This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WN_c9kKwagAeGsBSX1hLLfG9GhY.roa
File:                     WN_c9kKwagAeGsBSX1hLLfG9GhY.roa (raw, json)
Hash identifier:          ni14CmnfkewrmXe7hYsacGxSaktHpNFossFW4YlPphk=
Subject key identifier:   58:DF:DC:F6:42:B0:6A:00:1E:1A:C0:52:5F:58:4B:2D:F1:BD:1A:16
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       019B8CA0AE19E7952F0833103A8EB8386C6A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WN_c9kKwagAeGsBSX1hLLfG9GhY.roa
Signing time:             Mon 05 Jan 2026 05:28:19 +0000
ROA not before:           Mon 05 Jan 2026 05:28:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     146996
IP address blocks:        151.243.210.0/24 maxlen: 24
                          151.243.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:8c:a0:ae:19:e7:95:2f:08:33:10:3a:8e:b8:38:6c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Jan  5 05:28:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=58dfdcf642b06a001e1ac0525f584b2df1bd1a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:82:88:7a:47:be:79:f6:08:8a:e5:2f:42:35:
                    f6:8a:b7:ee:f8:9a:91:c7:2c:ec:b1:3a:f7:19:4b:
                    e0:8a:a8:a0:ec:c5:5e:bd:8e:7a:c3:18:56:6e:a4:
                    a6:dd:a7:78:a2:cd:17:ae:39:18:ab:b0:f1:40:e6:
                    1b:ab:11:d0:20:cf:f3:06:10:1c:df:a5:0b:1b:1e:
                    00:be:18:a6:eb:91:cf:1b:ee:e5:71:2b:0c:62:ef:
                    f2:06:b4:99:11:4d:54:67:5e:f5:7c:6c:8f:7f:43:
                    af:74:d2:da:02:4e:28:5e:ce:ae:58:ba:4f:1e:70:
                    cb:58:e6:79:9c:1e:22:cd:8a:72:26:67:57:9f:6d:
                    7f:53:34:c2:6a:0d:5d:fc:35:b7:c6:34:e0:e9:a4:
                    f6:8b:20:60:ff:9e:67:0e:ef:28:22:ed:99:3a:95:
                    8b:fb:80:36:28:fb:2a:ce:e4:4f:fb:b4:bf:66:2c:
                    5f:f9:26:8e:8d:6e:49:7c:83:1f:30:76:58:5f:71:
                    c6:92:1b:4c:e4:83:32:06:54:6a:2b:d1:0e:ce:22:
                    ca:69:c9:6a:99:06:9e:cf:3a:d2:53:5d:06:c2:f4:
                    84:f6:ed:c8:8a:33:0c:e5:61:53:25:75:bb:45:65:
                    ca:f4:2f:1d:34:e5:ce:97:69:bb:92:85:c7:76:a6:
                    47:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DF:DC:F6:42:B0:6A:00:1E:1A:C0:52:5F:58:4B:2D:F1:BD:1A:16
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WN_c9kKwagAeGsBSX1hLLfG9GhY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.243.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:be:9e:2b:06:6a:1e:6d:45:08:6d:e3:d0:d1:ba:da:15:a9:
         f9:ac:ac:25:f9:e8:d9:1e:ee:73:73:b7:37:50:16:7b:ce:04:
         5d:d7:a8:46:29:45:be:3e:be:be:c8:d3:fc:40:4d:32:f9:11:
         9c:8f:c0:24:70:81:40:a1:44:c2:26:12:c3:ea:fc:14:d7:da:
         4e:d2:06:b3:ce:8e:e9:cf:63:c4:25:b3:24:ec:2e:62:dc:7b:
         cb:6b:59:c7:14:40:51:1e:78:a8:f0:d6:97:6a:21:df:22:bc:
         6e:35:58:af:93:14:a3:ce:b2:05:59:e7:aa:08:9e:19:99:cb:
         1d:0b:94:dc:b0:31:f6:29:43:3b:4f:b6:7b:aa:fa:9e:de:b0:
         40:72:08:82:f6:6e:56:56:14:9c:7b:ff:83:71:c4:c5:be:ac:
         99:b7:25:a6:59:97:2e:31:cf:01:23:70:ff:e3:04:18:c6:f7:
         ad:6f:66:19:8b:7b:08:1c:a3:66:e9:33:02:29:e9:f9:64:18:
         9c:2f:99:9d:bb:84:96:8f:21:64:94:2b:bc:24:02:a7:df:57:
         24:10:76:4b:3d:40:42:5d:4f:6e:1e:b3:69:29:91:0b:55:d4:
         db:f5:00:a7:50:21:30:a7:1e:e9:36:ff:8b:d8:45:67:a8:2f:
         f8:89:54:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZuMoK4Z55UvCDMQOo64OGxqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMTA1MDUyODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGRmZGNmNjQyYjA2YTAwMWUxYWMwNTI1ZjU4NGIyZGYxYmQxYTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYKIeke+efYIiuUvQjX2irfu+JqR
xyzssTr3GUvgiqig7MVevY56wxhWbqSm3ad4os0XrjkYq7DxQOYbqxHQIM/zBhAc
36ULGx4Avhim65HPG+7lcSsMYu/yBrSZEU1UZ171fGyPf0OvdNLaAk4oXs6uWLpP
HnDLWOZ5nB4izYpyJmdXn21/UzTCag1d/DW3xjTg6aT2iyBg/55nDu8oIu2ZOpWL
+4A2KPsqzuRP+7S/Zixf+SaOjW5JfIMfMHZYX3HGkhtM5IMyBlRqK9EOziLKaclq
mQaezzrSU10GwvSE9u3IijMM5WFTJXW7RWXK9C8dNOXOl2m7koXHdqZHZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFjf3PZCsGoAHhrAUl9YSy3xvRoWMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvV05fYzlrS3dhZ0FlR3NCU1gxaExMZkc5R2hZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/PSMA0G
CSqGSIb3DQEBCwUAA4IBAQCOvp4rBmoebUUIbePQ0braFan5rKwl+ejZHu5zc7c3
UBZ7zgRd16hGKUW+Pr6+yNP8QE0y+RGcj8AkcIFAoUTCJhLD6vwU19pO0gazzo7p
z2PEJbMk7C5i3HvLa1nHFEBRHnio8NaXaiHfIrxuNVivkxSjzrIFWeeqCJ4Zmcsd
C5TcsDH2KUM7T7Z7qvqe3rBAcgiC9m5WVhSce/+DccTFvqyZtyWmWZcuMc8BI3D/
4wQYxvetb2YZi3sIHKNm6TMCKen5ZBicL5mdu4SWjyFklCu8JAKn31ckEHZLPUBC
XU9uHrNpKZELVdTb9QCnUCEwpx7pNv+L2EVnqC/4iVTw
-----END CERTIFICATE-----
Generated at Sun Jan 18 06:27:37 2026 by rpki-client