This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/WOBi4BxgINR_iF8MxA0w62_6gWo.roa
File:                     WOBi4BxgINR_iF8MxA0w62_6gWo.roa (raw, json)
Hash identifier:          8p/uI1r4rMS3ChV0YoZH+RFqruMjs1x5KpjndTl0aEQ=
Subject key identifier:   58:E0:62:E0:1C:60:20:D4:7F:88:5F:0C:C4:0D:30:EB:6F:FA:81:6A
Certificate issuer:       /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial:       019B7E38B6918FC1805A982EDD9E31B44919
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/WOBi4BxgINR_iF8MxA0w62_6gWo.roa
Signing time:             Fri 02 Jan 2026 10:20:04 +0000
ROA not before:           Fri 02 Jan 2026 10:20:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     264617
IP address blocks:        45.94.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:b6:91:8f:c1:80:5a:98:2e:dd:9e:31:b4:49:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
        Validity
            Not Before: Jan  2 10:20:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=58e062e01c6020d47f885f0cc40d30eb6ffa816a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:8f:49:5a:c7:68:66:1d:43:3a:46:be:94:
                    63:17:c3:40:65:f1:97:09:16:6a:6c:ca:7f:50:e3:
                    65:ea:d3:ad:32:fe:56:3f:5c:c0:42:d1:24:41:61:
                    9d:34:42:ff:d9:3e:62:04:a4:bc:3f:fa:77:99:4a:
                    1d:ed:3a:c1:21:6e:b2:c9:3f:5f:14:67:5b:1b:b1:
                    94:66:b3:3f:8d:c4:92:1e:f7:7b:31:b5:28:c8:cd:
                    77:ea:2e:59:e4:2c:fe:08:48:4e:56:bd:1b:cd:09:
                    ad:81:75:7b:49:5d:2e:b9:c5:a9:c4:03:50:3e:33:
                    58:e8:a3:e6:4f:ce:5a:33:ed:fe:61:b1:b1:b1:88:
                    42:f1:13:85:9c:34:5e:34:57:82:89:c1:4b:bf:d0:
                    77:1a:51:5d:ec:57:9d:32:35:90:20:1c:ea:0f:33:
                    8f:8c:d8:68:8e:99:ff:b0:b3:f1:a9:74:a8:b3:14:
                    61:ec:73:72:85:58:56:4b:61:0f:e0:5b:46:85:20:
                    51:bd:80:b6:6e:78:d8:79:f2:74:f2:4e:f0:4a:b8:
                    6d:58:19:07:99:c3:3b:a8:1d:f4:ac:d2:a9:78:36:
                    91:aa:73:4a:cb:3a:1a:75:47:21:5a:19:80:99:df:
                    3f:8d:50:f4:d9:90:41:60:6b:91:15:4f:06:d8:3e:
                    35:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E0:62:E0:1C:60:20:D4:7F:88:5F:0C:C4:0D:30:EB:6F:FA:81:6A
            X509v3 Authority Key Identifier:
                keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/WOBi4BxgINR_iF8MxA0w62_6gWo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:ea:42:3c:93:e9:e9:f6:49:92:18:b2:54:6d:b7:c5:f4:49:
         63:89:11:11:ad:4b:d4:7d:7f:1a:b3:ff:a5:ee:72:ef:16:0e:
         76:a5:73:81:49:6c:0a:1f:49:d9:8f:b6:8e:cf:f1:7a:65:78:
         d2:9c:50:6e:98:9a:30:19:1b:2b:d2:94:31:d1:35:9a:97:3f:
         84:51:e1:fe:2c:66:4a:14:88:79:2c:b7:65:48:39:74:a1:6a:
         1f:1a:e8:19:2a:96:91:3f:12:53:99:2f:56:ab:22:b8:c7:b7:
         c3:ff:fa:79:e6:9a:21:92:ac:a4:72:10:95:28:b8:52:f6:0b:
         0e:33:e5:6f:4a:20:91:87:d1:4e:0f:70:32:84:5d:31:86:ad:
         9d:86:56:7d:67:47:d3:10:b5:87:b0:86:41:b0:24:be:66:19:
         25:35:c3:8b:95:20:ad:09:ec:f9:c0:dc:59:bb:81:68:28:76:
         ee:11:63:f8:89:48:20:ec:88:ae:f3:14:81:1b:39:15:ee:b7:
         5c:42:e3:2a:73:e4:7c:29:5d:44:c5:97:f4:c9:77:55:97:75:
         de:b4:39:4b:26:6a:7e:10:9d:90:0c:cb:c7:fa:a4:36:c5:ac:
         12:bb:91:ff:a4:76:da:8d:77:a3:95:51:1c:84:9f:8e:51:2f:
         aa:38:28:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:00:46 2026 by rpki-client