This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/WrB_6nEScPqneHKwQCA6QB4d4QA.roa
File:                     WrB_6nEScPqneHKwQCA6QB4d4QA.roa (raw, json)
Hash identifier:          85wjB4Jt2bkwpAvi6/jsQd4XiX94VRI5UhSDcmPSSb0=
Subject key identifier:   5A:B0:7F:EA:71:12:70:FA:A7:78:72:B0:40:20:3A:40:1E:1D:E1:00
Certificate issuer:       /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial:       019B7D5C6987EDEB056DDDD3C60EB7BC4AFB
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/WrB_6nEScPqneHKwQCA6QB4d4QA.roa
Signing time:             Fri 02 Jan 2026 06:19:26 +0000
ROA not before:           Fri 02 Jan 2026 06:19:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50821
IP address blocks:        46.39.96.0/19 maxlen: 19
                          79.142.240.0/20 maxlen: 20
                          89.255.224.0/20 maxlen: 20
                          109.238.128.0/20 maxlen: 20
                          145.14.96.0/19 maxlen: 19
                          145.40.16.0/20 maxlen: 20
                          147.28.64.0/19 maxlen: 19
                          178.16.208.0/20 maxlen: 20
                          178.251.128.0/21 maxlen: 21
                          185.81.108.0/22 maxlen: 22
                          212.100.96.0/19 maxlen: 19
                          217.69.144.0/20 maxlen: 20
                          2001:1ba8::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:69:87:ed:eb:05:6d:dd:d3:c6:0e:b7:bc:4a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
        Validity
            Not Before: Jan  2 06:19:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5ab07fea711270faa77872b040203a401e1de100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:83:f1:50:b6:2f:04:87:67:55:80:71:22:
                    8c:82:ab:1a:74:20:9c:61:13:10:28:2a:ae:82:6b:
                    a2:f2:21:14:23:21:85:14:94:e8:98:09:cf:f6:b0:
                    44:83:4d:b3:1b:10:6e:5c:bf:0f:1a:04:0c:67:64:
                    de:ad:df:17:0e:82:38:6a:ae:e6:38:aa:6b:6d:ba:
                    e9:36:b2:ff:ae:59:66:ee:da:3a:d5:71:71:1c:3f:
                    c1:3c:d9:2c:c5:8d:cf:e8:70:96:d7:81:b5:12:af:
                    3d:94:a8:d3:b1:06:55:37:bc:9c:de:f6:dc:33:cd:
                    e5:62:47:34:6c:06:d4:95:fb:ab:e0:c7:7f:1c:6d:
                    a9:07:b7:a4:ea:cb:fd:0d:a5:4c:7d:8d:a4:88:59:
                    d0:f6:e8:70:6c:11:ae:bc:5b:39:d1:fd:6d:4c:71:
                    03:b0:3a:f4:91:ca:66:fc:ff:f6:7c:e9:c7:2f:fb:
                    a3:96:fc:fa:27:c3:21:99:bb:da:c6:c4:5f:ea:b4:
                    b4:cf:71:8a:24:3d:9f:4a:ee:39:04:b7:7c:13:09:
                    83:bf:9d:ea:0b:cf:5d:d9:de:ed:e0:b5:70:5a:db:
                    e5:cb:3e:f4:b1:3b:a6:ae:fd:dd:7e:c5:fd:12:4c:
                    b1:a6:9f:97:75:85:67:03:2f:af:5f:ad:a7:11:f5:
                    b1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B0:7F:EA:71:12:70:FA:A7:78:72:B0:40:20:3A:40:1E:1D:E1:00
            X509v3 Authority Key Identifier:
                keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/WrB_6nEScPqneHKwQCA6QB4d4QA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.39.96.0/19
                  79.142.240.0/20
                  89.255.224.0/20
                  109.238.128.0/20
                  145.14.96.0/19
                  145.40.16.0/20
                  147.28.64.0/19
                  178.16.208.0/20
                  178.251.128.0/21
                  185.81.108.0/22
                  212.100.96.0/19
                  217.69.144.0/20
                IPv6:
                  2001:1ba8::/29

    Signature Algorithm: sha256WithRSAEncryption
         c2:d6:4f:4c:89:38:9f:c1:c1:5b:49:ed:f5:2c:c5:09:74:2b:
         d0:e0:51:e6:0f:00:cf:df:b4:7e:bf:64:f4:80:79:89:77:05:
         18:84:b2:0c:72:04:fe:6a:7a:1a:d1:10:c1:99:4b:66:eb:bc:
         91:cf:b1:7d:43:1f:8e:e7:40:2d:df:ba:51:d9:f4:bc:a1:e1:
         d7:05:5e:1d:ca:55:aa:14:fa:ef:a3:7f:29:32:77:d2:2f:95:
         1c:5f:ee:96:91:7a:55:de:0e:56:64:7f:2c:ec:be:24:7c:77:
         7c:26:c4:33:35:f3:ea:8d:94:f7:7f:a0:cb:f1:52:be:46:4c:
         14:37:83:11:c5:15:92:6f:41:72:66:7b:16:9c:49:5f:1c:a5:
         27:6b:e8:01:9f:d5:2d:ba:b7:f3:58:34:12:f3:d3:e7:82:e3:
         ea:41:2f:81:bd:47:71:6a:b0:05:3a:4f:d3:38:a7:b1:d2:0f:
         cd:15:9c:83:6a:f7:bc:5c:c1:ed:bb:5b:50:29:95:3d:73:99:
         77:78:d0:56:fa:7c:e8:c3:11:31:d9:31:77:ea:ef:bd:c4:d8:
         5f:a7:d2:cf:68:af:b6:8f:d9:94:6b:43:0c:cb:7a:e3:d1:eb:
         31:b4:5d:51:30:7b:30:ba:49:fc:8d:4a:11:6e:22:3d:f0:48:
         e4:f4:16:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:02 2026 by rpki-client