This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WpRy_KPAxZKQEB_LsN9fBCkXol8.roa
File:                     WpRy_KPAxZKQEB_LsN9fBCkXol8.roa (raw, json)
Hash identifier:          f3qEj6Yz1joliMM6YbG5U2guBbhW/iL/NGaA4Tk1ejo=
Subject key identifier:   5A:94:72:FC:A3:C0:C5:92:90:10:1F:CB:B0:DF:5F:04:29:17:A2:5F
Certificate issuer:       /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial:       019BB21848681EDF5CF7FD9ACF2F015964FC
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WpRy_KPAxZKQEB_LsN9fBCkXol8.roa
Signing time:             Mon 12 Jan 2026 12:04:54 +0000
ROA not before:           Mon 12 Jan 2026 12:04:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        5.63.24.0/24 maxlen: 24
                          5.63.25.0/24 maxlen: 24
                          5.63.26.0/24 maxlen: 24
                          5.63.27.0/24 maxlen: 24
                          5.63.28.0/24 maxlen: 24
                          5.63.29.0/24 maxlen: 24
                          5.63.30.0/24 maxlen: 24
                          5.63.31.0/24 maxlen: 24
                          91.190.168.0/24 maxlen: 24
                          91.190.169.0/24 maxlen: 24
                          91.190.170.0/24 maxlen: 24
                          91.190.171.0/24 maxlen: 24
                          91.190.172.0/24 maxlen: 24
                          91.190.173.0/24 maxlen: 24
                          91.190.174.0/24 maxlen: 24
                          91.190.175.0/24 maxlen: 24
                          185.85.76.0/24 maxlen: 24
                          185.85.77.0/24 maxlen: 24
                          185.85.78.0/24 maxlen: 24
                          185.85.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 00:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b2:18:48:68:1e:df:5c:f7:fd:9a:cf:2f:01:59:64:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
        Validity
            Not Before: Jan 12 12:04:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a9472fca3c0c59290101fcbb0df5f042917a25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:da:0f:ab:fa:a5:5c:bc:83:a8:a4:9e:71:48:
                    a3:52:18:da:6b:a4:1c:f8:47:6c:70:de:93:aa:c0:
                    27:86:c5:82:5d:35:d5:b3:6c:cc:eb:06:cb:02:dc:
                    50:30:d0:ba:c1:41:44:94:2f:00:80:77:ec:4a:a2:
                    44:96:3c:bb:8f:ca:5f:32:6b:a9:1b:bf:8d:c4:32:
                    4c:6a:f1:bc:fa:65:02:f2:6f:69:02:67:a5:3a:cb:
                    ef:ba:57:b4:b1:21:3d:b8:5f:0a:9f:91:d2:30:2f:
                    17:b1:83:45:fc:cb:f3:8b:7c:d2:a5:5a:7c:4b:88:
                    bb:40:71:a5:71:f8:4e:75:bc:c8:5e:fc:3d:a4:58:
                    11:14:05:01:be:6f:13:ba:8e:f4:ea:45:ee:21:42:
                    54:67:c9:52:66:e0:52:5c:d2:9a:12:74:fd:e6:a6:
                    4f:37:51:e4:c1:bd:33:43:85:47:6a:9d:85:3c:32:
                    f6:4d:89:26:f1:14:4b:50:00:23:e8:08:a7:8a:4d:
                    bc:c5:b8:fc:12:fc:fd:d5:b2:3f:10:91:2a:8f:44:
                    56:0a:38:c9:d3:7f:e7:ab:67:1c:b7:9c:d1:64:e4:
                    16:a9:cf:46:93:83:31:13:dd:23:3a:85:68:56:e1:
                    42:9a:f4:e2:aa:0c:55:f0:96:23:8c:38:c4:b8:35:
                    e7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:94:72:FC:A3:C0:C5:92:90:10:1F:CB:B0:DF:5F:04:29:17:A2:5F
            X509v3 Authority Key Identifier:
                keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WpRy_KPAxZKQEB_LsN9fBCkXol8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.63.24.0/21
                  91.190.168.0/21
                  185.85.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:61:4d:cc:b6:cf:10:41:d1:dd:1e:70:c0:de:be:ab:9e:13:
         17:8d:ea:c7:4d:01:c6:f0:6b:79:68:c6:68:c8:51:09:b8:28:
         3c:8b:ee:cd:63:44:40:94:0a:ae:7e:0f:32:2f:eb:d1:22:62:
         c6:98:1f:0d:dc:86:4d:20:34:a6:32:90:4e:f5:47:06:0f:e5:
         48:0e:ad:53:39:c8:67:93:64:cb:ea:e8:e3:df:05:46:cb:2b:
         f6:76:60:0f:12:5a:29:d4:ce:18:b6:f7:00:3f:3a:62:37:12:
         89:61:66:e7:c1:5f:a1:de:ec:ec:1c:93:7d:63:e0:13:c8:5b:
         c5:2c:ab:06:97:5b:3c:a7:f4:bf:0a:3d:8a:7d:cc:55:a5:ee:
         8d:48:ed:14:08:cd:94:14:b2:a3:6c:3c:f8:77:2c:e6:53:42:
         2c:5e:6b:2b:a0:b1:b7:83:c1:49:2b:13:01:08:d8:d6:8a:25:
         5f:37:f4:fa:92:89:8b:a2:5e:ea:c2:a7:01:42:c8:6f:75:6f:
         30:57:50:b6:51:45:9a:b5:0a:54:b1:dc:b2:fd:2f:02:bf:6c:
         08:ea:8b:88:cd:a1:a2:d0:2a:e8:a0:94:3e:78:c9:23:a7:f8:
         7c:15:ac:c0:11:c3:48:01:58:99:f9:62:77:0e:a0:f4:e6:3b:
         7b:76:cd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 06:44:39 2026 by rpki-client