This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/wGffXotQutM5YPxgbpljeS3a9Gg.roa
File:                     wGffXotQutM5YPxgbpljeS3a9Gg.roa (raw, json)
Hash identifier:          mICd/WsUOrkWcP68fCHD3+9zyqzcoi13I1Pp/yVs0e8=
Subject key identifier:   C0:67:DF:5E:8B:50:BA:D3:39:60:FC:60:6E:99:63:79:2D:DA:F4:68
Certificate issuer:       /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial:       019B797E0EF6E658E1F6BF761FDA4D4647FF
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/wGffXotQutM5YPxgbpljeS3a9Gg.roa
Signing time:             Thu 01 Jan 2026 12:17:43 +0000
ROA not before:           Thu 01 Jan 2026 12:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     396982
IP address blocks:        1.179.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 21:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:0e:f6:e6:58:e1:f6:bf:76:1f:da:4d:46:47:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
        Validity
            Not Before: Jan  1 12:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c067df5e8b50bad33960fc606e9963792ddaf468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:9f:e5:a7:fa:06:16:17:de:68:7c:66:7a:
                    04:e3:0f:3e:43:d9:74:dd:86:be:a6:fa:b3:a0:59:
                    7a:15:69:d2:2d:77:78:63:19:36:b6:6a:8d:9a:45:
                    11:8a:cd:6c:87:4e:89:39:01:fb:c3:75:e7:58:de:
                    a0:1a:1a:59:e9:78:b9:88:c8:f7:40:b2:d3:39:74:
                    d0:ad:6d:e9:31:82:bd:6c:99:ac:94:ac:cf:ce:01:
                    56:90:96:e8:bb:8f:68:ed:61:d1:ad:25:56:70:2a:
                    b0:3f:43:9f:5c:d7:55:99:c1:b4:aa:20:ca:78:ea:
                    23:44:52:fe:99:08:24:d7:a3:a8:a2:c6:48:3d:f5:
                    ba:aa:08:fd:fb:ce:3b:5a:38:53:88:16:af:a6:0a:
                    67:b1:92:8c:63:ac:24:5c:e6:5d:d8:4d:4d:b2:85:
                    0c:49:ff:88:bf:77:76:7e:a3:5a:4b:94:1c:98:f0:
                    b6:f9:44:49:92:24:34:0a:38:a2:e5:de:58:81:fa:
                    fd:16:86:d1:b7:bd:99:84:76:d7:83:d7:e4:97:33:
                    b2:12:77:e9:df:0a:29:4a:5b:29:3d:9a:0c:7d:4a:
                    1c:16:73:47:c6:ab:05:b2:c8:9a:2e:5e:c1:87:bb:
                    cb:a6:be:c8:33:97:e1:d4:6b:25:c4:8e:54:e5:2b:
                    4a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:67:DF:5E:8B:50:BA:D3:39:60:FC:60:6E:99:63:79:2D:DA:F4:68
            X509v3 Authority Key Identifier:
                keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/wGffXotQutM5YPxgbpljeS3a9Gg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.179.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:75:16:8e:bc:55:cc:fd:82:ba:f8:63:22:52:81:68:ef:3f:
         90:c0:bb:4c:8a:c9:f8:ce:16:2c:7a:f5:48:74:99:7d:fb:67:
         c9:eb:b3:ff:cb:35:4f:5d:34:50:32:c8:07:72:f0:64:5c:71:
         18:ff:b5:29:f9:b7:e4:86:ae:07:d9:e8:3b:a3:73:47:24:1f:
         1c:0c:84:8c:31:de:1e:eb:e8:bb:09:95:da:37:61:6b:36:cd:
         23:7a:53:de:98:c2:58:4a:82:c8:e4:76:56:58:8b:b0:82:df:
         df:a3:0d:73:f8:33:b6:df:09:3b:48:c4:df:04:35:1d:93:5f:
         23:e0:39:7c:87:f1:19:15:5b:31:1f:99:cd:d3:68:37:e1:92:
         0d:53:60:2d:7b:12:f1:e4:1b:97:c5:4d:fc:c7:57:e1:dd:79:
         cf:b1:df:c6:f7:43:02:29:1c:92:db:39:a7:40:1d:eb:82:a4:
         f8:2b:c2:05:9a:d1:fd:5c:89:d5:d7:36:39:d9:a5:f0:b9:93:
         72:42:d4:08:65:99:57:ba:16:54:e9:f5:0b:8a:bf:aa:2c:f8:
         26:84:20:47:f9:18:5c:d2:83:01:ea:b3:20:1e:ae:c0:7b:33:
         f1:e1:9d:c5:ac:fd:78:00:98:1f:23:91:71:b6:c0:79:83:f5:
         9a:33:25:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 06:24:36 2026 by rpki-client