This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/WhADIH61bkJ2leuk_zArifd_fK0.roa
File:                     WhADIH61bkJ2leuk_zArifd_fK0.roa (raw, json)
Hash identifier:          BbhmWA4WKgNmNImPrf4BgLaJQFe/cOoj0PIkA8fbtMo=
Subject key identifier:   5A:10:03:20:7E:B5:6E:42:76:95:EB:A4:FF:30:2B:89:F7:7F:7C:AD
Certificate issuer:       /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial:       019B7D5C90A1E555C06C1F66CC85BBF5757F
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/WhADIH61bkJ2leuk_zArifd_fK0.roa
Signing time:             Fri 02 Jan 2026 06:19:36 +0000
ROA not before:           Fri 02 Jan 2026 06:19:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60095
IP address blocks:        46.191.156.0/22 maxlen: 22
                          46.191.156.0/23 maxlen: 23
                          46.191.156.0/24 maxlen: 24
                          46.191.157.0/24 maxlen: 24
                          46.191.158.0/23 maxlen: 23
                          46.191.158.0/24 maxlen: 24
                          46.191.159.0/24 maxlen: 24
                          93.157.252.0/22 maxlen: 22
                          93.157.252.0/23 maxlen: 23
                          93.157.252.0/24 maxlen: 24
                          93.157.253.0/24 maxlen: 24
                          93.157.254.0/23 maxlen: 23
                          93.157.254.0/24 maxlen: 24
                          93.157.255.0/24 maxlen: 24
                          136.169.212.0/22 maxlen: 22
                          136.169.212.0/23 maxlen: 23
                          136.169.212.0/24 maxlen: 24
                          136.169.213.0/24 maxlen: 24
                          136.169.214.0/23 maxlen: 23
                          136.169.214.0/24 maxlen: 24
                          136.169.215.0/24 maxlen: 24
                          185.44.8.0/22 maxlen: 22
                          185.44.8.0/23 maxlen: 23
                          185.44.8.0/24 maxlen: 24
                          185.44.9.0/24 maxlen: 24
                          185.44.10.0/23 maxlen: 23
                          185.44.10.0/24 maxlen: 24
                          185.44.11.0/24 maxlen: 24
                          2a02:1c8:a::/48 maxlen: 48
                          2a02:1c8:40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:90:a1:e5:55:c0:6c:1f:66:cc:85:bb:f5:75:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
        Validity
            Not Before: Jan  2 06:19:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a1003207eb56e427695eba4ff302b89f77f7cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:0a:9a:66:af:96:b6:66:61:f8:68:b5:65:
                    b6:f8:28:81:29:af:9a:45:04:98:3d:34:b1:52:36:
                    d1:0e:e4:d4:bf:88:15:0e:54:a8:26:56:43:71:ff:
                    81:54:84:1e:0a:dc:74:36:5e:18:8f:de:96:2e:89:
                    18:f2:7d:7a:3a:28:84:de:68:f5:1d:20:f7:d3:a8:
                    35:80:4c:e8:c8:ec:ab:e2:43:ee:43:78:24:c6:0b:
                    9d:bd:92:46:44:f4:3d:59:c3:6b:d4:2b:a1:e6:fe:
                    e0:29:df:59:2b:1f:38:15:41:6c:6b:7a:ef:e2:21:
                    fd:96:f3:2b:a2:4c:ec:33:da:0a:04:b8:14:a2:49:
                    04:3a:ff:9b:9c:be:c1:6f:bc:0d:6f:96:78:82:ef:
                    de:2a:64:80:1c:7d:40:07:29:d6:10:ac:43:42:d1:
                    4d:d4:5a:56:14:d6:41:da:f3:32:33:f1:d1:f3:cc:
