This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/Wt6m8TQZScfhOJbny64RiF6DAMc.roa
File:                     Wt6m8TQZScfhOJbny64RiF6DAMc.roa (raw, json)
Hash identifier:          JwlunPB0W9GzZg+kBM8VcpKYUrobmHYhpPYGnieYSe4=
Subject key identifier:   5A:DE:A6:F1:34:19:49:C7:E1:38:96:E7:CB:AE:11:88:5E:83:00:C7
Certificate issuer:       /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial:       019B79111EAFB8861CAFE806A686660F3964
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/Wt6m8TQZScfhOJbny64RiF6DAMc.roa
Signing time:             Thu 01 Jan 2026 10:18:43 +0000
ROA not before:           Thu 01 Jan 2026 10:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213427
IP address blocks:        155.254.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:1e:af:b8:86:1c:af:e8:06:a6:86:66:0f:39:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
        Validity
            Not Before: Jan  1 10:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5adea6f1341949c7e13896e7cbae11885e8300c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:17:04:0a:3e:ee:5a:c5:f3:14:2d:53:93:
                    14:60:11:d2:ed:4d:1d:26:56:97:a2:8e:6b:03:de:
                    4d:6a:53:32:42:1a:d7:7a:dd:f7:89:eb:b9:27:e2:
                    1b:f4:11:2b:af:ab:89:0b:28:0b:1f:3d:17:ef:f5:
                    a7:a2:98:0e:1c:6a:7f:4f:c8:1f:ec:a4:4e:e5:1d:
                    6b:5f:93:59:df:73:fe:c6:4d:c4:1e:18:ef:50:41:
                    ff:73:22:e1:50:77:21:ee:fb:76:cf:71:f2:a8:24:
                    23:de:ec:41:42:b6:a7:d2:95:6b:ee:ee:16:ee:1b:
                    90:90:a3:64:91:99:1c:2f:9d:f5:be:7d:9b:03:34:
                    09:cc:7d:b7:1d:00:ad:72:8d:d1:f2:84:c3:6f:86:
                    ab:2e:fa:f5:96:b2:15:26:85:fa:a9:18:ac:07:6a:
                    5e:24:e6:0f:b0:b9:f4:8f:b4:42:0c:e1:b2:72:0b:
                    13:eb:81:e7:c5:7b:81:c2:8d:f1:71:37:52:5f:0b:
                    4f:f8:e1:d0:e2:78:a2:c9:5a:02:a3:57:39:c4:d8:
                    df:3a:9d:ef:83:6c:d4:78:15:69:be:6d:b1:bd:0f:
                    bf:56:02:66:8c:d2:13:4b:6e:5c:68:6d:7d:b1:fc:
                    9a:ec:a2:15:fa:de:38:79:8d:1b:8c:3e:e5:22:b9:
                    d9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DE:A6:F1:34:19:49:C7:E1:38:96:E7:CB:AE:11:88:5E:83:00:C7
            X509v3 Authority Key Identifier:
                keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/Wt6m8TQZScfhOJbny64RiF6DAMc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:d6:2e:c9:6f:ac:7f:08:ef:a2:26:82:44:dc:d1:4c:88:a0:
         50:27:15:2c:bc:17:90:07:4c:14:c5:f9:f0:c7:04:5f:22:90:
         42:4a:03:8b:a3:2b:6a:7d:38:c6:b8:e4:ed:da:fb:b7:a0:39:
         06:8c:af:84:3f:49:cb:e0:da:57:05:7c:c5:b0:9c:61:55:2d:
         76:29:06:1f:16:86:14:f1:fc:a3:42:bf:79:fa:e1:38:5a:c4:
         55:d9:ec:83:2f:7d:41:a8:9a:1d:78:c9:4e:5c:aa:b2:f1:c7:
         c9:81:67:8f:7e:b4:06:37:8a:dd:8b:9a:e2:fb:24:35:83:ec:
         ef:a8:15:a3:a1:de:0d:1c:6e:4e:d6:94:e2:af:d3:ae:5b:ed:
         45:44:ed:db:f1:92:ed:ab:1d:3c:ed:32:f5:da:05:18:05:14:
         57:74:bb:66:ea:9f:e2:39:57:bb:68:13:0c:71:6b:ce:15:81:
         1b:6f:93:4f:18:5a:b0:91:bc:af:11:75:e8:0e:f8:9a:83:b2:
         be:92:f1:42:42:38:e8:90:55:5c:6c:9e:ad:65:26:2a:3b:f2:
         ec:a1:45:8e:ba:e8:01:31:f4:7f:23:da:57:14:f4:46:30:80:
         cd:1a:e2:21:90:3a:f8:3c:c0:56:95:00:29:48:63:f9:dc:e1:
         03:43:4e:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5ER6vuIYcr+gGpoZmDzlkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz
NGQ2MDMwHhcNMjYwMTAxMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWRlYTZmMTM0MTk0OWM3ZTEzODk2ZTdjYmFlMTE4ODVlODMwMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumYXBAo+7lrF8xQtU5MUYBHS7U0d
JlaXoo5rA95NalMyQhrXet33ieu5J+Ib9BErr6uJCygLHz0X7/WnopgOHGp/T8gf
7KRO5R1rX5NZ33P+xk3EHhjvUEH/cyLhUHch7vt2z3HyqCQj3uxBQran0pVr7u4W
7huQkKNkkZkcL531vn2bAzQJzH23HQCtco3R8oTDb4arLvr1lrIVJoX6qRisB2pe
JOYPsLn0j7RCDOGycgsT64HnxXuBwo3xcTdSXwtP+OHQ4niiyVoCo1c5xNjfOp3v
g2zUeBVpvm2xvQ+/VgJmjNITS25caG19sfya7KIV+t44eY0bjD7lIrnZSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFrepvE0GUnH4TiW58uuEYhegwDHMB8GA1UdIwQY
MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It
MzdiNjJkMjIzOTI0LzEvV3Q2bThUUVpTY2ZoT0pibnk2NFJpRjZEQU1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0
LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm/4+MA0G
CSqGSIb3DQEBCwUAA4IBAQAD1i7Jb6x/CO+iJoJE3NFMiKBQJxUsvBeQB0wUxfnw
xwRfIpBCSgOLoytqfTjGuOTt2vu3oDkGjK+EP0nL4NpXBXzFsJxhVS12KQYfFoYU
8fyjQr95+uE4WsRV2eyDL31BqJodeMlOXKqy8cfJgWePfrQGN4rdi5ri+yQ1g+zv
qBWjod4NHG5O1pTir9OuW+1FRO3b8ZLtqx087TL12gUYBRRXdLtm6p/iOVe7aBMM
cWvOFYEbb5NPGFqwkbyvEXXoDviag7K+kvFCQjjokFVcbJ6tZSYqO/LsoUWOuugB
MfR/I9pXFPRGMIDNGuIhkDr4PMBWlQApSGP53OEDQ04X
-----END CERTIFICATE-----
Generated at Tue Jan 20 00:27:05 2026 by rpki-client