This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/13WTNIS6A0dihpmd1UZATvnV9K4.roa
File:                     13WTNIS6A0dihpmd1UZATvnV9K4.roa (raw, json)
Hash identifier:          KHlhyO/RASQzL4I4VsavXB94t3yBZq5r1Q6M/Qi/yyE=
Subject key identifier:   D7:75:93:34:84:BA:03:47:62:86:99:9D:D5:46:40:4E:F9:D5:F4:AE
Certificate issuer:       /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial:       019B7CECC077CB6053FF5523556BFDEBCAF6
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/13WTNIS6A0dihpmd1UZATvnV9K4.roa
Signing time:             Fri 02 Jan 2026 04:17:29 +0000
ROA not before:           Fri 02 Jan 2026 04:17:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     32132
IP address blocks:        146.247.107.0/24 maxlen: 24
                          146.247.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ec:c0:77:cb:60:53:ff:55:23:55:6b:fd:eb:ca:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
        Validity
            Not Before: Jan  2 04:17:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d775933484ba03476286999dd546404ef9d5f4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:2a:42:72:10:f5:9a:15:ed:2c:7d:26:26:
                    9d:81:81:5b:ed:95:ba:33:44:07:1d:2c:03:e3:a1:
                    27:d6:9e:36:39:9d:69:3a:cf:94:23:f1:0d:63:8a:
                    56:fb:7f:b0:47:a9:0e:21:ef:83:df:fe:fe:b2:70:
                    97:df:41:34:0d:c4:66:be:34:8d:32:79:e2:03:c9:
                    8f:0e:f9:4b:b9:aa:53:17:14:3d:27:eb:4e:81:2a:
                    da:33:0e:fc:70:84:70:8e:50:62:be:bd:ea:0c:8c:
                    8f:cf:68:d9:21:30:28:e6:1e:60:c1:20:d0:1e:02:
                    24:77:1e:48:a0:27:7b:bf:b1:c8:af:97:b5:92:7a:
                    82:09:a8:18:e2:c6:55:42:f6:0c:46:c8:e1:33:66:
                    7d:fa:4d:26:a5:6f:42:73:5d:24:b9:71:29:52:3e:
                    64:19:2e:1a:d0:8d:bf:f2:37:94:15:09:2e:1f:f7:
                    26:95:6c:50:48:97:8f:76:a4:b9:ba:1f:f1:65:64:
                    7f:46:00:39:67:d5:b8:6c:e9:13:90:3a:76:ab:30:
                    43:23:28:f0:0f:07:76:a7:c9:b7:03:08:9a:a5:a2:
                    1e:d1:26:b2:0e:c7:0d:ca:13:74:01:98:41:4b:4a:
                    97:a6:71:09:55:5a:15:70:6f:00:34:4b:77:fe:6b:
                    a9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:75:93:34:84:BA:03:47:62:86:99:9D:D5:46:40:4E:F9:D5:F4:AE
            X509v3 Authority Key Identifier:
                keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/13WTNIS6A0dihpmd1UZATvnV9K4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.247.107.0/24
                  146.247.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:fb:24:80:b3:69:c4:37:db:ec:f1:7c:8d:07:f9:58:4d:23:
         2c:6b:22:93:7c:e3:4c:0d:a4:40:31:3f:0b:0c:68:77:e9:77:
         6e:d8:b4:2a:f0:12:41:f8:b7:d4:3a:db:cd:c8:55:2a:da:73:
         0a:35:d0:45:58:f5:d4:cc:27:73:d8:b5:35:cf:90:2d:96:65:
         68:7a:a7:55:91:65:da:1d:d2:66:23:25:4c:53:db:0a:cf:52:
         0b:1e:dd:48:51:7a:1e:bd:ec:00:e7:2d:3c:9a:32:5c:a5:3b:
         85:79:4e:5a:48:c0:58:3f:ab:c1:36:08:72:6d:6e:cf:a7:3b:
         3b:88:dd:18:da:b6:44:4b:61:57:ff:1a:ad:48:9a:ec:1a:c3:
         8c:d6:fc:a2:54:37:6f:25:53:e8:99:0f:3b:b9:25:27:7d:8b:
         e5:22:b8:b5:00:02:3d:a8:6d:c0:70:7d:35:15:81:18:53:1e:
         53:5c:8b:ff:35:99:f5:d3:cd:3d:bc:dc:70:47:84:fc:f3:13:
         c5:1b:d0:72:e9:66:c9:68:b7:97:04:08:8d:09:ff:fe:4f:98:
         3e:33:5b:59:55:7b:96:68:01:03:85:94:49:62:75:6d:cf:91:
         f0:0d:13:0b:25:01:cb:0e:6f:e0:2b:6a:dc:7f:07:ad:ba:31:
         81:58:9f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:20:55 2026 by rpki-client