This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/WuAHwEu_e_sftMlPkZv_UwtWX5Q.roa
File:                     WuAHwEu_e_sftMlPkZv_UwtWX5Q.roa (raw, json)
Hash identifier:          mzprPhNPF3MzVig/0gIEkHNJI2y+MkDSYbRMreX4qBk=
Subject key identifier:   5A:E0:07:C0:4B:BF:7B:FB:1F:B4:C9:4F:91:9B:FF:53:0B:56:5F:94
Certificate issuer:       /CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
Certificate serial:       019B797E9232DB688F7AFFD3BFA81D7C044F
Authority key identifier: 38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/WuAHwEu_e_sftMlPkZv_UwtWX5Q.roa
Signing time:             Thu 01 Jan 2026 12:18:16 +0000
ROA not before:           Thu 01 Jan 2026 12:18:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31140
IP address blocks:        193.22.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:92:32:db:68:8f:7a:ff:d3:bf:a8:1d:7c:04:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
        Validity
            Not Before: Jan  1 12:18:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5ae007c04bbf7bfb1fb4c94f919bff530b565f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e6:a0:20:c3:17:7f:14:75:51:3c:a6:bd:bc:
                    45:88:6d:56:03:ab:9e:53:26:72:49:73:c4:91:76:
                    61:e4:b3:56:33:d7:9e:ad:c2:c3:95:0e:b1:7e:9d:
                    03:66:e5:f6:a1:0f:1f:1a:92:68:2a:eb:f5:01:a8:
                    f5:05:8f:6f:fe:e4:7a:2e:04:97:b3:18:6b:9a:69:
                    db:79:56:89:4b:5b:58:ae:20:1b:9e:d4:f9:ff:1f:
                    15:1e:1e:29:f9:b5:f3:b5:28:d0:72:a4:a7:22:9b:
                    8a:bd:8d:1f:8c:80:b1:fe:c6:1b:da:0a:20:98:f8:
                    89:d4:39:83:6f:c9:f1:86:c6:d5:19:cd:86:de:98:
                    24:ba:a3:9e:96:6f:67:8b:f2:5a:42:08:fd:bf:18:
                    63:9f:5b:b8:a3:ff:f4:bb:f0:73:73:ff:eb:b4:c7:
                    f7:a2:c7:8f:82:a5:9a:8e:10:7d:2c:b5:9b:76:03:
                    71:7b:86:7f:63:6a:c4:8a:a5:a8:5a:83:0a:82:6e:
                    aa:0f:9c:e8:8b:7e:bc:60:21:4c:4c:f2:66:23:6c:
                    14:e2:35:6d:b6:3f:1a:a4:61:6b:ae:90:0e:17:04:
                    a6:b9:a6:fd:b1:08:fb:83:4d:27:ca:bb:4d:56:30:
                    15:85:a8:c0:04:56:90:ca:e9:fc:a9:ac:db:b8:e6:
                    1a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E0:07:C0:4B:BF:7B:FB:1F:B4:C9:4F:91:9B:FF:53:0B:56:5F:94
            X509v3 Authority Key Identifier:
                keyid:38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/WuAHwEu_e_sftMlPkZv_UwtWX5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:0d:0d:0d:6b:04:e3:7f:c3:66:06:81:61:eb:34:ab:8b:fb:
