This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/WsU0TA-x8x-AIVwWSVATXH41Db8.roa
File:                     WsU0TA-x8x-AIVwWSVATXH41Db8.roa (raw, json)
Hash identifier:          PoI0MFNsTc9HWGtTXSe9O9CouuagHdHyjAB82f5capM=
Subject key identifier:   5A:C5:34:4C:0F:B1:F3:1F:80:21:5C:16:49:50:13:5C:7E:35:0D:BF
Certificate issuer:       /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial:       019B791081057D0F9AB37A42A7CFEFE941BC
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/WsU0TA-x8x-AIVwWSVATXH41Db8.roa
Signing time:             Thu 01 Jan 2026 10:18:03 +0000
ROA not before:           Thu 01 Jan 2026 10:18:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        195.180.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:81:05:7d:0f:9a:b3:7a:42:a7:cf:ef:e9:41:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
        Validity
            Not Before: Jan  1 10:18:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5ac5344c0fb1f31f80215c164950135c7e350dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:56:47:22:25:65:5e:7d:eb:24:9d:b9:9c:39:
                    b3:1c:dc:0f:6e:79:b6:70:05:b8:33:a7:75:ad:bb:
                    40:e0:c8:e2:e1:f7:c0:f7:34:d0:f1:5b:a7:2e:b1:
                    20:6d:d1:db:2d:3f:fd:ae:df:49:7c:06:3c:8c:f3:
                    b4:e8:8f:bf:1f:fa:0a:40:d9:c6:46:4b:cb:da:74:
                    85:d2:ea:f5:5e:c0:8b:bd:c2:c0:96:cf:52:1f:c7:
                    d4:c2:ce:7d:71:9d:2e:c6:ed:d6:b5:3b:70:3d:88:
                    80:95:30:7a:0b:ce:87:2d:05:ae:a6:2c:81:e5:67:
                    e4:7e:c8:9c:03:74:60:8e:11:fe:76:7e:4b:bd:a2:
                    57:f7:89:45:b8:a9:91:33:f7:3d:0e:0f:bb:f7:d6:
                    41:af:59:57:56:af:ed:78:40:44:5f:e4:ad:22:4a:
                    c2:3a:b4:fc:b9:30:90:8b:27:a8:af:71:59:36:6b:
                    29:6f:d0:60:f1:3c:34:5b:8f:65:5a:88:f2:3e:7d:
                    8c:17:3f:38:e7:e0:d3:94:64:46:9e:b0:dc:a6:7d:
                    54:32:65:f6:ed:c3:0c:a1:3b:03:9a:14:e5:30:87:
                    0b:9d:e8:a2:1d:1b:60:a8:46:62:79:7f:b0:cd:20:
                    61:7e:87:f9:c9:bf:53:5e:75:77:34:55:6a:e8:72:
                    eb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C5:34:4C:0F:B1:F3:1F:80:21:5C:16:49:50:13:5C:7E:35:0D:BF
            X509v3 Authority Key Identifier:
                keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/WsU0TA-x8x-AIVwWSVATXH41Db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.180.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:e6:48:6c:f9:3b:a1:a3:92:73:69:ac:e4:30:45:f6:3d:66:
         d2:13:70:54:59:e4:b5:0a:02:1e:55:66:e8:57:8d:45:f9:4e:
         29:48:24:54:77:fa:31:04:fc:87:51:c6:84:d4:f9:41:26:51:
         0f:51:56:2a:d6:63:35:3b:a4:44:60:fa:84:2b:3f:5a:cf:db:
         7d:08:52:48:27:67:d2:dd:62:0c:fd:05:7c:03:3a:ee:38:b8:
         f4:a5:af:a3:b6:76:93:8e:9f:ff:b3:63:93:f7:3c:68:36:2a:
         76:e1:0d:fb:9a:4c:f6:83:0e:9f:a0:c9:e3:38:c6:79:23:e4:
         e1:fe:4e:98:32:41:f9:a8:7e:63:b0:ce:87:6a:bf:94:84:57:
         30:e2:1e:82:a8:41:43:6c:8e:a3:14:8b:98:e6:c1:e2:d5:ac:
         0d:9b:ff:75:e3:8c:9c:a4:08:a4:3f:70:0a:82:1e:14:99:e6:
         d6:44:5c:98:f5:93:73:71:0b:bf:44:04:1b:9c:c9:95:d5:80:
         ec:54:74:8d:a6:39:0a:3b:03:30:a7:b7:1e:39:a3:44:ff:71:
         d0:1a:7b:06:8e:31:fa:e5:d6:6a:ed:5c:d0:a9:1d:d7:09:c1:
         a4:99:43:9b:4d:28:55:51:10:24:d8:f6:53:2c:6f:2a:2d:99:
         e0:12:7e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 00:16:41 2026 by rpki-client