This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/WVFAsuf0gIe_s8mbxCSABBkUYE4.roa
File:                     WVFAsuf0gIe_s8mbxCSABBkUYE4.roa (raw, json)
Hash identifier:          Gdkycc9GjHGGqUflkFhsXlk4O3/p9hWuatpmjJhs6W4=
Subject key identifier:   59:51:40:B2:E7:F4:80:87:BF:B3:C9:9B:C4:24:80:04:19:14:60:4E
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B3599961E941AC59EE5157AA153C025
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/WVFAsuf0gIe_s8mbxCSABBkUYE4.roa
Signing time:             Thu 01 Jan 2026 20:17:48 +0000
ROA not before:           Thu 01 Jan 2026 20:17:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213634
IP address blocks:        193.226.22.0/24 maxlen: 24
                          193.226.37.0/24 maxlen: 24
                          193.226.38.0/24 maxlen: 24
                          193.231.39.0/24 maxlen: 24
                          193.231.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:99:96:1e:94:1a:c5:9e:e5:15:7a:a1:53:c0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=595140b2e7f48087bfb3c99bc42480041914604e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cf:eb:d1:82:ac:4c:6e:3e:a1:6d:8c:29:6f:
                    fd:f9:4f:90:68:a9:f5:51:8e:44:e4:d5:ed:15:88:
                    46:1f:b5:1d:51:17:9c:26:73:5e:92:67:50:75:95:
                    90:dc:40:da:22:f5:43:8c:5f:dd:72:b4:5b:68:79:
                    47:d2:12:df:b1:c8:6e:55:bd:37:20:22:c1:05:cd:
                    0e:28:22:26:b5:0d:0f:6f:7c:04:4f:7a:39:4a:77:
                    52:8d:66:c6:7c:7e:c3:7b:e2:5c:8a:fa:fa:76:b0:
                    e7:6a:d2:28:51:30:3c:8d:5e:d9:6f:0a:58:8f:49:
                    0c:05:41:da:0c:e6:b0:34:fb:fe:5c:a3:85:63:1a:
                    24:40:21:6c:e4:73:83:36:a8:f3:99:de:ea:7e:92:
                    83:e3:7b:ca:f2:b2:75:ab:fb:75:9f:45:ae:47:a8:
                    81:29:ed:ae:b9:28:5e:0a:9f:3a:55:25:9e:d6:06:
                    bd:14:fe:4f:dc:13:80:56:ab:0b:0c:68:65:98:3b:
                    6b:f8:8f:09:38:ae:1a:45:b5:d5:c5:ff:df:4b:bd:
                    1e:76:76:a0:00:43:b8:b2:e9:d3:bc:db:76:b5:f7:
                    2d:e6:fd:70:3f:3d:0e:4f:7e:41:77:06:e0:22:0f:
                    10:e4:70:97:90:5d:2a:2e:b1:e6:64:58:6b:9a:bc:
                    6b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:51:40:B2:E7:F4:80:87:BF:B3:C9:9B:C4:24:80:04:19:14:60:4E
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/WVFAsuf0gIe_s8mbxCSABBkUYE4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.226.22.0/24
                  193.226.37.0-193.226.38.255
                  193.231.39.0-193.231.40.255

    Signature Algorithm: sha256WithRSAEncryption
         55:82:6a:9a:de:7a:73:96:c3:b7:30:2c:4c:a7:45:6f:75:01:
         31:fc:b9:80:7e:cb:d2:0f:02:d7:72:16:ab:3a:ba:47:b0:9d:
         93:70:38:ef:38:66:e9:a3:48:db:23:35:ab:c0:bc:68:e9:0d:
         7d:d8:f0:01:88:19:d1:6a:4e:45:92:89:9e:c0:ba:45:5a:10:
         22:ec:af:c5:6a:f3:e0:fc:20:d0:d1:bc:73:f9:3b:85:98:7f:
         47:88:76:dc:58:18:d6:35:18:b5:7b:02:71:4d:84:f5:bf:fe:
         eb:56:d4:21:41:f3:8e:7a:cf:73:5b:69:f5:d7:3e:08:70:0e:
         cc:94:12:00:e7:c2:23:ce:04:1e:9d:f3:04:86:37:4c:d4:e6:
         d0:32:4e:6a:3f:92:fc:00:0f:46:47:15:48:ae:84:99:3c:47:
         50:b0:4d:2c:7b:2a:6b:07:04:8e:95:6c:39:e6:c5:94:f5:7f:
         a9:e7:fe:04:ca:9d:08:2f:28:6e:f4:47:97:bf:ba:a9:fd:c5:
         2e:ee:8a:a7:ce:2c:97:98:de:60:b8:43:21:e8:f7:02:41:dd:
         4a:27:7e:48:df:4c:fc:95:65:2c:83:56:58:f8:bc:91:eb:e3:
         28:b8:ca:e6:ca:89:61:28:96:a2:3e:a7:71:46:2b:d4:ce:a8:
         de:60:01:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:53 2026 by rpki-client