This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/OGZYNH_ub9WEC2VDtNIIdxioraM.roa
File:                     OGZYNH_ub9WEC2VDtNIIdxioraM.roa (raw, json)
Hash identifier:          mxW6PYWZAT0skvfActi6xk4FhEyZUpuKH/kbvthxrvo=
Subject key identifier:   38:66:58:34:7F:EE:6F:D5:84:0B:65:43:B4:D2:08:77:18:A8:AD:A3
Certificate issuer:       /CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Certificate serial:       019B7C7FE21CAADD1F86F5B3C88343E95D25
Authority key identifier: 59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/OGZYNH_ub9WEC2VDtNIIdxioraM.roa
Signing time:             Fri 02 Jan 2026 02:18:34 +0000
ROA not before:           Fri 02 Jan 2026 02:18:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59787
IP address blocks:        62.233.41.0/24 maxlen: 24
                          185.31.156.0/22 maxlen: 22
                          185.31.156.0/24 maxlen: 24
                          185.31.157.0/24 maxlen: 24
                          185.31.158.0/24 maxlen: 24
                          185.31.159.0/24 maxlen: 24
                          185.90.56.0/22 maxlen: 22
                          185.90.56.0/24 maxlen: 24
                          185.90.57.0/24 maxlen: 24
                          185.90.58.0/24 maxlen: 24
                          185.90.59.0/24 maxlen: 24
                          185.204.111.0/24 maxlen: 24
                          185.248.35.0/24 maxlen: 24
                          194.39.124.0/22 maxlen: 22
                          194.39.124.0/24 maxlen: 24
                          194.39.125.0/24 maxlen: 24
                          194.39.126.0/24 maxlen: 24
                          194.39.127.0/24 maxlen: 24
                          2a00:bc20::/32 maxlen: 32
                          2a05:df40::/29 maxlen: 29
                          2a0c:c2c0::/29 maxlen: 29
                          2a10:7b40::/29 maxlen: 29
                          2a10:a4c0::/29 maxlen: 29
                          2a11:9ec0::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:e2:1c:aa:dd:1f:86:f5:b3:c8:83:43:e9:5d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
        Validity
            Not Before: Jan  2 02:18:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=386658347fee6fd5840b6543b4d2087718a8ada3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:13:12:cc:5d:1c:c7:f7:f7:3e:72:12:34:94:
                    70:d4:86:97:3d:47:22:45:43:ff:89:44:f5:ea:7b:
                    12:bf:8e:60:1f:61:0b:5d:f9:56:da:00:5e:3a:20:
                    ad:aa:f0:fa:0a:ce:96:f0:7d:03:fb:7c:7d:a9:18:
                    7a:a8:40:3d:01:77:81:82:fd:b1:00:d5:aa:d1:8b:
                    28:79:b6:9e:a9:3a:2c:3c:95:e4:2b:93:9c:1b:15:
                    fc:5e:8b:36:55:f3:95:d9:d0:a7:d9:6f:c6:c3:f2:
                    82:72:0b:78:84:38:d4:03:b3:91:31:6a:a6:0c:8d:
                    72:a8:2a:8c:d7:95:7a:92:63:ba:50:b9:b3:91:fa:
                    e0:a3:f8:29:9a:56:c4:5a:b1:bf:5a:42:e9:f6:4d:
                    f8:58:7b:7c:e0:e8:cd:b4:09:2f:1b:0b:f7:44:a5:
                    2e:f2:ea:fe:dc:19:f4:8a:d6:1d:72:3d:5b:aa:9c:
                    0e:8e:77:03:33:98:87:db:4a:26:74:6d:43:09:8e:
                    e5:d3:9a:db:5e:1b:ab:ec:fe:ed:eb:96:c0:58:2b:
                    82:28:9c:5c:c6:72:24:16:a4:ca:05:3f:a1:8f:ce:
                    a5:bb:d2:59:70:17:4e:3b:31:ca:7a:0b:8a:7f:09:
                    ab:3c:9d:6d:fc:be:9f:2e:a8:62:8e:83:6f:ce:8d:
                    12:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:66:58:34:7F:EE:6F:D5:84:0B:65:43:B4:D2:08:77:18:A8:AD:A3
            X509v3 Authority Key Identifier:
                keyid:59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/OGZYNH_ub9WEC2VDtNIIdxioraM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.41.0/24
                  185.31.156.0/22
                  185.90.56.0/22
                  185.204.111.0/24
                  185.248.35.0/24
                  194.39.124.0/22
                IPv6:
                  2a00:bc20::/32
                  2a05:df40::/29
                  2a0c:c2c0::/29
                  2a10:7b40::/29
                  2a10:a4c0::/29
                  2a11:9ec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         93:b8:ba:09:00:7f:68:f8:86:76:53:96:e3:98:4e:42:da:2b:
         e0:6d:04:cf:2f:bc:65:4e:3f:34:ec:c0:ef:81:2b:e0:59:78:
         1b:63:d8:41:9e:47:fc:24:27:5c:5b:76:04:d6:9d:1e:5c:f1:
         b5:5d:2f:a5:9f:fa:5d:d7:48:4a:06:f9:23:ec:d1:a2:12:b9:
         5b:d1:0b:f7:50:3d:8c:ef:af:f8:72:7c:91:cd:5d:fc:cb:98:
         08:f6:56:69:a6:0c:b6:31:94:9b:d9:5b:59:51:3a:4f:d9:d7:
         7f:72:fd:65:de:f5:3d:e2:f2:2d:7d:31:a4:6f:10:fc:97:28:
         25:d3:13:67:23:b4:df:e9:92:c2:be:fa:d1:f5:87:35:d5:42:
         39:01:6a:fe:0a:27:a4:b0:d3:aa:60:d7:94:16:ad:4a:36:75:
         cb:0a:e6:21:3c:5b:b9:58:c4:37:11:ea:1c:5c:01:14:71:50:
         ee:ed:11:cd:96:7c:cd:8e:57:09:fe:aa:94:17:61:39:9f:d2:
         2b:f1:fa:1e:a6:e5:ef:2c:4f:18:bb:f9:8f:ff:b1:6b:72:d3:
         f3:9c:25:66:75:94:a2:56:14:56:a0:f9:ec:43:28:31:09:3e:
         cb:de:11:58:37:ee:b9:ce:a9:8d:e3:4a:0c:13:55:06:35:bd:
         5e:7f:d6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:14:14 2026 by rpki-client