8:20:84:50:31:8e:f2:
                    57:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:61:B1:44:69:D2:A5:24:0C:E0:4E:5F:CF:69:7C:7F:1D:2B:BB:13
            X509v3 Authority Key Identifier:
                keyid:6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/WGGxRGnSpSQM4E5fz2l8fx0ruxM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.17.128.0/21
                  194.36.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:49:ef:42:ee:6a:70:da:52:45:a7:e4:30:92:a6:28:a4:a8:
         d3:b9:d8:bb:40:f3:e9:0e:eb:44:6d:d5:9e:8b:6f:d8:a0:9a:
         20:a2:20:67:0a:4e:81:2c:0c:a6:37:a6:6f:8c:30:63:97:87:
         40:46:ef:c5:04:2d:5b:40:37:d2:ad:ab:e2:ce:4c:85:36:32:
         5a:60:00:ed:29:ee:b5:f6:57:cc:94:fc:c4:64:64:68:5c:38:
         12:dc:16:9a:08:3a:90:3b:97:45:81:5f:00:64:3c:6c:31:88:
         2f:48:7f:6d:cb:a1:3c:6c:bd:7b:86:fe:dd:d1:66:c2:ff:f9:
         c3:8f:4f:fa:43:c5:f4:08:7c:f4:22:9a:e4:8d:74:04:60:a3:
         b7:10:a6:9e:1b:1d:9e:fc:ec:21:55:73:22:07:1e:97:ae:5d:
         50:66:d5:d2:83:80:37:62:3d:6b:32:52:10:ed:e7:97:e1:7e:
         2c:f9:5b:41:12:eb:9d:ef:78:34:87:c1:00:f0:66:de:9d:22:
         de:07:28:81:ac:4b:5c:3f:02:57:40:97:a0:97:30:49:b9:a6:
         a0:11:d2:2c:fc:8c:ce:4b:9e:a4:c8:7e:aa:49:1c:f7:21:60:
         ef:6b:ac:ed:7f:58:dd:31:88:af:d3:ff:94:b5:51:e6:d8:41:
         7c:c5:b0:fa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt6W1W2+TBoWrlqL/rlhTgCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkOWZmNGE1M2EzZGIwZjQzMjgyMGNkNzM3ZDU0M2Y4Njdh
OTcyZDgwHhcNMjYwMTAxMTYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODYxYjE0NDY5ZDJhNTI0MGNlMDRlNWZjZjY5N2M3ZjFkMmJiYjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/sN1V/ScMQLo9perDj/fW+n4mBt
ZNFlO677vvKakePeQ3wsw0mIPDjqq7JMhQZTv+iX2ThGvbYHtaGk0xiLlm4IUuTS
NmfjqEOH6YEMDSVsHaXCHL5PmginIBkR30J+uqIZOmOkleT3nURoe+SGVgGL0klo
nKwsAO5sP7BabmSDPfNJBZBbOCHxJDGjou93JszmP9bNnAHDLnvBLOBg8Wr+4g7N
tKrwodKUe/mCay8/b+ggroLWfmLXVcSRQNfOr+yOYI9k/X8pMRbZV4ONLu8hHSJr
8gaghG5NUsm5zO5KHBA1Iz4t6QXBCyTZPjX/+vUeY9Sx6KgghFAxjvJXbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFhhsURp0qUkDOBOX89pfH8dK7sTMB8GA1UdIwQY
MBaAFG2f9KU6PbD0MoIM1zfVQ/hnqXLYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlpfMHBUbzlzUFF5Z2d6WE45VkQtR2VwY3RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82MTk3OWEtZWE4My00ZWU3LWI3Zjct
ZTE2OGRiMmM1NGI0LzEvV0dHeFJHblNwU1FNNEU1ZnoybDhmeDBydXhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82MTk3OWEtZWE4My00ZWU3LWI3ZjctZTE2OGRiMmM1NGI0
LzEvYlpfMHBUbzlzUFF5Z2d6WE45VkQtR2VwY3RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLhGAAwQA
wiSgMA0GCSqGSIb3DQEBCwUAA4IBAQAHSe9C7mpw2lJFp+QwkqYopKjTudi7QPPp
DutEbdWei2/YoJogoiBnCk6BLAymN6ZvjDBjl4dARu/FBC1bQDfSravizkyFNjJa
YADtKe619lfMlPzEZGRoXDgS3BaaCDqQO5dFgV8AZDxsMYgvSH9ty6E8bL17hv7d
0WbC//nDj0/6Q8X0CHz0IprkjXQEYKO3EKaeGx2e/OwhVXMiBx6Xrl1QZtXSg4A3
Yj1rMlIQ7eeX4X4s+VtBEuud73g0h8EA8GbenSLeByiBrEtcPwJXQJeglzBJuaag
EdIs/IzOS56kyH6qSRz3IWDva6ztf1jdMYiv0/+UtVHm2EF8xbD6
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:49:00 2026 by rpki-client