                    0a:12:70:47:ec:18:83:21:e6:00:e7:85:ac:86:d1:
                    72:7b:0c:d1:d3:7a:ae:d6:9f:58:ec:b8:11:35:27:
                    fd:03:4b:39:1b:e5:57:bb:77:6d:07:f7:88:6a:d8:
                    3f:21:dc:a1:0e:12:1f:a1:67:d3:42:b1:86:8d:d5:
                    d6:8c:29:ab:40:ee:23:23:89:99:a1:cc:8f:3c:a8:
                    fd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:10:03:20:7E:B5:6E:42:76:95:EB:A4:FF:30:2B:89:F7:7F:7C:AD
            X509v3 Authority Key Identifier:
                keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/WhADIH61bkJ2leuk_zArifd_fK0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.191.156.0/22
                  93.157.252.0/22
                  136.169.212.0/22
                  185.44.8.0/22
                IPv6:
                  2a02:1c8:a::/48
                  2a02:1c8:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         80:cd:91:ef:50:80:39:e2:fb:20:33:ee:05:e1:5a:c1:6a:a3:
         a3:92:d6:4d:d3:8a:fa:a9:ee:f1:ca:93:db:6a:ef:69:0d:97:
         4d:b8:e5:07:0b:4a:be:01:4e:70:3c:40:ed:1f:22:e2:b1:1f:
         f8:95:10:52:b3:97:24:5f:db:73:28:91:1f:78:6a:58:7d:20:
         c4:01:c7:59:c0:f5:88:2b:ea:0a:e2:83:98:0b:3f:03:e4:c2:
         3b:ca:1e:8b:33:9c:3d:8e:c7:9c:cc:f7:47:1e:0d:41:39:17:
         e6:46:45:60:92:ae:38:4a:a4:89:8a:ee:de:4d:a5:fd:46:49:
         c9:75:37:82:8d:a9:fa:a4:8c:69:ab:1a:7d:84:0c:35:8c:8e:
         64:4e:16:58:96:0f:18:54:c1:41:b2:a8:c2:72:1c:a4:69:09:
         13:43:28:a6:56:5d:d7:cd:34:39:33:ab:5f:8e:ce:31:3b:a8:
         29:59:66:e6:8c:bb:b2:a8:12:63:b8:a5:16:f5:f7:02:19:3f:
         b8:66:bf:7d:7c:a9:9c:f3:69:6f:ca:2f:93:65:d8:f3:11:2a:
         51:0f:a1:27:e6:03:2c:1d:eb:72:d8:ac:9a:7d:8c:86:03:02:
         44:fd:65:e5:af:19:a2:53:23:73:d9:4f:dd:70:82:7d:4d:e3:
         ee:27:60:5f
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZt9XJCh5VXAbB9mzIW79XV/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi
Zjk0ODUwHhcNMjYwMTAyMDYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTEwMDMyMDdlYjU2ZTQyNzY5NWViYTRmZjMwMmI4OWY3N2Y3Y2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoQKmmavlrZmYfhotWW2+CiBKa+a
RQSYPTSxUjbRDuTUv4gVDlSoJlZDcf+BVIQeCtx0Nl4Yj96WLokY8n16OiiE3mj1
HSD306g1gEzoyOyr4kPuQ3gkxgudvZJGRPQ9WcNr1Cuh5v7gKd9ZKx84FUFsa3rv
4iH9lvMrokzsM9oKBLgUokkEOv+bnL7Bb7wNb5Z4gu/eKmSAHH1ABynWEKxDQtFN
1FpWFNZB2vMyM/HR88wKEnBH7BiDIeYA54WshtFyewzR03qu1p9Y7LgRNSf9A0s5
G+VXu3dtB/eIatg/IdyhDhIfoWfTQrGGjdXWjCmrQO4jI4mZocyPPKj9bwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFFoQAyB+tW5CdpXrpP8wK4n3f3ytMB8GA1UdIwQY
MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt
Y2JiOTUxODNiMjdhLzEvV2hBRElINjFia0oybGV1a196QXJpZmRfZkswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh
LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAeBAIAATAYAwQCLr+cAwQC
XZ38AwQCiKnUAwQCuSwIMBgEAgACMBIDBwAqAgHIAAoDBwQqAgHIAEAwDQYJKoZI
hvcNAQELBQADggEBAIDNke9QgDni+yAz7gXhWsFqo6OS1k3Tivqp7vHKk9tq72kN
l0245QcLSr4BTnA8QO0fIuKxH/iVEFKzlyRf23MokR94alh9IMQBx1nA9Ygr6gri
g5gLPwPkwjvKHosznD2Ox5zM90ceDUE5F+ZGRWCSrjhKpImK7t5Npf1GScl1N4KN
qfqkjGmrGn2EDDWMjmROFliWDxhUwUGyqMJyHKRpCRNDKKZWXdfNNDkzq1+OzjE7
qClZZuaMu7KoEmO4pRb19wIZP7hmv318qZzzaW/KL5Nl2PMRKlEPoSfmAywd63LY
rJp9jIYDAkT9ZeWvGaJTI3PZT91wgn1N4+4nYF8=
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:39 2026 by rpki-client