This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/whWXdQuJxQcWnOTopyrutsY5HaE.roa
File:                     whWXdQuJxQcWnOTopyrutsY5HaE.roa (raw, json)
Hash identifier:          Fps9gIY9rlVw/gAyyuM1MvWW0IUdR/bQ05R7UO/dFIQ=
Subject key identifier:   C2:15:97:75:0B:89:C5:07:16:9C:E4:E8:A7:2A:EE:B6:C6:39:1D:A1
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       019B7DCB234B434A36B2F39DD1E93CA88639
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/whWXdQuJxQcWnOTopyrutsY5HaE.roa
Signing time:             Fri 02 Jan 2026 08:20:23 +0000
ROA not before:           Fri 02 Jan 2026 08:20:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24940
IP address blocks:        151.244.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:23:4b:43:4a:36:b2:f3:9d:d1:e9:3c:a8:86:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Jan  2 08:20:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c21597750b89c507169ce4e8a72aeeb6c6391da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:9b:79:bd:de:dc:ef:47:90:17:d2:01:39:75:
                    5a:3a:94:59:83:1c:32:82:d1:93:6b:e4:f3:38:ed:
                    e1:0f:d8:b4:12:f0:1d:de:f7:95:24:b2:8e:b7:34:
                    71:8a:2e:a8:f2:bc:37:d2:e3:05:30:5f:64:51:06:
                    da:42:d1:26:7d:48:66:7d:3d:0c:73:9e:65:75:56:
                    47:28:70:1d:f3:6d:8b:b5:a6:2d:f7:1d:03:bf:cf:
                    fe:f9:7d:83:26:46:cc:8e:df:ae:5d:7f:c8:69:7b:
                    d3:58:b1:a0:97:bb:16:b8:2a:d8:6d:87:af:63:a0:
                    bc:20:ea:d4:c2:1f:e1:06:a3:c1:85:8d:b9:01:97:
                    d4:d2:ad:4f:b1:f9:cb:b2:b6:88:6b:70:d3:ad:dd:
                    9d:34:57:0d:1e:4d:91:86:28:27:81:cf:6d:1f:44:
                    f8:0d:dc:60:0f:90:f5:a2:9b:33:a2:68:36:71:e3:
                    16:e2:c0:b0:f9:b7:8f:a9:22:2c:ca:c1:7c:62:57:
                    11:d3:c7:95:a6:03:3b:16:31:fc:03:b8:28:d5:5b:
                    67:26:78:56:63:3d:c9:33:b3:c1:3e:5a:47:a2:71:
                    94:d1:69:90:76:3c:b5:ad:aa:39:84:3e:58:ed:4e:
                    bf:1d:ad:4c:f0:0b:5e:d7:cd:75:e1:f5:60:f8:11:
                    e5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:15:97:75:0B:89:C5:07:16:9C:E4:E8:A7:2A:EE:B6:C6:39:1D:A1
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/whWXdQuJxQcWnOTopyrutsY5HaE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.244.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:6e:c0:06:03:bf:8f:68:62:ea:3d:91:f4:74:b7:65:d0:78:
         d3:c4:64:3a:79:ea:31:c0:9d:32:7a:cc:80:c6:ad:94:81:fc:
         36:ac:4e:33:71:9c:c2:a2:39:30:7e:8b:f3:8d:d5:de:cf:a0:
         66:73:78:5f:e2:9c:1d:68:56:1c:b3:29:40:6e:20:d0:ad:7b:
         ff:11:93:04:59:25:3c:4e:1e:35:d0:83:c9:e5:74:33:da:7b:
         e3:cd:0a:90:9f:f8:eb:38:32:9e:c1:9d:33:79:35:2e:4d:52:
         23:67:92:8c:89:a3:e6:7a:ca:59:85:72:e0:5b:d3:af:74:71:
         1d:12:52:2e:9d:42:ca:b7:18:30:14:6e:1a:ea:cd:65:15:98:
         6a:dc:69:ec:c1:7a:57:1a:20:d5:31:3d:06:27:ff:fd:5d:93:
         b3:5a:5f:e1:0b:72:92:37:f7:8a:92:45:57:25:6e:40:1f:a8:
         44:ed:3c:65:23:5e:a1:e8:3e:11:42:04:d8:68:d2:be:b8:da:
         57:34:6f:02:a2:c1:19:4b:b2:a5:74:6a:03:ad:a1:33:39:79:
         45:7b:29:aa:05:b6:59:ae:b2:e9:ff:b6:63:df:ce:84:02:09:
         e4:3a:31:1c:85:e8:34:5e:d5:f2:d8:34:41:ff:d9:a0:f0:ef:
         ff:26:d2:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9yyNLQ0o2svOd0ek8qIY5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMTAyMDgyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjE1OTc3NTBiODljNTA3MTY5Y2U0ZThhNzJhZWViNmM2MzkxZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Jt5vd7c70eQF9IBOXVaOpRZgxwy
gtGTa+TzOO3hD9i0EvAd3veVJLKOtzRxii6o8rw30uMFMF9kUQbaQtEmfUhmfT0M
c55ldVZHKHAd822LtaYt9x0Dv8/++X2DJkbMjt+uXX/IaXvTWLGgl7sWuCrYbYev
Y6C8IOrUwh/hBqPBhY25AZfU0q1PsfnLsraIa3DTrd2dNFcNHk2Rhigngc9tH0T4
DdxgD5D1opszomg2ceMW4sCw+bePqSIsysF8YlcR08eVpgM7FjH8A7go1VtnJnhW
Yz3JM7PBPlpHonGU0WmQdjy1rao5hD5Y7U6/Ha1M8Ate18114fVg+BHlxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMIVl3ULicUHFpzk6Kcq7rbGOR2hMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvd2hXWGRRdUp4UWNXbk9Ub3B5cnV0c1k1SGFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/TAMA0G
CSqGSIb3DQEBCwUAA4IBAQAwbsAGA7+PaGLqPZH0dLdl0HjTxGQ6eeoxwJ0yesyA
xq2Ugfw2rE4zcZzCojkwfovzjdXez6Bmc3hf4pwdaFYcsylAbiDQrXv/EZMEWSU8
Th410IPJ5XQz2nvjzQqQn/jrODKewZ0zeTUuTVIjZ5KMiaPmespZhXLgW9OvdHEd
ElIunULKtxgwFG4a6s1lFZhq3GnswXpXGiDVMT0GJ//9XZOzWl/hC3KSN/eKkkVX
JW5AH6hE7TxlI16h6D4RQgTYaNK+uNpXNG8CosEZS7KldGoDraEzOXlFeymqBbZZ
rrLp/7Zj386EAgnkOjEcheg0XtXy2DRB/9mg8O//JtI1
-----END CERTIFICATE-----
Generated at Sun Jan 18 06:28:47 2026 by rpki-client