This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/WwK0wQVJ37gM0FPBexlboGpvdWY.roa
File:                     WwK0wQVJ37gM0FPBexlboGpvdWY.roa (raw, json)
Hash identifier:          8GMUVCoh7go5d/bcS0qlu+v+yNBlwVof7wqc0z0ILNc=
Subject key identifier:   5B:02:B4:C1:05:49:DF:B8:0C:D0:53:C1:7B:19:5B:A0:6A:6F:75:66
Certificate issuer:       /CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Certificate serial:       019B7E373DF79A10FD29BE467EAC799D8727
Authority key identifier: 18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/WwK0wQVJ37gM0FPBexlboGpvdWY.roa
Signing time:             Fri 02 Jan 2026 10:18:28 +0000
ROA not before:           Fri 02 Jan 2026 10:18:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199638
IP address blocks:        91.245.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:3d:f7:9a:10:fd:29:be:46:7e:ac:79:9d:87:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
        Validity
            Not Before: Jan  2 10:18:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5b02b4c10549dfb80cd053c17b195ba06a6f7566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:31:7f:16:87:12:b7:c9:b3:96:f9:22:b7:8d:
                    b1:00:c0:02:a3:95:3e:0a:4f:12:f1:5a:2a:22:d6:
                    91:85:35:7b:85:59:35:a0:f7:a7:1e:49:cf:22:a0:
                    31:aa:74:e7:38:09:ae:7f:4d:7e:2b:51:6a:ab:a0:
                    33:6c:c2:03:67:ce:fb:f7:77:e7:f8:1c:96:3b:21:
                    9c:09:dc:72:fa:ac:0f:b7:a9:36:07:4d:37:f7:89:
                    82:0d:08:d6:ee:be:53:30:f5:c7:a9:ba:49:89:94:
                    24:62:81:30:cb:d3:ee:e5:61:18:65:f8:3e:36:43:
                    a8:5c:57:64:96:2c:2f:51:be:c7:99:e4:d4:32:3d:
                    e1:d6:e4:15:fc:28:ac:5f:5e:c5:e4:9b:b4:76:30:
                    f8:ac:64:8a:af:d8:08:22:c6:db:97:5d:52:7c:d9:
                    f3:d3:55:74:83:26:a2:7c:0f:70:90:16:93:f4:d2:
                    f7:99:17:6b:11:a4:3a:a7:34:ed:a0:c9:d6:6d:5e:
                    8c:02:44:be:91:4b:47:48:9d:c1:8d:3f:20:cb:8d:
                    31:98:81:32:68:50:86:84:79:05:c8:d3:4a:c5:28:
                    0a:af:7b:9c:e8:0c:80:82:24:1f:92:f3:30:6a:1e:
                    47:0d:85:52:85:59:95:39:87:f5:ca:f3:81:78:38:
                    c9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:02:B4:C1:05:49:DF:B8:0C:D0:53:C1:7B:19:5B:A0:6A:6F:75:66
            X509v3 Authority Key Identifier:
                keyid:18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/WwK0wQVJ37gM0FPBexlboGpvdWY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.245.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:de:d2:17:db:5a:79:60:e2:d4:62:6d:79:62:fb:dd:ee:4e:
         bc:24:c2:e2:35:f2:a5:96:39:f0:57:75:ea:22:f8:38:bc:70:
         78:84:63:76:b8:9e:15:b1:bd:eb:50:f1:e5:95:d6:75:ae:fc:
         c9:bb:0d:f7:21:28:7d:2f:21:4c:c9:67:9d:78:c1:47:4b:d7:
         58:34:61:6a:49:bd:9e:45:8e:53:ed:4d:f8:de:da:51:ff:b2:
         5f:58:ee:a4:f5:b3:39:a4:86:a3:87:c0:93:36:a8:57:2f:05:
         29:84:c3:bc:93:bf:84:e4:a6:f4:dd:0c:54:dc:52:2b:fd:7b:
         f4:3e:5d:7e:a7:26:9f:61:77:d8:f4:b2:eb:e2:60:61:d9:b2:
         75:06:9b:d9:77:c6:d2:d1:95:de:0d:62:3b:a4:0a:76:72:67:
         1c:12:c1:24:3d:22:67:72:5d:f4:f9:52:ee:ab:13:3b:4d:91:
         c7:59:3c:bf:95:60:9d:81:dd:7e:7a:09:f6:e8:74:06:1a:f1:
         b8:9a:fb:a5:8f:a5:e9:d8:09:6d:66:5b:db:fa:1d:23:83:f3:
         29:e7:22:74:48:7c:dd:12:46:9f:00:c2:67:f9:c6:75:b8:b0:
         e6:1e:13:7b:9d:98:43:d3:15:96:4b:a7:33:c4:5a:be:4c:03:
         19:f0:37:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:05 2026 by rpki-client