This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wyznMm6DAXfOOzKb_Ueoed4jG9I.roa
File:                     wyznMm6DAXfOOzKb_Ueoed4jG9I.roa (raw, json)
Hash identifier:          wP+bXAq2bKYr2CiaSJ5rxs1RGqVJ5Xp6DYKj+caprcM=
Subject key identifier:   C3:2C:E7:32:6E:83:01:77:CE:3B:32:9B:FD:47:A8:79:DE:23:1B:D2
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       019B78A2EE4A28B734AD1A879FD39E30FD6B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wyznMm6DAXfOOzKb_Ueoed4jG9I.roa
Signing time:             Thu 01 Jan 2026 08:18:22 +0000
ROA not before:           Thu 01 Jan 2026 08:18:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31715
IP address blocks:        194.55.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 02:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:ee:4a:28:b7:34:ad:1a:87:9f:d3:9e:30:fd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 08:18:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c32ce7326e830177ce3b329bfd47a879de231bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:18:a6:b4:37:dc:77:76:1c:40:3f:0c:ab:
                    1b:ca:75:bb:0b:7d:92:f8:7d:16:20:08:b4:b1:bc:
                    e8:86:06:fa:15:6b:86:60:b5:47:00:a4:31:9b:e4:
                    f5:42:8e:e4:66:71:dc:2d:7a:bc:65:59:cc:79:67:
                    f0:67:e0:81:bd:46:d2:de:8d:9d:4d:13:be:a4:a9:
                    8c:06:13:b8:c0:e3:dc:a6:4f:a3:33:ec:bf:b2:4f:
                    20:59:75:97:25:50:c6:91:8e:59:02:36:48:f9:30:
                    8f:18:eb:69:09:eb:00:7c:9f:01:1a:ea:a9:0d:45:
                    87:a5:57:e0:21:c2:79:17:9f:6b:d8:f6:5f:ce:24:
                    7f:50:0b:c4:4a:e8:ff:74:12:7f:29:9c:a6:56:12:
                    ef:15:97:fd:af:01:91:e4:5f:da:78:8c:93:ac:3e:
                    0a:81:88:ee:53:4d:97:01:af:a7:a7:b2:43:1f:18:
                    b2:20:d7:90:d2:fd:df:04:07:f3:f3:5d:a1:5b:29:
                    1c:0e:ab:1c:5e:28:75:29:69:1f:68:3c:be:b6:9d:
                    9c:37:c9:e8:1a:16:cd:7d:3d:28:a5:6e:71:c8:8f:
                    80:88:cb:3c:b5:90:de:43:ff:1c:f5:1e:03:3e:4b:
                    5b:f7:a8:1e:5d:47:08:76:1e:ed:f8:42:a1:16:39:
                    a4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2C:E7:32:6E:83:01:77:CE:3B:32:9B:FD:47:A8:79:DE:23:1B:D2
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wyznMm6DAXfOOzKb_Ueoed4jG9I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.55.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:8e:d4:12:c2:61:54:fa:a0:f8:1b:95:a2:a3:15:56:fb:23:
         77:f0:16:97:7c:57:30:1c:94:50:f5:5e:f8:3e:ad:02:16:66:
         fb:71:64:e9:66:a1:a9:5e:61:43:95:e8:a1:70:53:3b:d0:3d:
         9d:f6:39:57:d1:22:ed:43:1a:2d:5f:5e:03:08:55:cd:f8:54:
         f2:d0:e6:01:0f:63:17:18:84:94:b6:2c:60:4f:67:50:e4:58:
         ef:2d:fa:4e:53:93:a3:89:25:bf:bf:20:a9:b2:f6:17:97:69:
         ce:92:2c:8b:6b:31:3c:7f:cf:04:0a:b9:57:10:70:32:6e:78:
         7b:b9:c3:a4:3b:5c:62:8f:c9:d5:17:fc:f1:f5:42:04:0d:4f:
         d7:53:ae:61:74:bb:b0:c6:c8:ea:e4:34:8f:42:e9:99:7a:34:
         4b:65:67:29:01:8b:76:5e:63:5e:4a:ec:62:b3:01:1a:6d:02:
         44:d7:fc:97:a9:94:0b:75:df:57:2f:83:12:9a:e5:26:2d:64:
         28:6f:07:c0:5b:c9:8e:db:cf:dc:90:8c:19:b9:84:4a:a8:f4:
         4b:da:30:10:a4:ee:d5:ea:4c:a1:17:af:76:bf:6d:d6:2b:71:
         08:98:e0:67:b8:81:28:ae:2b:18:33:ec:5e:f2:dc:a4:32:2d:
         35:c5:04:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 12:04:28 2026 by rpki-client