This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_gLoGkNLVTMfVZEOOS_WikiSaRs.roa
File:                     _gLoGkNLVTMfVZEOOS_WikiSaRs.roa (raw, json)
Hash identifier:          1OaO5gPj8CfYsFjQ83IsyWhZCH45GYGJzIUNUJu3Pas=
Subject key identifier:   FE:02:E8:1A:43:4B:55:33:1F:55:91:0E:39:2F:D6:8A:48:92:69:1B
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       019B7E39397905DAFEBD08C00D28A3CDC53D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_gLoGkNLVTMfVZEOOS_WikiSaRs.roa
Signing time:             Fri 02 Jan 2026 10:20:38 +0000
ROA not before:           Fri 02 Jan 2026 10:20:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211415
IP address blocks:        163.5.75.0/24 maxlen: 24
                          163.5.78.0/24 maxlen: 24
                          163.5.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 13:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:39:39:79:05:da:fe:bd:08:c0:0d:28:a3:cd:c5:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Jan  2 10:20:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fe02e81a434b55331f55910e392fd68a4892691b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:da:50:4a:fc:ff:fa:8f:d8:07:5a:b6:f0:0b:
                    12:82:b8:5c:bd:20:b2:07:9e:a2:e0:cb:39:99:84:
                    06:4d:9a:88:36:46:bc:27:06:20:1b:ba:b5:5f:27:
                    9d:cc:38:13:ea:1c:ba:46:64:f7:65:3e:31:55:d8:
                    d5:a2:76:60:bf:49:1e:b8:5c:e3:05:58:1f:23:fb:
                    ef:cf:e5:16:d5:1c:71:21:2b:ec:52:6b:e8:6f:12:
                    e7:8a:42:4d:39:ea:1e:3e:52:37:76:5f:da:71:85:
                    f2:a0:c3:54:e7:4d:63:e4:1d:43:ff:78:d9:31:b6:
                    37:a7:55:e0:21:d9:f4:15:9a:71:27:ee:9e:8f:8b:
                    75:80:07:91:e9:38:6b:6b:b5:51:4d:d3:21:96:1c:
                    5a:14:a6:6b:f9:91:19:40:0e:9a:96:0f:50:e5:4a:
                    8a:0c:b5:d2:69:7f:31:cf:57:84:2c:3d:9f:e9:f8:
                    62:50:16:e5:c5:cf:61:1c:83:65:a0:40:4b:4a:34:
                    bd:a9:df:29:db:0e:c4:5e:c4:dc:2c:23:61:5e:2a:
                    30:f3:72:01:5c:c8:96:17:6d:10:c8:05:ee:1c:0b:
                    b7:74:71:7b:13:22:8c:f6:3d:20:ec:6e:62:03:b3:
                    70:fb:7f:2b:aa:51:12:c6:e3:d8:be:cf:86:f0:b9:
                    96:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:02:E8:1A:43:4B:55:33:1F:55:91:0E:39:2F:D6:8A:48:92:69:1B
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_gLoGkNLVTMfVZEOOS_WikiSaRs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.75.0/24
                  163.5.78.0/24
                  163.5.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:bf:b0:bf:55:a7:9a:8b:4b:70:32:58:25:cb:e0:04:23:2b:
         d8:63:a1:e5:62:73:64:78:fd:09:e0:cc:e1:41:1b:49:59:55:
         31:6a:fe:2d:18:c4:8b:d3:67:97:b6:77:e6:24:27:84:be:f7:
         f0:7c:5f:8b:2a:04:72:32:8c:32:5e:6f:72:1e:0c:b1:0b:cb:
         cb:d7:92:58:a4:56:6b:97:56:e6:5e:de:33:02:82:b2:c7:39:
         72:4b:4a:80:9b:2f:03:57:90:c1:7d:d4:be:37:ff:c2:56:da:
         0c:0a:0c:2b:f3:0c:fe:80:4e:fb:3b:1c:cf:97:18:fb:36:7c:
         4f:9e:e4:db:45:f0:37:69:a6:2e:b5:68:a1:ab:40:e0:d4:04:
         0b:db:fd:81:82:bf:82:70:4f:aa:0b:62:5d:4b:44:48:3e:d4:
         0f:d2:fd:f4:de:e4:c0:66:9c:5e:20:b5:ed:01:70:d9:c0:18:
         fb:22:17:2b:16:8e:ee:3a:a3:3d:60:4f:c5:43:4c:69:3a:22:
         12:8f:62:b6:6a:92:85:e2:20:50:16:85:79:b0:11:ff:df:aa:
         74:56:11:c3:a6:30:f9:bc:c8:77:d4:87:06:5c:52:c9:fa:0b:
         47:38:45:80:20:bc:cf:f9:bc:b6:47:6b:b7:0d:06:06:9c:b0:
         43:48:e3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:56:28 2026 by rpki-client