This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/w9zvM7QRR7_IxMi9fMh_OT4wgpE.roa
File:                     w9zvM7QRR7_IxMi9fMh_OT4wgpE.roa (raw, json)
Hash identifier:          h8qI1LVZP2sdyXxXEHPZMU7iKv71RSSqFPWO3Wrbyjk=
Subject key identifier:   C3:DC:EF:33:B4:11:47:BF:C8:C4:C8:BD:7C:C8:7F:39:3E:30:82:91
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       019C42A12A07AAAB9B542955B135FD4A4536
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/w9zvM7QRR7_IxMi9fMh_OT4wgpE.roa
Signing time:             Mon 09 Feb 2026 13:39:44 +0000
ROA not before:           Mon 09 Feb 2026 13:39:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        62.171.232.0/21 maxlen: 24
                          62.171.240.0/22 maxlen: 24
                          62.171.244.0/22 maxlen: 24
                          62.171.248.0/24 maxlen: 24
                          194.154.24.0/22 maxlen: 24
                          194.154.28.0/22 maxlen: 24
                          194.238.40.0/23 maxlen: 24
                          194.238.42.0/23 maxlen: 24
                          194.238.44.0/22 maxlen: 24
                          194.238.72.0/22 maxlen: 24
                          194.238.76.0/22 maxlen: 24
                          194.238.78.0/24 maxlen: 24
                          194.238.79.0/24 maxlen: 24
                          194.238.80.0/22 maxlen: 24
                          194.238.84.0/22 maxlen: 24
                          194.238.88.0/22 maxlen: 24
                          194.238.92.0/22 maxlen: 24
                          213.18.245.0/24 maxlen: 24
                          217.177.0.0/21 maxlen: 24
                          217.177.8.0/22 maxlen: 24
                          217.177.12.0/22 maxlen: 24
                          217.177.32.0/24 maxlen: 24
                          217.177.33.0/24 maxlen: 24
                          217.177.34.0/24 maxlen: 24
                          217.177.35.0/24 maxlen: 24
                          217.177.72.0/24 maxlen: 24
                          217.177.73.0/24 maxlen: 24
                          217.177.74.0/24 maxlen: 24
                          217.177.75.0/24 maxlen: 24
                          217.177.80.0/22 maxlen: 24
                          217.177.84.0/22 maxlen: 24
                          217.179.72.0/23 maxlen: 24
                          217.179.88.0/24 maxlen: 24
                          217.179.91.0/24 maxlen: 24
                          217.179.228.0/22 maxlen: 24
                          217.180.15.0/24 maxlen: 24
                          217.180.20.0/24 maxlen: 24
                          217.180.21.0/24 maxlen: 24
                          217.180.22.0/23 maxlen: 24
                          217.180.40.0/22 maxlen: 24
                          217.180.44.0/24 maxlen: 24
                          217.180.45.0/24 maxlen: 24
                          217.180.46.0/24 maxlen: 24
                          217.180.47.0/24 maxlen: 24
                          217.180.52.0/24 maxlen: 24
                          217.180.53.0/24 maxlen: 24
                          217.180.54.0/24 maxlen: 24
                          217.180.55.0/24 maxlen: 24
                          217.180.60.0/24 maxlen: 24
                          217.181.80.0/21 maxlen: 24
