This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/wm5FHuXn0yj2Fzs7mssloklRCsc.roa
File:                     wm5FHuXn0yj2Fzs7mssloklRCsc.roa (raw, json)
Hash identifier:          nSYa0rr7dwu5dctQzszV3Gq5wfYwUX466+D2hjWAmcE=
Subject key identifier:   C2:6E:45:1E:E5:E7:D3:28:F6:17:3B:3B:9A:CB:25:A2:49:51:0A:C7
Certificate issuer:       /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial:       019C0A6F4655A5E91FE7425961D7D92A747F
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/wm5FHuXn0yj2Fzs7mssloklRCsc.roa
Signing time:             Thu 29 Jan 2026 15:46:30 +0000
ROA not before:           Thu 29 Jan 2026 15:46:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29802
IP address blocks:        185.144.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Jan 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0a:6f:46:55:a5:e9:1f:e7:42:59:61:d7:d9:2a:74:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
        Validity
            Not Before: Jan 29 15:46:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c26e451ee5e7d328f6173b3b9acb25a249510ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:d3:ee:34:8e:ff:05:7f:00:ef:a1:3f:36:
                    13:61:c2:d6:6a:98:0f:61:5b:6e:94:05:5a:70:1e:
                    d1:fe:57:17:c9:5c:b3:9d:12:c0:1f:91:cf:98:70:
                    d5:36:84:c3:f5:ee:ba:4f:85:f0:60:a2:d9:68:32:
                    fe:81:96:7b:40:46:1b:3f:33:70:45:fa:ad:53:8f:
                    5d:a3:8b:88:11:08:53:eb:0a:48:88:0f:d3:2b:29:
                    c1:5c:d9:20:bb:cc:6f:ec:04:10:b7:51:60:de:07:
                    4e:d7:db:71:28:1a:dd:82:66:c9:99:cd:d8:e2:2a:
                    d3:8b:e0:fa:fa:e3:10:af:ed:8b:bd:bb:97:97:46:
                    e1:e7:97:73:79:31:21:c8:bd:aa:dc:74:ee:a6:61:
                    3c:17:66:69:77:6c:03:ea:25:43:a1:ee:de:2a:d4:
                    11:bb:40:35:37:59:0c:60:59:fe:0b:72:b8:b4:56:
                    d1:8d:69:47:24:3f:2a:9e:63:87:b2:7f:72:23:e3:
                    e2:f2:73:16:00:b0:1e:43:9e:d0:79:8b:e7:33:fb:
                    a9:38:d1:96:81:b2:41:aa:7c:ee:5f:a2:3d:6e:e5:
                    79:70:35:ad:a1:ba:31:0c:e2:13:97:e5:cc:24:f8:
                    a7:3b:8d:71:8e:de:d7:c9:59:c5:77:d9:4b:5e:4c:
                    a7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6E:45:1E:E5:E7:D3:28:F6:17:3B:3B:9A:CB:25:A2:49:51:0A:C7
            X509v3 Authority Key Identifier:
                keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/wm5FHuXn0yj2Fzs7mssloklRCsc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.144.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:f7:0a:da:f1:c0:eb:45:24:6a:01:53:c2:18:5f:5a:6f:1a:
         3c:37:00:8b:17:bc:5c:45:2c:0a:fd:2c:e4:81:c2:8f:4b:91:
         35:07:65:48:e4:72:9b:4f:69:83:e7:1d:54:55:a6:09:f0:18:
         29:ef:20:73:52:06:5b:23:a7:12:4c:c7:9b:a8:1c:1c:88:49:
         57:83:60:2c:e7:7b:e6:f3:97:6a:c0:57:47:e8:29:ef:ff:40:
         ee:b5:5a:33:00:c6:d0:e8:0c:86:0d:bc:00:e1:5f:42:7b:74:
         ce:79:78:0b:6d:d6:0d:1b:ad:6a:2c:07:a6:3c:41:78:6a:81:
         33:58:92:11:f7:10:96:59:13:b3:c8:5f:ee:b0:c4:e2:ab:e0:
         e7:0d:43:de:79:0c:9d:df:c0:18:d9:7e:be:94:31:21:9d:8a:
         f6:8b:e2:af:2d:31:5e:a2:98:22:1d:c6:10:eb:85:df:3a:1f:
         3a:bd:8d:2a:42:b2:c4:39:eb:ee:6e:cc:d5:4b:96:3b:f3:54:
         fc:ad:bf:5a:a7:cd:30:27:b7:52:cb:30:9c:81:1d:32:24:20:
         5f:8d:50:ad:0a:a4:91:54:ca:77:7a:7c:49:10:ee:fa:0d:88:
         3d:ee:8d:3f:27:b7:65:5a:96:9b:f5:87:df:ab:e1:6a:99:a5:
         49:92:39:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 12:18:32 2026 by rpki-client