This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/wR_W7Dmg_rj5g7iNLVne8d71bHs.roa
File:                     wR_W7Dmg_rj5g7iNLVne8d71bHs.roa (raw, json)
Hash identifier:          WKw0FrmlGytIPAlBGnbaAghgRapZaSY75ePJ0KO/AmI=
Subject key identifier:   C1:1F:D6:EC:39:A0:FE:B8:F9:83:B8:8D:2D:59:DE:F1:DE:F5:6C:7B
Certificate issuer:       /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial:       019B98339FFBA27AC29F1B1DABE5C1D53E1A
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/wR_W7Dmg_rj5g7iNLVne8d71bHs.roa
Signing time:             Wed 07 Jan 2026 11:24:38 +0000
ROA not before:           Wed 07 Jan 2026 11:24:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42337
IP address blocks:        185.231.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:98:33:9f:fb:a2:7a:c2:9f:1b:1d:ab:e5:c1:d5:3e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
        Validity
            Not Before: Jan  7 11:24:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c11fd6ec39a0feb8f983b88d2d59def1def56c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:18:3c:4e:1c:d2:ae:ea:88:26:93:13:18:83:
                    f5:2b:3a:e0:85:3f:26:84:a2:c3:4f:15:66:95:dc:
                    fb:3b:70:83:48:d4:a3:22:ae:15:d6:8e:1b:6d:25:
                    92:c5:3f:5b:24:2d:c8:2a:73:79:88:fe:eb:be:7c:
                    74:08:dd:69:a6:2d:cc:5d:93:c4:10:ae:ea:f4:71:
                    98:cd:fc:e1:52:e8:2b:a9:65:11:51:ab:41:b8:31:
                    c2:9a:ad:4a:14:2d:55:c0:69:9f:a4:8d:f9:5c:12:
                    0c:dd:93:4e:a6:b0:8a:17:25:b9:d4:13:f6:f9:01:
                    bd:21:97:6f:08:5f:28:cf:87:7c:fb:b3:a7:3d:0f:
                    d4:67:e4:d8:9a:fd:f1:b8:3e:4b:4e:88:84:18:94:
                    9d:69:f9:f9:df:e7:be:9c:e1:d1:e9:14:23:11:3a:
                    81:c0:3d:83:67:01:70:8b:18:e4:1d:cd:b5:f2:2e:
                    fd:fd:28:fd:8c:4d:38:f9:57:a3:51:2a:2f:89:a7:
                    d2:7e:20:13:52:1b:9b:ea:dc:9e:3c:cf:aa:06:a1:
                    39:09:39:8d:ae:06:d2:ba:4c:21:42:5b:d8:e2:79:
                    0e:78:18:2a:8a:c1:d4:64:36:59:d1:b7:e8:ca:48:
                    70:5a:e4:47:d1:61:b0:2d:5c:fc:c1:c6:78:19:de:
                    aa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1F:D6:EC:39:A0:FE:B8:F9:83:B8:8D:2D:59:DE:F1:DE:F5:6C:7B
            X509v3 Authority Key Identifier:
                keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/wR_W7Dmg_rj5g7iNLVne8d71bHs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.231.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:5a:88:13:6a:17:be:03:bc:72:d0:50:5a:d9:16:e8:9d:77:
         44:fd:e6:f5:9e:fa:3b:60:83:d0:b6:a8:06:1c:12:6b:29:07:
         3d:16:dc:67:53:59:80:50:1c:b5:29:f6:86:65:08:30:3b:cc:
         0c:ea:f9:1d:65:03:38:57:68:38:96:d9:49:d9:3f:b8:3f:f8:
         43:f7:78:12:12:a3:5f:0a:22:8d:0d:aa:55:2b:85:8c:22:ea:
         5e:8b:93:c5:fb:a6:a9:9d:34:5c:2f:29:80:56:17:24:ee:55:
         d4:d2:58:ec:6e:ff:d1:e3:e0:7a:5e:36:26:e8:c1:d4:72:a4:
         90:c3:e6:0a:b9:cc:7a:7a:82:90:ea:81:8c:33:ae:32:6d:5a:
         0e:84:77:2c:6f:0e:f0:97:9a:25:5c:4b:98:35:cb:a0:99:76:
         5d:1a:73:65:1a:8e:ff:3e:07:ca:c5:40:65:62:1e:74:8d:a9:
         39:7f:0e:c2:18:ae:c0:00:ba:47:7a:18:42:b1:0c:fb:23:e8:
         84:76:23:ce:a0:23:4b:96:a2:14:08:8a:86:38:34:83:fd:7b:
         8f:12:50:1c:4f:6b:d2:17:66:d3:f0:bc:77:4d:cc:07:99:0b:
         4f:e8:69:b5:83:7b:49:2c:6b:a4:55:53:2d:32:66:0a:c8:69:
         ca:d6:7f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:26:10 2026 by rpki-client