This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/wMiTPlMu4g1hj3TJ8q6_CsgMnNQ.roa
File:                     wMiTPlMu4g1hj3TJ8q6_CsgMnNQ.roa (raw, json)
Hash identifier:          +vnxHkv9IVNBAo2p+O8n8zZLqGi1fGQbtfQSaGakEfQ=
Subject key identifier:   C0:C8:93:3E:53:2E:E2:0D:61:8F:74:C9:F2:AE:BF:0A:C8:0C:9C:D4
Certificate issuer:       /CN=05bfdbb6a4b1663369da407db97b021f73284a28
Certificate serial:       019BC61EB1F969316775A8E50F7D9816293E
Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/wMiTPlMu4g1hj3TJ8q6_CsgMnNQ.roa
Signing time:             Fri 16 Jan 2026 09:24:18 +0000
ROA not before:           Fri 16 Jan 2026 09:24:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     27176
IP address blocks:        81.92.219.0/24 maxlen: 24
                          185.99.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c6:1e:b1:f9:69:31:67:75:a8:e5:0f:7d:98:16:29:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28
        Validity
            Not Before: Jan 16 09:24:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c0c8933e532ee20d618f74c9f2aebf0ac80c9cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:43:e0:ba:80:62:08:08:43:5e:7e:47:94:
                    f7:94:b9:cd:01:cd:ac:cb:19:5e:d9:e6:e9:05:a8:
                    fe:3e:7e:48:c7:25:5f:96:1a:73:e9:16:9c:f8:f4:
                    01:84:20:bf:e6:39:17:82:bb:b9:03:79:1e:6c:95:
                    21:8e:13:a1:75:aa:bd:d8:e1:ca:60:1f:f1:f8:7f:
                    16:90:aa:16:4b:33:cb:c2:b6:e4:6e:a7:27:02:31:
                    d7:94:8a:20:a6:bd:29:b2:a4:50:08:92:9f:56:88:
                    9d:6d:53:ec:67:4f:25:b4:cc:ab:ba:d8:78:13:73:
                    1d:f1:3d:09:e1:e1:5c:1e:9e:36:89:56:ef:18:99:
                    40:1d:cd:b7:18:6d:63:b4:ce:62:c2:ed:45:94:6e:
                    ed:34:89:75:87:01:1b:9a:ce:00:6c:eb:81:91:80:
                    a4:73:51:c5:03:f8:f6:87:fb:ff:1c:f1:14:f3:a3:
                    e7:28:58:e1:0e:68:ab:d3:55:18:f7:df:06:c1:44:
                    a2:c1:b5:b4:b8:6e:e1:7f:b6:8b:23:39:75:a7:be:
                    43:bb:80:dd:96:a3:9f:51:12:eb:00:3f:db:1d:c2:
                    66:93:4a:3e:39:b7:55:2d:dc:4a:8b:00:59:22:99:
                    cf:74:da:5e:a0:70:75:b8:42:f0:36:f6:84:b8:cb:
                    40:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C8:93:3E:53:2E:E2:0D:61:8F:74:C9:F2:AE:BF:0A:C8:0C:9C:D4
            X509v3 Authority Key Identifier:
                keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/wMiTPlMu4g1hj3TJ8q6_CsgMnNQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.92.219.0/24
