This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/WgmFRH4OK555yliE2GxTG4fKi7w.roa
File:                     WgmFRH4OK555yliE2GxTG4fKi7w.roa (raw, json)
Hash identifier:          s9O35J6aVpqGW1dtOyjPUXfzsnlEXX6TaUdCyf4tgXQ=
Subject key identifier:   5A:09:85:44:7E:0E:2B:9E:79:CA:58:84:D8:6C:53:1B:87:CA:8B:BC
Certificate issuer:       /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial:       019B216763FFD79C31976BE5409E0CEEBED5
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/WgmFRH4OK555yliE2GxTG4fKi7w.roa
Signing time:             Mon 15 Dec 2025 09:46:22 +0000
ROA not before:           Mon 15 Dec 2025 09:46:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     44477
IP address blocks:        46.151.176.0/24 maxlen: 24
                          46.151.179.0/24 maxlen: 24
                          46.151.180.0/24 maxlen: 24
                          83.142.208.0/24 maxlen: 24
                          83.142.210.0/24 maxlen: 24
                          83.142.211.0/24 maxlen: 24
                          83.142.212.0/24 maxlen: 24
                          83.142.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:21:67:63:ff:d7:9c:31:97:6b:e5:40:9e:0c:ee:be:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
        Validity
            Not Before: Dec 15 09:46:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5a0985447e0e2b9e79ca5884d86c531b87ca8bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:d4:e9:93:8e:ae:5b:58:36:30:04:7f:40:
                    51:8d:fc:73:3f:3f:da:89:ea:16:fe:76:26:91:35:
                    45:10:c7:9c:cb:91:a1:da:c7:b4:26:6b:be:de:21:
                    ea:3d:a0:07:30:cc:40:1d:c5:8b:0a:df:e7:48:1c:
                    6e:03:57:16:41:51:8e:38:74:36:31:9f:e0:3c:76:
                    99:3b:b0:84:49:27:2e:c9:25:bb:6f:c0:34:89:97:
                    b6:2b:d7:2c:fc:cc:d7:a6:af:c0:91:d6:6f:8f:74:
                    ad:4f:5a:b2:34:92:0d:9c:49:ac:7e:2d:e7:39:59:
                    e1:23:a9:e1:56:14:41:30:42:d8:6f:4a:5b:9e:a2:
                    87:ae:b3:90:72:52:5b:22:7a:16:db:73:09:07:8a:
                    9f:ce:27:00:98:6b:24:59:16:70:a4:bc:27:a9:12:
                    49:82:bd:ed:1f:60:d2:af:5a:41:a0:c6:27:cd:30:
                    50:4f:06:b6:1d:e9:58:f0:25:03:ab:ad:eb:5f:fa:
                    12:53:c1:47:72:8a:5e:ae:9b:cf:c0:68:28:97:3a:
                    47:33:4e:58:56:e6:f5:37:3c:f1:f8:5b:c1:ea:1c:
                    99:85:9a:fc:f1:c8:62:94:cd:1d:d1:0e:27:e2:2d:
                    a4:2c:1b:f7:d6:6e:c5:f7:25:03:5e:03:1c:07:f3:
                    58:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:09:85:44:7E:0E:2B:9E:79:CA:58:84:D8:6C:53:1B:87:CA:8B:BC
            X509v3 Authority Key Identifier:
                keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/WgmFRH4OK555yliE2GxTG4fKi7w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.151.176.0/24
                  46.151.179.0-46.151.180.255
                  83.142.208.0/24
                  83.142.210.0-83.142.212.255
                  83.142.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:7e:16:4f:43:32:2c:8f:48:b3:fc:e1:47:62:d0:f7:88:da:
         7c:12:8a:bb:c3:fb:5a:00:8a:8e:62:b0:b1:5e:7f:17:60:c3:
         af:44:f7:83:c7:9e:43:a2:0b:7f:c8:da:6f:3b:e6:7a:f0:51:
         16:5d:fd:b1:0a:e4:13:3f:70:9d:7d:90:e2:e2:26:f5:3f:29:
         13:b2:e4:09:57:dd:93:cc:27:95:f6:3a:54:94:13:f0:a0:1e:
         53:8a:0f:4f:29:e2:6e:e7:4b:c0:6b:92:20:c1:09:62:3e:59:
         56:2b:43:ce:53:ae:37:f0:86:f7:9a:37:3c:74:bf:77:40:f5:
         cf:42:2b:b6:d5:70:e8:36:27:98:63:5f:d4:37:4e:6e:b7:a7:
         17:a8:73:65:d4:de:5f:57:57:90:85:3f:87:be:f7:63:84:8f:
         1f:69:da:4f:e0:2e:e9:66:3b:3f:cf:39:04:ff:41:4d:7f:e7:
         7b:e2:5c:93:56:24:ba:99:45:26:31:38:a1:04:16:f9:31:b0:
         ae:ec:fe:32:3f:ff:74:c6:2c:87:8f:b6:79:42:b3:36:9f:1e:
         b9:30:15:f0:40:17:bb:0f:40:c3:67:27:0f:d4:08:c0:59:08:
         e8:58:13:92:03:cf:8c:96:06:c7:7d:2f:1b:35:33:9d:e8:4a:
         80:f8:48:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:50:22 2025 by rpki-client