This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/wJQhpUcYRE9YbrS1hrhEwceSpsw.roa
File:                     wJQhpUcYRE9YbrS1hrhEwceSpsw.roa (raw, json)
Hash identifier:          pKy+CJ0dPgWvUI++SXNGLH/W/2Tj4mADcaq6t4MuXsE=
Subject key identifier:   C0:94:21:A5:47:18:44:4F:58:6E:B4:B5:86:B8:44:C1:C7:92:A6:CC
Certificate issuer:       /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial:       019C261538CEB1A0CF457C7506F9F6C39E4E
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/wJQhpUcYRE9YbrS1hrhEwceSpsw.roa
Signing time:             Wed 04 Feb 2026 00:37:30 +0000
ROA not before:           Wed 04 Feb 2026 00:37:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213220
IP address blocks:        45.151.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:26:15:38:ce:b1:a0:cf:45:7c:75:06:f9:f6:c3:9e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
        Validity
            Not Before: Feb  4 00:37:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c09421a54718444f586eb4b586b844c1c792a6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:41:4d:81:b1:a6:db:3b:24:b5:67:cd:42:
                    49:01:d1:94:b1:58:70:d3:2a:24:4b:9b:07:d9:e1:
                    b5:bb:20:4c:90:f4:b9:7b:be:bb:e0:0f:ea:de:c8:
                    b1:d1:51:5a:0d:97:6d:44:e6:7e:c7:43:19:86:70:
                    ea:1c:8e:89:ce:ea:e1:ee:14:8e:08:17:9f:87:6b:
                    33:6e:e0:a5:cf:f8:da:00:49:50:fb:c6:cd:24:f8:
                    1d:11:4d:20:de:18:48:23:74:70:22:cd:9c:51:c0:
                    ca:d9:8b:2d:32:20:1b:ff:1d:3a:27:d5:82:c7:12:
                    7f:7b:4b:a9:88:94:5a:f8:8e:fc:e9:a9:06:25:ad:
                    e3:c8:a4:f1:83:bd:b4:20:fc:a9:e3:cf:05:d2:07:
                    1e:39:a4:fa:65:69:a6:85:ad:51:2a:66:74:13:04:
                    f5:d8:0c:98:74:27:5d:74:82:81:a6:50:70:c2:ae:
                    10:97:e0:21:c0:e7:0b:14:39:58:0b:fa:d1:87:2e:
                    ae:56:24:fb:63:67:db:16:98:2c:52:99:dd:60:c5:
                    a3:2a:d7:0f:42:46:0c:ac:55:50:83:cf:30:0d:d6:
                    c3:aa:3d:93:4c:0a:6e:3b:74:a8:a8:01:d1:32:a0:
                    bd:05:d2:45:e1:55:ea:c4:a8:53:51:f6:47:8a:6c:
                    9b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:94:21:A5:47:18:44:4F:58:6E:B4:B5:86:B8:44:C1:C7:92:A6:CC
            X509v3 Authority Key Identifier:
                keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/wJQhpUcYRE9YbrS1hrhEwceSpsw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:fb:61:3d:81:b8:9e:70:2c:a7:8d:70:ae:e7:5a:2a:5f:0f:
         ba:b8:fa:07:2c:92:35:55:2d:d8:44:79:dd:4f:c0:6f:aa:57:
         c6:6a:dd:3d:37:11:41:20:bc:ce:d0:65:83:4a:75:57:7f:d0:
         57:a7:b6:38:2f:82:60:78:d8:56:b9:3a:b3:c4:2d:91:ae:e2:
         f0:5e:07:03:96:e8:9f:c6:de:fe:5c:73:6a:f0:a2:5e:96:77:
         d6:bd:8f:fb:a5:eb:54:98:3f:ac:0e:2f:bc:d0:b1:8c:14:f5:
         79:62:62:4a:3a:34:d1:40:11:b5:06:5c:74:45:3b:14:c8:fb:
         70:89:97:5f:8c:f2:ed:a6:3f:be:50:45:7a:bb:a9:b7:dc:35:
         79:51:20:00:00:bf:6f:49:48:8c:1c:56:fd:b9:5f:4e:82:ff:
         3e:bd:57:80:82:0c:5a:2a:10:31:ec:1e:03:6e:f2:e2:c8:b3:
         db:2d:32:c0:9d:d1:86:47:00:dd:5b:e1:22:c0:f9:86:29:46:
         86:35:b5:35:59:95:ea:51:e8:0b:0a:17:af:2a:e4:ee:39:98:
         13:f2:61:f9:b6:ff:ab:ad:b3:df:4c:3d:96:b3:63:f4:a6:8f:
         41:df:e6:83:3d:40:5b:5a:b0:15:63:ca:e1:c8:3b:cb:59:8c:
         48:74:37:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 10:08:29 2026 by rpki-client