                  185.99.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:13:8d:7c:5d:47:75:c3:1d:4c:e3:5e:0d:15:15:2f:41:76:
         43:16:14:9c:67:bb:8d:4e:c3:39:79:c8:aa:0b:1e:b1:ed:85:
         68:2f:c1:14:30:21:1a:b9:0e:57:dc:3e:0b:87:57:e4:00:54:
         f5:87:0d:69:45:52:d5:d1:64:d3:60:3d:cf:ab:03:1d:dc:57:
         37:be:e6:d7:11:41:4c:6a:60:0d:5d:be:23:8b:c5:65:bf:fb:
         6c:c5:64:df:0a:e2:cc:35:a9:99:b4:67:26:cb:c0:33:5c:65:
         aa:72:0d:15:b5:71:66:38:ad:2e:91:63:b4:5b:65:b8:53:ef:
         03:48:00:18:12:7b:08:f1:d5:f6:6c:40:1d:d5:ac:f8:53:5d:
         6d:2a:24:fe:9a:9a:91:e1:f5:1a:f7:f1:79:26:58:37:5a:29:
         da:25:ce:b3:6c:d2:04:4a:6d:f2:90:54:17:d5:03:4d:8b:c1:
         cf:f2:d6:1e:79:4c:a8:53:a4:fc:4a:53:9b:0e:40:12:35:f5:
         97:a2:6a:01:9f:c6:60:cc:87:93:eb:73:56:45:90:9c:9c:e7:
         38:27:ad:b9:c6:c8:89:d1:7c:25:b1:c1:8c:b9:69:22:ab:9b:
         41:6a:89:ff:38:d3:8f:45:ae:c4:f1:af:ca:68:46:6e:4a:1a:
         2d:6f:42:5f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZvGHrH5aTFndajlD32YFik+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YmZkYmI2YTRiMTY2MzM2OWRhNDA3ZGI5N2IwMjFmNzMy
ODRhMjgwHhcNMjYwMTE2MDkyNDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGM4OTMzZTUzMmVlMjBkNjE4Zjc0YzlmMmFlYmYwYWM4MGM5Y2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjVD4LqAYggIQ15+R5T3lLnNAc2s
yxle2ebpBaj+Pn5IxyVflhpz6Rac+PQBhCC/5jkXgru5A3kebJUhjhOhdaq92OHK
YB/x+H8WkKoWSzPLwrbkbqcnAjHXlIogpr0psqRQCJKfVoidbVPsZ08ltMyruth4
E3Md8T0J4eFcHp42iVbvGJlAHc23GG1jtM5iwu1FlG7tNIl1hwEbms4AbOuBkYCk
c1HFA/j2h/v/HPEU86PnKFjhDmir01UY998GwUSiwbW0uG7hf7aLIzl1p75Du4Dd
lqOfURLrAD/bHcJmk0o+ObdVLdxKiwBZIpnPdNpeoHB1uELwNvaEuMtAIQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMDIkz5TLuINYY90yfKuvwrIDJzUMB8GA1UdIwQY
MBaAFAW/27aksWYzadpAfbl7Ah9zKEooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJfYnRxU3haak5wMmtCOXVYc0NIM01vU2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80NjBjMDAtM2U5NS00Mjc0LWJjOWMt
MDYwZGFjZmViZTBmLzEvd01pVFBsTXU0ZzFoajNUSjhxNl9Dc2dNbk5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80NjBjMDAtM2U5NS00Mjc0LWJjOWMtMDYwZGFjZmViZTBm
LzEvQmJfYnRxU3haak5wMmtCOXVYc0NIM01vU2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUVzbAwQA
uWP/MA0GCSqGSIb3DQEBCwUAA4IBAQByE418XUd1wx1M414NFRUvQXZDFhScZ7uN
TsM5eciqCx6x7YVoL8EUMCEauQ5X3D4Lh1fkAFT1hw1pRVLV0WTTYD3PqwMd3Fc3
vubXEUFMamANXb4ji8Vlv/tsxWTfCuLMNamZtGcmy8AzXGWqcg0VtXFmOK0ukWO0
W2W4U+8DSAAYEnsI8dX2bEAd1az4U11tKiT+mpqR4fUa9/F5Jlg3WinaJc6zbNIE
Sm3ykFQX1QNNi8HP8tYeeUyoU6T8SlObDkASNfWXomoBn8ZgzIeT63NWRZCcnOc4
J625xsiJ0XwlscGMuWkiq5tBaon/ONOPRa7E8a/KaEZuShotb0Jf
-----END CERTIFICATE-----
Generated at Sat Jan 24 17:55:56 2026 by rpki-client