This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/w1nRdrNeez0vUJlh8vHFNWOUhsE.roa
File:                     w1nRdrNeez0vUJlh8vHFNWOUhsE.roa (raw, json)
Hash identifier:          4TbKFjrQ7uh+pOKv4ANSRV4JzoWzQAcF2o+RGHQN8s0=
Subject key identifier:   C3:59:D1:76:B3:5E:7B:3D:2F:50:99:61:F2:F1:C5:35:63:94:86:C1
Certificate issuer:       /CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Certificate serial:       019B7C7FF6FFFFD43B27A17F27EFACEE32CB
Authority key identifier: 44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/w1nRdrNeez0vUJlh8vHFNWOUhsE.roa
Signing time:             Fri 02 Jan 2026 02:18:39 +0000
ROA not before:           Fri 02 Jan 2026 02:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204577
IP address blocks:        185.54.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:f6:ff:ff:d4:3b:27:a1:7f:27:ef:ac:ee:32:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
        Validity
            Not Before: Jan  2 02:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c359d176b35e7b3d2f509961f2f1c535639486c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e0:0c:54:58:a6:ee:d8:ed:1d:aa:59:63:49:
                    3f:c8:50:88:8a:97:b7:d8:b8:21:ea:36:b9:be:b6:
                    83:b0:26:04:69:bd:22:95:2e:2e:b2:56:d7:8c:47:
                    5b:e1:10:c7:6f:22:63:0a:4e:7a:2b:da:4e:7b:28:
                    31:c2:67:1c:40:c8:80:ea:71:dc:43:2d:b1:d9:48:
                    6a:b2:1e:4d:71:44:4e:5e:f6:49:14:fc:36:80:21:
                    68:fb:84:6b:04:45:72:10:14:95:36:ee:f9:08:a9:
                    db:fb:28:fd:e8:35:90:70:e0:50:22:31:41:56:3a:
                    a4:83:e9:8d:68:eb:38:60:e0:f7:14:f3:f7:c9:ab:
                    a0:2b:e1:6d:9e:8b:8d:a7:af:8c:f8:0b:27:5c:00:
                    81:62:aa:12:b4:05:23:fe:40:05:7d:56:47:8a:f9:
                    3e:87:90:9f:01:58:4a:a0:8f:8d:b4:ba:f2:2d:aa:
                    8e:ee:3e:5b:ec:8f:a3:af:b2:12:21:29:9f:30:57:
                    b7:d1:23:a1:99:0f:6e:5d:73:f0:d6:69:e4:30:73:
                    0d:81:db:79:cd:06:dd:26:ef:ff:f9:55:83:d4:2e:
                    01:8d:f0:13:06:75:7f:16:63:b1:f8:dc:33:c3:b3:
                    7d:d7:e7:11:71:00:e5:cc:08:05:e3:20:a0:ba:6e:
                    e5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:59:D1:76:B3:5E:7B:3D:2F:50:99:61:F2:F1:C5:35:63:94:86:C1
            X509v3 Authority Key Identifier:
                keyid:44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/w1nRdrNeez0vUJlh8vHFNWOUhsE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.54.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:e2:e0:e8:d8:94:94:6f:0b:72:11:43:c7:40:fe:c3:6b:43:
         87:2d:d7:32:e3:02:4a:d2:0f:28:df:cc:61:74:c5:7d:a8:a9:
         dc:55:5d:d4:da:0d:2c:56:8d:57:2d:b1:c0:6a:aa:8e:74:bd:
         07:1c:fb:3e:79:83:8e:c5:eb:19:1c:5a:67:7d:fd:4f:60:11:
         82:0c:1d:b5:e7:33:49:fe:fa:ee:2f:ed:1f:07:f4:3c:cf:48:
         04:7a:f8:0f:67:be:40:76:55:44:e5:c0:2b:64:16:af:48:6d:
         52:0e:97:df:a8:ad:54:8d:4a:63:f2:0c:35:21:e0:71:29:19:
         93:f5:9e:de:3d:7f:6b:8b:b7:c0:f4:0a:49:57:15:00:5f:2f:
         27:7f:2a:f1:32:93:84:f8:1c:16:34:d5:da:34:f4:9b:54:ac:
         c3:55:ec:70:91:ba:ab:3b:c2:c8:5e:15:41:6f:03:9f:a2:59:
         8f:cb:91:23:82:98:e0:bb:82:ab:18:c3:ca:d6:9e:e8:86:8f:
         ce:1f:ee:56:27:25:66:15:75:9d:4c:99:6f:e9:ee:e9:88:1c:
         1b:53:da:a8:35:8f:c6:b9:33:9a:79:d6:a9:84:a5:71:72:8c:
         94:4c:2e:1c:5d:4f:49:5e:88:47:01:22:55:74:46:bd:44:e7:
         1a:fb:09:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:21:48 2026 by rpki-client