This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/wu-G3RyBE4hAU-OLiWD-QOCIX_4.roa
File:                     wu-G3RyBE4hAU-OLiWD-QOCIX_4.roa (raw, json)
Hash identifier:          rgoDex3C8KLhszdHAASmB1VMl9HshjIiBd1RRJ0afb4=
Subject key identifier:   C2:EF:86:DD:1C:81:13:88:40:53:E3:8B:89:60:FE:40:E0:88:5F:FE
Certificate issuer:       /CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Certificate serial:       019B76EABE7F9C5BBA70712A7D35A3183FE8
Authority key identifier: A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/wu-G3RyBE4hAU-OLiWD-QOCIX_4.roa
Signing time:             Thu 01 Jan 2026 00:17:34 +0000
ROA not before:           Thu 01 Jan 2026 00:17:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8874
IP address blocks:        194.120.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:be:7f:9c:5b:ba:70:71:2a:7d:35:a3:18:3f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
        Validity
            Not Before: Jan  1 00:17:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2ef86dd1c8113884053e38b8960fe40e0885ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:05:fa:63:5a:b6:43:0f:61:67:b2:41:d8:
                    71:3d:db:05:9e:04:91:71:a9:b0:a4:a3:dc:d4:bc:
                    31:89:ea:5f:19:37:2c:36:7e:90:22:9c:0f:06:12:
                    68:58:7a:db:7b:f2:54:43:b1:a8:f5:fa:a6:c1:2f:
                    23:78:b1:5a:6f:50:66:63:e0:38:1a:57:b4:22:30:
                    e8:b2:f0:a5:6b:d1:ff:c2:31:c3:ad:14:6c:4f:51:
                    c3:a2:4e:78:1e:9c:fd:26:7e:60:cb:26:f3:12:99:
                    31:bb:7c:01:eb:61:5d:7e:a8:fc:85:4d:db:ea:00:
                    8b:e8:e7:3a:7d:f0:ee:4c:6e:43:8b:78:a1:35:68:
                    e7:4f:44:2d:f3:3a:11:65:c3:22:b9:86:0e:e1:c8:
                    f6:6e:5b:92:d5:c8:9f:a9:85:8b:63:cc:e4:81:e9:
                    e0:59:34:af:bc:3a:05:66:75:8a:e2:8b:f5:3f:5d:
                    cd:0c:32:cb:b0:11:53:0d:14:7a:3e:01:cc:14:67:
                    a9:74:81:d0:2e:8d:be:38:20:d5:fa:26:a6:9c:6e:
                    e5:3f:5d:b5:06:24:aa:3e:85:56:29:b7:68:46:26:
                    d3:03:0f:5e:04:dc:5b:e2:e8:57:d4:9d:b7:62:8c:
                    f6:df:e1:8f:4d:45:71:87:96:51:13:08:5f:36:70:
                    fb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EF:86:DD:1C:81:13:88:40:53:E3:8B:89:60:FE:40:E0:88:5F:FE
            X509v3 Authority Key Identifier:
                keyid:A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/wu-G3RyBE4hAU-OLiWD-QOCIX_4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.120.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:cb:94:6e:21:f9:a5:50:d6:71:0c:6d:57:9f:eb:c4:21:62:
         22:a7:a8:33:7f:39:68:18:5e:64:27:5a:16:d4:b8:32:73:74:
         35:ff:02:3a:a9:af:c3:63:c5:44:71:c3:be:3b:15:8a:60:fa:
         c4:f6:66:3b:81:d5:46:a7:56:45:bb:ee:6b:94:97:49:1e:f3:
         28:e6:ba:07:6c:ca:f9:63:f4:12:a2:1d:b1:6e:c0:a9:a4:80:
         ec:37:ab:c7:51:8e:5b:4d:a9:1a:e0:9e:71:29:60:fb:91:7a:
         56:58:47:d3:91:45:f7:51:9a:ec:18:8c:19:80:4a:4c:f5:1a:
         65:06:ac:0e:6b:0f:32:b6:76:9f:d8:de:70:78:f6:d7:c1:74:
         d5:51:08:c5:a3:87:af:3d:67:90:85:ed:d6:15:0c:52:65:eb:
         e7:27:b5:bf:82:88:52:f0:25:fb:b3:60:f1:74:9e:b1:aa:d1:
         6b:cb:73:09:e9:a5:43:45:a8:1a:3d:7b:2c:27:b2:38:3e:85:
         83:5b:43:37:4a:77:14:d9:d6:a2:43:04:8d:58:4b:7f:1a:ad:
         e4:99:e0:4b:86:eb:11:43:5d:03:98:f9:bb:d4:66:ea:34:88:
         27:9f:92:50:6d:a2:44:09:37:69:32:c5:7e:b6:73:2f:9f:2d:
         73:bf:36:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:54:52 2026 by rpki-client