                          217.181.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 15:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:a1:2a:07:aa:ab:9b:54:29:55:b1:35:fd:4a:45:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Feb  9 13:39:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c3dcef33b41147bfc8c4c8bd7cc87f393e308291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:09:57:31:9f:7d:6d:f9:64:e9:64:11:75:9d:
                    22:82:f5:08:f7:0b:ef:8f:5d:e0:f2:6e:ce:45:97:
                    96:61:bd:8a:b6:65:51:6e:75:f1:76:92:ef:f2:6a:
                    f8:90:58:41:d5:6e:e8:58:fa:d8:20:9e:0c:04:83:
                    1a:c6:b6:06:71:22:56:d9:18:72:ef:15:5e:f9:cb:
                    b7:88:67:6f:a7:b1:09:1d:54:a2:54:b1:08:99:9b:
                    7e:37:ec:a5:04:3e:61:dd:d3:87:dd:d1:90:e2:e7:
                    e7:6d:21:0d:6a:e5:a2:ad:8d:c8:31:6e:63:4e:db:
                    ea:5c:6a:b2:b3:2c:2a:cf:fe:c2:48:82:6d:fd:02:
                    30:0b:94:0d:ee:f9:c5:a1:11:08:aa:66:3f:71:8d:
                    4f:f4:9e:45:24:c0:94:e6:f8:f1:cd:8f:9b:13:78:
                    3f:bd:87:92:f0:e8:4d:8f:3b:47:01:c2:52:53:1a:
                    15:06:bd:1b:8f:66:f7:0a:c5:f2:6e:66:7a:bf:9e:
                    12:4f:66:f9:a9:e8:69:90:c5:e6:fb:ff:36:05:1f:
                    97:67:0f:b3:f7:f1:a1:0c:a7:a7:98:70:93:38:0a:
                    a8:51:5c:e0:ca:5d:68:33:da:57:4b:71:ae:34:e0:
                    ab:00:40:fa:ee:7e:2c:3f:ab:3b:fd:73:84:f9:55:
                    5a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DC:EF:33:B4:11:47:BF:C8:C4:C8:BD:7C:C8:7F:39:3E:30:82:91
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/w9zvM7QRR7_IxMi9fMh_OT4wgpE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.171.232.0-62.171.248.255
                  194.154.24.0/21
                  194.238.40.0/21
                  194.238.72.0-194.238.95.255
                  213.18.245.0/24
                  217.177.0.0/20
                  217.177.32.0/22
                  217.177.72.0/22
                  217.177.80.0/21
                  217.179.72.0/23
                  217.179.88.0/24
                  217.179.91.0/24
                  217.179.228.0/22
                  217.180.15.0/24
                  217.180.20.0/22
                  217.180.40.0/21
                  217.180.52.0/22
                  217.180.60.0/24
                  217.181.80.0-217.181.91.255

    Signature Algorithm: sha256WithRSAEncryption
         b4:79:01:5f:58:45:f5:b1:49:de:22:2e:df:0c:23:10:08:45:
         d3:d2:e8:42:77:c9:59:ec:7d:d6:97:be:6d:10:88:08:ce:38:
         d7:12:1e:f5:75:74:cc:3e:9f:16:83:e1:a8:14:f4:4b:cd:82:
         b5:e3:98:80:fb:0e:3a:2f:09:74:ae:aa:ca:3f:64:da:8f:67:
         33:38:af:62:8f:4a:38:c0:2e:b6:92:50:a1:e4:ed:8e:95:da:
         94:41:2d:ae:91:14:9c:f1:ea:d3:f8:c3:29:e4:a6:6a:86:55:
         ef:4a:66:2e:cb:e3:48:f6:38:78:dc:50:29:45:f6:e8:7d:a5:
         f2:8b:ea:19:47:ce:9d:59:44:04:cc:1e:30:79:1b:3c:de:4b:
         49:30:c8:87:cb:b3:41:55:41:09:6a:64:98:03:80:fc:fe:d7:
         57:00:40:93:82:46:ed:1c:2c:89:39:af:b6:48:1f:81:17:41:
         3e:43:5e:65:15:2a:88:5e:0b:fc:cf:a5:14:64:d1:b1:81:15:
         ae:69:3d:9e:ce:21:ae:69:79:42:7f:bb:0d:85:a1:19:06:56:
         86:6d:f4:9a:6c:cf:a4:4b:63:bb:1f:48:6c:4d:e6:ea:d7:73:
         33:db:77:47:52:ef:d7:36:ee:cc:14:94:9b:0c:15:ce:8a:a8:
         b1:47:00:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 22:45:56 2026 by rpki-client