This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Wmvv0bqHaS5hDqiTIcHcLJDlat8.roa
File:                     Wmvv0bqHaS5hDqiTIcHcLJDlat8.roa (raw, json)
Hash identifier:          DYAz7pUQWzQk5xHdajGK/fY1deCwRa+gRTgDOqHM4oU=
Subject key identifier:   5A:6B:EF:D1:BA:87:69:2E:61:0E:A8:93:21:C1:DC:2C:90:E5:6A:DF
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       019B797E2978538311B40C04164922FC35F3
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Wmvv0bqHaS5hDqiTIcHcLJDlat8.roa
Signing time:             Thu 01 Jan 2026 12:17:49 +0000
ROA not before:           Thu 01 Jan 2026 12:17:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43308
IP address blocks:        185.182.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 12:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:29:78:53:83:11:b4:0c:04:16:49:22:fc:35:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 12:17:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a6befd1ba87692e610ea89321c1dc2c90e56adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:a7:97:87:4f:af:49:f9:f4:75:64:84:a4:
                    6f:3c:e4:f7:4e:32:0e:18:e2:e6:a2:e2:2f:b0:af:
                    f5:fa:83:f2:b7:55:ad:86:d7:2f:4f:47:45:39:1c:
                    b3:45:5b:12:9c:72:2a:50:3c:1e:f5:b0:7a:8b:06:
                    cf:fb:44:d6:50:00:38:52:a9:5f:8b:71:02:3b:b7:
                    56:9e:27:69:d9:03:53:26:29:06:93:a3:60:9a:6d:
                    5b:2d:6e:18:99:cc:f2:23:2b:55:0d:db:27:63:19:
                    32:1c:0d:37:2a:01:7a:df:1c:8c:4f:95:a0:b1:3c:
                    fc:bb:05:d8:b9:78:44:86:4a:95:4e:4e:32:e9:7a:
                    1e:56:01:03:1c:5e:af:a2:1a:a4:74:57:b8:7d:03:
                    10:39:fe:53:1d:22:90:e4:73:e8:5d:0e:0c:54:a3:
                    eb:65:ea:21:02:63:22:0b:cf:b7:9d:9c:b2:01:2b:
                    4f:6e:f1:54:74:59:1b:68:d2:ae:82:5d:bd:bb:ae:
                    8b:d2:ad:8d:2e:8a:67:46:9d:3f:10:d8:8f:ec:7d:
                    7a:30:a9:ae:c0:56:34:b0:a7:70:b5:87:c4:be:4f:
                    69:d9:19:f4:1f:6a:5a:48:b5:ed:df:9a:5c:be:f0:
                    d3:28:67:f6:b9:87:31:c4:98:b2:2a:44:d4:5f:6b:
                    49:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6B:EF:D1:BA:87:69:2E:61:0E:A8:93:21:C1:DC:2C:90:E5:6A:DF
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Wmvv0bqHaS5hDqiTIcHcLJDlat8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:40:68:a9:67:12:7a:33:48:ba:87:52:b1:25:39:a8:3a:66:
         12:e3:b8:bd:55:33:9c:e1:f1:4a:16:ad:2f:3b:b9:b6:05:49:
         a6:81:9b:cd:4d:d1:93:e8:4c:46:41:36:e5:3f:8b:ee:8f:da:
         2c:55:37:24:f4:d8:66:7f:86:1c:ab:26:90:bf:55:c3:f3:c7:
         02:54:48:c0:f0:90:bd:2b:76:bf:92:3d:f1:c4:58:2b:01:8d:
         b6:76:2c:5c:df:b9:bb:70:ef:43:7b:c5:45:ad:8c:05:b9:ee:
         bb:ba:19:71:bb:ad:ba:72:23:46:fc:62:be:c8:d5:db:3d:f0:
         17:ae:43:2f:43:c7:d0:b9:5b:4e:c5:ce:b9:88:53:92:07:e7:
         40:d4:dd:b7:7d:c2:85:d1:98:e2:97:3c:bf:7c:01:b0:8b:1a:
         4c:47:5b:bf:9b:9c:e7:c0:7e:3b:b6:5a:d8:3d:ea:61:cf:d1:
         bb:11:bb:6f:e1:cf:1f:81:77:dd:e9:f2:50:61:b7:29:f1:ab:
         4d:d8:c2:41:c9:71:86:2f:0b:bc:ea:4c:50:8e:f7:78:2e:f8:
         0b:ce:57:a0:00:cc:b6:75:b1:df:64:1d:4a:31:30:bc:df:c5:
         60:c6:23:cd:2a:af:c8:62:ff:4d:11:62:f3:52:d9:cf:21:cb:
         02:49:af:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:23:00 2026 by rpki-client