This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/WGarpJ7r84I2BUjPwsh_FrmY5eE.roa
File:                     WGarpJ7r84I2BUjPwsh_FrmY5eE.roa (raw, json)
Hash identifier:          enfn5n+6zegDsbYCXp7miXXJum8vzX4WWxNLJX5Keh4=
Subject key identifier:   58:66:AB:A4:9E:EB:F3:82:36:05:48:CF:C2:C8:7F:16:B9:98:E5:E1
Certificate issuer:       /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial:       019B797E544D70E13BEC02D2EAE6271AAD50
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/WGarpJ7r84I2BUjPwsh_FrmY5eE.roa
Signing time:             Thu 01 Jan 2026 12:18:00 +0000
ROA not before:           Thu 01 Jan 2026 12:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        84.254.134.0/24 maxlen: 24
                          84.254.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:54:4d:70:e1:3b:ec:02:d2:ea:e6:27:1a:ad:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
        Validity
            Not Before: Jan  1 12:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5866aba49eebf382360548cfc2c87f16b998e5e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:01:f5:c3:b5:75:2c:1b:42:a1:f7:bc:d9:03:
                    7d:ff:e2:4d:e3:a7:d1:f3:83:22:03:01:23:e1:f5:
                    ef:cf:18:6f:96:2e:05:3c:6d:45:cd:2b:2d:e8:f9:
                    3f:0d:4b:73:b5:f3:38:1e:0a:e5:ae:8d:ad:18:71:
                    79:38:60:13:f5:71:9d:fb:04:c5:2b:dd:d6:bd:20:
                    9c:5c:c3:83:e3:28:d9:ee:44:0e:15:7e:14:8a:97:
                    3e:1d:c2:25:73:06:5d:13:f9:2a:6a:dd:1d:1a:12:
                    8b:af:3a:04:18:a0:9f:3d:8b:cf:17:20:4e:bf:2c:
                    8f:ab:e9:27:10:51:62:6e:95:67:59:9b:ac:4e:a7:
                    05:0a:20:7f:01:0f:ae:11:3e:e9:c3:de:64:a1:e2:
                    27:38:cc:ab:ce:8a:39:98:de:ef:c9:1c:5f:15:60:
                    d1:b9:47:9c:b1:c0:c8:94:f7:16:9e:6a:0b:00:20:
                    70:7a:b4:57:04:ad:10:ae:d8:6b:48:09:86:83:28:
                    80:af:78:6f:86:b2:b7:e9:b8:94:b0:75:f9:34:1b:
                    c6:6f:a1:55:8d:19:f5:1a:b1:61:42:35:5d:8e:d9:
                    f7:38:5a:8f:d6:a4:12:ff:08:07:6b:a4:16:c5:76:
                    69:30:7d:34:a2:1f:24:24:64:98:58:cb:86:56:08:
                    9c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:66:AB:A4:9E:EB:F3:82:36:05:48:CF:C2:C8:7F:16:B9:98:E5:E1
            X509v3 Authority Key Identifier:
                keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/WGarpJ7r84I2BUjPwsh_FrmY5eE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.254.134.0/24
                  84.254.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:cc:8a:ef:ed:b7:e4:c5:43:0b:c8:a0:80:e6:c3:1a:2d:b2:
         4a:e4:25:54:f4:e3:3e:07:2d:50:51:66:63:fd:38:6f:9d:9a:
         a9:fa:ef:25:c4:e3:92:00:47:f5:79:65:b6:13:19:81:b6:f4:
         72:f6:70:95:16:6d:77:0b:97:8c:e2:04:13:d6:2d:1b:11:f2:
         24:7b:ac:17:ca:66:c9:8f:6b:de:75:a7:1f:0a:0b:8a:d9:df:
         d1:e9:dc:c2:b0:1d:16:19:ee:bf:74:9d:c2:3c:6e:7c:50:e2:
         13:5d:78:c7:9a:38:c5:31:d6:0c:4e:49:14:10:7b:23:94:11:
         c6:89:e7:bf:b1:5a:d8:d1:62:2a:d4:93:63:b3:ce:27:ed:7a:
         87:25:be:49:9e:8c:cc:b4:f7:d2:f1:61:dd:f9:f9:44:aa:a0:
         1d:5e:49:d4:13:d5:35:9d:da:86:e0:72:45:89:78:9a:91:1b:
         fb:7b:f6:e1:f0:50:33:9e:77:7a:fd:e8:9d:3f:4a:55:50:a4:
         8e:fc:54:95:34:6f:87:06:23:58:a2:8b:2f:ca:f2:cd:c7:46:
         7c:ad:a7:94:fe:95:74:a3:8d:df:55:ae:6d:ea:74:5c:fc:f7:
         45:5d:da:7f:27:64:a7:75:ba:ac:48:9b:5b:9c:60:9d:dc:47:
         ab:41:6b:01
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt5flRNcOE77ALS6uYnGq1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NTU3MDI0Njc3NzBlZDY5YjM2N2I3N2JiZTY0MGJjNmRi
NDE1M2UwHhcNMjYwMTAxMTIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODY2YWJhNDllZWJmMzgyMzYwNTQ4Y2ZjMmM4N2YxNmI5OThlNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gH1w7V1LBtCofe82QN9/+JN46fR
84MiAwEj4fXvzxhvli4FPG1FzSst6Pk/DUtztfM4Hgrlro2tGHF5OGAT9XGd+wTF
K93WvSCcXMOD4yjZ7kQOFX4Uipc+HcIlcwZdE/kqat0dGhKLrzoEGKCfPYvPFyBO
vyyPq+knEFFibpVnWZusTqcFCiB/AQ+uET7pw95koeInOMyrzoo5mN7vyRxfFWDR
uUecscDIlPcWnmoLACBwerRXBK0QrthrSAmGgyiAr3hvhrK36biUsHX5NBvGb6FV
jRn1GrFhQjVdjtn3OFqP1qQS/wgHa6QWxXZpMH00oh8kJGSYWMuGVgic0QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFhmq6Se6/OCNgVIz8LIfxa5mOXhMB8GA1UdIwQY
MBaAFMdVcCRndw7WmzZ7d7vmQLxttBU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYt
MWQzNzM0OTk5MjRlLzEvV0dhcnBKN3I4NEkyQlVqUHdzaF9Gcm1ZNWVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYtMWQzNzM0OTk5MjRl
LzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVP6GAwQA
VP6IMA0GCSqGSIb3DQEBCwUAA4IBAQAtzIrv7bfkxUMLyKCA5sMaLbJK5CVU9OM+
By1QUWZj/ThvnZqp+u8lxOOSAEf1eWW2ExmBtvRy9nCVFm13C5eM4gQT1i0bEfIk
e6wXymbJj2vedacfCguK2d/R6dzCsB0WGe6/dJ3CPG58UOITXXjHmjjFMdYMTkkU
EHsjlBHGiee/sVrY0WIq1JNjs84n7XqHJb5JnozMtPfS8WHd+flEqqAdXknUE9U1
ndqG4HJFiXiakRv7e/bh8FAznnd6/eidP0pVUKSO/FSVNG+HBiNYoosvyvLNx0Z8
raeU/pV0o43fVa5t6nRc/PdFXdp/J2SndbqsSJtbnGCd3EerQWsB
-----END CERTIFICATE-----
Generated at Fri Jan 2 09:27:17 2026 by rpki-client