This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/wG6Wnqhubd9o-R1O0dE8qxtcv_Y.roa
File:                     wG6Wnqhubd9o-R1O0dE8qxtcv_Y.roa (raw, json)
Hash identifier:          Xp/N+VxkIpYboMZ4WVUWp5X/q97QHWHWJohFZ9QOnDY=
Subject key identifier:   C0:6E:96:9E:A8:6E:6D:DF:68:F9:1D:4E:D1:D1:3C:AB:1B:5C:BF:F6
Certificate issuer:       /CN=ff3a6c79b7760bc4ce0b8c66b481afad30a2576e
Certificate serial:       019BDA844AE762C2C479F8EF71EC93A4E2C1
Authority key identifier: FF:3A:6C:79:B7:76:0B:C4:CE:0B:8C:66:B4:81:AF:AD:30:A2:57:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_zpsebd2C8TOC4xmtIGvrTCiV24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/wG6Wnqhubd9o-R1O0dE8qxtcv_Y.roa
Signing time:             Tue 20 Jan 2026 08:27:41 +0000
ROA not before:           Tue 20 Jan 2026 08:27:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208797
IP address blocks:        195.244.14.0/23 maxlen: 24
                          2a04:e0c0::/29 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/_zpsebd2C8TOC4xmtIGvrTCiV24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/_zpsebd2C8TOC4xmtIGvrTCiV24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_zpsebd2C8TOC4xmtIGvrTCiV24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:da:84:4a:e7:62:c2:c4:79:f8:ef:71:ec:93:a4:e2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3a6c79b7760bc4ce0b8c66b481afad30a2576e
        Validity
            Not Before: Jan 20 08:27:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c06e969ea86e6ddf68f91d4ed1d13cab1b5cbff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:12:e1:75:c8:24:78:73:04:50:3b:0d:88:7e:
                    0a:03:80:e0:7b:77:06:fc:12:a2:97:75:10:0b:56:
                    df:e8:5a:8a:5a:2e:76:3a:44:ba:46:01:4e:97:a2:
                    c4:eb:4f:14:a2:d6:f7:14:b5:e4:f6:93:0e:e8:3f:
                    3c:79:85:8a:be:bc:da:8d:aa:a4:e8:d4:dc:d5:49:
                    b8:9d:bd:12:69:e0:06:ad:98:79:04:55:d9:e2:fe:
                    00:ff:53:92:a9:cd:e2:c5:a6:2a:e4:bd:02:42:ff:
                    3b:c4:92:d5:ab:3d:e2:12:89:f0:0e:77:52:b5:2c:
                    e8:06:2e:c6:bb:28:99:7e:2c:e0:b3:88:7b:32:71:
                    1a:13:ef:2b:b3:44:e7:4d:8c:fd:21:0f:fd:d5:d2:
                    32:43:9f:56:06:14:c1:54:df:31:38:c3:1c:cc:9f:
                    0c:4f:35:7e:05:6f:32:86:4b:8c:1d:f8:d9:1b:0e:
                    ca:fd:c2:9b:02:a6:e6:97:f3:40:f3:1c:1f:56:81:
                    e9:5b:0d:39:75:fb:fc:14:c2:0a:80:f7:a8:7a:2f:
                    51:01:4d:43:59:db:fb:a0:3b:2e:21:cb:09:b1:86:
                    ff:02:3d:2e:2b:4e:77:bd:fd:33:07:a2:de:1d:8f:
                    87:7d:51:4c:6a:c0:5f:2e:76:db:fa:c0:03:a8:5b:
                    90:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6E:96:9E:A8:6E:6D:DF:68:F9:1D:4E:D1:D1:3C:AB:1B:5C:BF:F6
            X509v3 Authority Key Identifier:
                keyid:FF:3A:6C:79:B7:76:0B:C4:CE:0B:8C:66:B4:81:AF:AD:30:A2:57:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zpsebd2C8TOC4xmtIGvrTCiV24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/wG6Wnqhubd9o-R1O0dE8qxtcv_Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/_zpsebd2C8TOC4xmtIGvrTCiV24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.244.14.0/23
                IPv6:
                  2a04:e0c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         26:a1:3a:0f:86:5a:26:e1:3b:96:76:a6:d8:c0:c6:af:a4:45:
         69:c0:5f:78:c6:1e:b9:cb:57:4f:41:9f:cd:a9:ca:35:5b:d5:
         56:93:1f:f7:f6:b6:ce:f8:6f:d6:a8:77:15:e5:de:84:b4:e2:
         9a:81:98:33:96:78:a3:0b:01:f5:f9:50:b0:b3:20:cd:7f:42:
         bb:8e:3c:bb:fa:09:83:fc:6b:d8:c9:1a:90:10:59:73:b6:2a:
         59:57:95:7f:55:c0:82:66:72:ee:4d:77:c1:b0:8c:d6:d9:fd:
         6c:73:af:a8:e2:9d:84:54:e7:7c:ac:2e:bb:34:01:97:81:c6:
         95:de:15:f8:75:ad:69:44:4d:c8:be:d1:6c:d2:ea:1f:8c:fc:
         71:76:7d:34:5f:7c:34:d9:cd:36:22:a6:28:b6:e4:b8:c7:6a:
         a6:b2:9a:b2:f3:06:d1:28:af:95:73:5b:ab:3e:8b:93:7f:77:
         7c:d0:00:c2:cb:2f:24:eb:cd:89:8b:74:5b:e1:f8:e4:93:cc:
         28:e4:fe:6c:fb:c0:cc:43:61:84:9e:9e:3f:62:0d:b5:a0:72:
         62:d1:da:45:37:96:eb:71:6e:00:4d:97:d4:22:92:74:bd:51:
         df:bd:5c:96:c1:46:fd:76:71:46:9c:2a:f7:f6:47:e7:b5:2c:
         e3:76:73:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:33 2026 by rpki-client