This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/w0osmDfeySxstGXd2QPz-B9mx_w.roa
File:                     w0osmDfeySxstGXd2QPz-B9mx_w.roa (raw, json)
Hash identifier:          44dvBeQTpGg4qqAvOjd/EibsEADF1B8V+4jebvfoamM=
Subject key identifier:   C3:4A:2C:98:37:DE:C9:2C:6C:B4:65:DD:D9:03:F3:F8:1F:66:C7:FC
Certificate issuer:       /CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Certificate serial:       019B79ED1460247C8C8B324B559DC4616B26
Authority key identifier: 1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/w0osmDfeySxstGXd2QPz-B9mx_w.roa
Signing time:             Thu 01 Jan 2026 14:18:58 +0000
ROA not before:           Thu 01 Jan 2026 14:18:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62357
IP address blocks:        185.39.184.0/22 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:14:60:24:7c:8c:8b:32:4b:55:9d:c4:61:6b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
        Validity
            Not Before: Jan  1 14:18:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c34a2c9837dec92c6cb465ddd903f3f81f66c7fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:2e:09:e6:1e:43:1b:44:65:af:e1:33:7c:
                    65:b3:53:d5:51:22:f8:ce:0c:b7:dc:11:d8:ec:ac:
                    02:33:44:84:04:64:2d:4d:f6:f4:fe:ce:9b:2d:fc:
                    34:33:bc:e7:06:4b:fb:ce:fb:4f:1c:62:ae:db:25:
                    d6:66:92:55:2e:71:85:1d:37:ee:93:b5:09:de:2d:
                    f2:b0:89:c6:64:2c:5d:e0:b2:8d:52:a9:1f:89:25:
                    5f:09:6c:a4:af:80:23:85:e3:fb:c9:db:97:1f:6d:
                    72:a3:31:16:e4:64:71:70:bc:65:ab:68:3b:d2:70:
                    e2:af:8e:27:8b:e1:c5:34:40:7f:fc:8e:14:8e:4d:
                    42:cd:0f:d7:0f:6f:dc:ce:f6:14:da:13:08:ea:6c:
                    38:ce:fb:05:82:eb:fb:72:f9:63:d4:67:04:9b:bd:
                    31:d8:9e:ce:3b:d7:ca:66:1d:6f:3b:ac:c6:82:22:
                    01:ae:e2:3f:ce:d0:b1:f0:b7:ba:6e:e4:25:be:73:
                    72:33:00:cf:da:4f:3d:52:91:37:b5:d3:6d:69:40:
                    54:3b:54:a4:6d:e9:f5:2e:8c:85:33:8d:8a:2c:d7:
                    ac:76:cd:62:5d:de:48:c0:37:e7:dd:51:b6:0e:66:
                    ae:d2:97:44:d5:f4:78:7a:44:49:e6:d3:90:f2:b2:
                    a0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4A:2C:98:37:DE:C9:2C:6C:B4:65:DD:D9:03:F3:F8:1F:66:C7:FC
            X509v3 Authority Key Identifier:
                keyid:1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/w0osmDfeySxstGXd2QPz-B9mx_w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.39.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:1a:98:30:ef:82:a0:e4:fa:ed:ce:36:dd:ae:81:fa:cd:58:
         45:11:5a:28:9e:a7:1b:48:61:a7:47:79:03:52:e4:75:56:51:
         7c:65:fb:89:44:64:fd:48:df:e2:26:3d:b9:57:35:83:3d:fd:
         41:18:a9:b0:74:4a:5e:d0:3a:96:82:55:2b:4c:e8:c6:40:73:
         d8:e7:e6:d0:5f:8a:bc:e0:e8:b8:e9:a8:c6:5a:b2:2d:d1:fa:
         f6:93:8d:f0:69:b7:a2:f6:db:67:43:9c:15:3f:ed:81:e1:09:
         c4:98:0d:95:3f:49:60:96:88:41:f1:72:04:27:79:ed:70:2f:
         20:01:ce:30:63:31:7e:65:29:df:33:45:d1:94:05:90:ec:e2:
         5e:3e:e3:c7:96:9d:92:5d:81:73:fb:9e:be:47:44:23:68:44:
         16:2d:1a:0c:16:a5:cb:3d:07:19:b3:d0:8f:f0:f6:4a:02:d0:
         3d:68:c6:7b:30:f9:5e:e9:f0:13:2a:b8:d0:1f:c2:d6:ec:f3:
         a0:3f:60:91:0c:40:38:82:9a:1d:b2:dc:c3:b4:87:94:f8:ed:
         92:21:cc:87:3d:fa:b2:46:52:fc:d3:d2:35:6b:dd:d1:d7:45:
         39:1d:dc:5c:df:ef:ad:dd:e6:9f:00:dc:ea:21:db:92:f5:a9:
         0a:e4:79:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:55:09 2026 by rpki-client