         71:c4:d1:37:a2:db:02:c0:7d:f2:36:61:bc:ff:98:dc:3f:58:
         ad:5a:2b:a7:16:08:6a:65:46:bc:c4:84:40:6d:53:3f:27:3a:
         72:b7:fd:22:c1:93:da:af:64:e8:dc:82:3a:d3:dd:1d:52:e2:
         b5:f0:80:76:2e:fd:a7:d0:7a:d3:c5:a4:78:45:58:e5:98:3f:
         a9:cf:44:3d:15:f7:ea:af:3c:94:a7:8d:61:90:cb:13:0d:2d:
         82:c7:2a:34:3c:81:20:74:4b:b1:59:13:15:f7:23:88:17:0d:
         c3:20:e2:a5:9d:0c:5f:04:e9:75:f1:4c:41:c3:59:ba:4d:f3:
         d3:63:84:d4:8c:b6:90:e0:ee:36:c3:80:44:02:fb:0b:0e:79:
         32:1d:a5:c8:9d:b3:fb:fc:f6:fc:2b:60:a2:15:60:a5:2c:60:
         b6:04:26:8a:5d:81:1c:7a:78:09:d4:c1:34:6b:dc:17:62:d8:
         ed:a4:99:17:e9:5b:5b:b5:9a:56:b2:2e:b5:c9:74:cf:86:71:
         b5:38:2f:0e:ed:6c:71:5a:17:5b:b3:4a:ab:c0:5b:55:81:8d:
         0d:24:8c:90:bd:69:2a:7b:cb:38:62:8e:a1:eb:21:66:23:1f:
         c6:92:6a:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5fpIy22iPev/Tv6gdfARPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MTRiNjQ4ZGQ1NzQyMDI1YzNkZGE1ZWFhNjY0OTFmZmRi
MmU1ZDkwHhcNMjYwMTAxMTIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWUwMDdjMDRiYmY3YmZiMWZiNGM5NGY5MTliZmY1MzBiNTY1Zjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuagIMMXfxR1UTymvbxFiG1WA6ue
UyZySXPEkXZh5LNWM9eercLDlQ6xfp0DZuX2oQ8fGpJoKuv1Aaj1BY9v/uR6LgSX
sxhrmmnbeVaJS1tYriAbntT5/x8VHh4p+bXztSjQcqSnIpuKvY0fjICx/sYb2gog
mPiJ1DmDb8nxhsbVGc2G3pgkuqOelm9ni/JaQgj9vxhjn1u4o//0u/Bzc//rtMf3
osePgqWajhB9LLWbdgNxe4Z/Y2rEiqWoWoMKgm6qD5zoi368YCFMTPJmI2wU4jVt
tj8apGFrrpAOFwSmuab9sQj7g00nyrtNVjAVhajABFaQyun8qazbuOYaQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFrgB8BLv3v7H7TJT5Gb/1MLVl+UMB8GA1UdIwQY
MBaAFDgUtkjdV0ICXD3aXqpmSR/9suXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0JTMlNOMVhRZ0pjUGRwZXFtWkpIXzJ5NWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8xMmRmMmQtOTRmMS00ZDEwLTk0YTQt
MWY4MzY4ODAxZmRjLzEvV3VBSHdFdV9lX3NmdE1sUGtadl9Vd3RXWDVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8xMmRmMmQtOTRmMS00ZDEwLTk0YTQtMWY4MzY4ODAxZmRj
LzEvT0JTMlNOMVhRZ0pjUGRwZXFtWkpIXzJ5NWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRb4MA0G
CSqGSIb3DQEBCwUAA4IBAQB6DQ0NawTjf8NmBoFh6zSri/txxNE3otsCwH3yNmG8
/5jcP1itWiunFghqZUa8xIRAbVM/Jzpyt/0iwZPar2To3II6090dUuK18IB2Lv2n
0HrTxaR4RVjlmD+pz0Q9FffqrzyUp41hkMsTDS2Cxyo0PIEgdEuxWRMV9yOIFw3D
IOKlnQxfBOl18UxBw1m6TfPTY4TUjLaQ4O42w4BEAvsLDnkyHaXInbP7/Pb8K2Ci
FWClLGC2BCaKXYEcengJ1ME0a9wXYtjtpJkX6VtbtZpWsi61yXTPhnG1OC8O7Wxx
Whdbs0qrwFtVgY0NJIyQvWkqe8s4Yo6h6yFmIx/Gkmow
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:22 2026 by rpki-client