This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/wInMghm11FcLBqJT2EV9FM0ZiVY.roa
File:                     wInMghm11FcLBqJT2EV9FM0ZiVY.roa (raw, json)
Hash identifier:          UusTkTJUi8H8e/4BJF3uND4xQVZ//M68retdZEwQKm0=
Subject key identifier:   C0:89:CC:82:19:B5:D4:57:0B:06:A2:53:D8:45:7D:14:CD:19:89:56
Certificate issuer:       /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial:       019B7C1278E06AB5BDFB11749CAB3933740D
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/wInMghm11FcLBqJT2EV9FM0ZiVY.roa
Signing time:             Fri 02 Jan 2026 00:19:03 +0000
ROA not before:           Fri 02 Jan 2026 00:19:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     7018
IP address blocks:        185.10.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 03:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:78:e0:6a:b5:bd:fb:11:74:9c:ab:39:33:74:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
        Validity
            Not Before: Jan  2 00:19:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c089cc8219b5d4570b06a253d8457d14cd198956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ec:d9:40:72:79:b6:a6:7e:0a:25:0e:61:d5:
                    b6:cf:02:80:56:3f:c6:3d:17:b7:52:c3:42:44:ca:
                    35:ca:6d:1b:7f:8d:cc:26:37:d9:5c:04:07:79:60:
                    77:f8:52:8d:d2:19:73:e3:4b:f0:78:71:3f:38:32:
                    43:2a:03:45:91:9a:13:b0:d5:b5:02:48:c7:18:e6:
                    d1:da:3d:b0:eb:23:dd:98:ec:bf:62:e9:e9:72:a7:
                    0a:9e:28:41:68:55:39:84:91:a3:59:f2:d6:af:54:
                    46:f5:23:65:e9:78:af:be:9e:6c:30:d0:c2:42:74:
                    c1:0a:02:2e:4e:bb:31:4c:20:de:e6:b8:d0:fc:e2:
                    c5:37:30:c4:e9:58:5b:c4:a9:47:e0:44:0d:a1:e4:
                    17:15:e1:75:21:8c:bc:42:90:f3:ca:7a:37:cb:e6:
                    2f:b1:17:34:f4:32:a3:a7:96:4f:60:6b:19:15:6f:
                    7c:15:97:55:9c:e9:3e:db:71:38:c1:04:4e:2d:aa:
                    b1:9d:fd:98:9a:c0:7d:aa:89:9f:33:36:60:66:f4:
                    62:30:aa:6b:e3:5e:e1:53:ae:50:ab:54:1f:31:b9:
                    79:a9:04:63:cf:21:c2:45:6b:7f:c4:34:5e:7c:bd:
                    22:49:8b:a3:3e:19:73:a0:84:38:1e:5a:c1:2a:14:
                    46:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:89:CC:82:19:B5:D4:57:0B:06:A2:53:D8:45:7D:14:CD:19:89:56
            X509v3 Authority Key Identifier:
                keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/wInMghm11FcLBqJT2EV9FM0ZiVY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.10.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:9d:8e:23:9e:0b:3a:bb:67:be:aa:1d:77:4c:dc:b6:87:f6:
         c9:95:ba:56:e3:f9:e2:86:72:c1:f5:e9:bd:de:65:49:2b:58:
         d3:ff:1f:3c:58:7c:f6:82:88:e6:70:a6:10:97:7c:f5:bc:d0:
         9c:fc:f6:ff:47:28:5d:f4:d3:b5:ab:a9:f1:31:05:e4:9f:15:
         97:89:be:76:60:0c:12:15:35:fd:97:3a:90:db:10:27:99:cf:
         b6:34:d5:1d:85:5a:98:93:35:df:19:38:af:49:ea:de:cf:91:
         3f:54:4a:f9:f5:b6:0e:73:16:78:ed:67:2c:95:e6:d1:fc:5b:
         28:b8:67:ef:df:c8:ff:64:9d:07:1a:94:52:20:93:8e:2a:0b:
         c6:ba:60:75:1f:90:84:40:ba:83:de:76:c0:2b:0d:39:16:09:
         0e:7c:8c:cb:31:be:d0:98:49:15:6d:58:14:21:ad:3b:39:8f:
         d0:45:4b:56:e5:7c:5e:28:b0:f9:e9:47:c3:85:b3:73:32:1a:
         b9:95:6f:e2:de:1b:36:f3:36:ef:31:3b:43:03:18:37:30:9f:
         08:ae:62:51:e4:a9:b0:01:31:24:d2:2c:71:00:bc:83:3c:76:
         24:5d:2b:71:f0:fc:f6:58:2c:be:89:cb:4c:5a:5d:bb:1e:e2:
         4b:6a:e4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:16 2026 by rpki-client