This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/W5uRfZYMXNW2milH0L5Q1SQBK_Y.roa
File:                     W5uRfZYMXNW2milH0L5Q1SQBK_Y.roa (raw, json)
Hash identifier:          twzlUdXhM38SqnTujzlhunBgW581D9DNlyRL1ec0bWg=
Subject key identifier:   5B:9B:91:7D:96:0C:5C:D5:B6:9A:29:47:D0:BE:50:D5:24:01:2B:F6
Certificate issuer:       /CN=8c33ddceab154bdf63e789f4443484ad5548664c
Certificate serial:       019B797E706236C9184BE249AD3041BBB6D9
Authority key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/W5uRfZYMXNW2milH0L5Q1SQBK_Y.roa
Signing time:             Thu 01 Jan 2026 12:18:08 +0000
ROA not before:           Thu 01 Jan 2026 12:18:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25445
IP address blocks:        193.178.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:70:62:36:c9:18:4b:e2:49:ad:30:41:bb:b6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c33ddceab154bdf63e789f4443484ad5548664c
        Validity
            Not Before: Jan  1 12:18:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5b9b917d960c5cd5b69a2947d0be50d524012bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cd:5a:3f:75:0f:d7:0d:1d:8b:94:d3:31:30:
                    e2:8a:93:b1:12:34:73:85:61:d1:61:34:af:43:ea:
                    7e:4e:22:50:97:a8:7b:ed:d0:59:9d:bc:99:5c:1b:
                    82:6d:d1:b4:4d:41:95:e9:94:f5:eb:18:c0:ed:f6:
                    c0:40:07:7c:6e:76:2a:70:4e:06:62:25:5b:bb:98:
                    32:08:e0:f7:54:d1:07:50:0e:9e:07:d6:87:ae:0c:
                    0c:c4:4d:42:9f:e5:a9:d6:f5:c7:24:0a:e0:10:ce:
                    08:d9:75:b0:c2:90:84:e3:b6:65:d0:18:87:5a:a0:
                    3d:d4:ea:1e:cc:3a:38:a1:d1:10:3d:de:71:26:9a:
                    a9:d6:26:c3:15:79:cc:4f:2b:89:f7:a0:d3:15:b0:
                    25:0d:7a:d1:66:1e:da:d6:b8:14:68:bb:64:89:e2:
                    89:ed:85:07:65:cc:79:f3:d4:61:f0:dc:e4:74:fa:
                    57:61:79:a7:eb:70:25:99:6b:46:05:d7:d2:4f:40:
                    f6:f0:62:ae:ad:f5:9e:4a:6f:97:b5:93:74:7c:6a:
                    66:93:68:34:51:61:65:98:0e:c6:6d:c7:c9:e4:9f:
                    95:02:92:16:4d:d9:8b:e6:c5:16:0d:85:5c:db:86:
                    32:4f:a4:d7:f2:d8:75:7a:0c:49:5e:77:aa:61:61:
                    8c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9B:91:7D:96:0C:5C:D5:B6:9A:29:47:D0:BE:50:D5:24:01:2B:F6
            X509v3 Authority Key Identifier:
                keyid:8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/W5uRfZYMXNW2milH0L5Q1SQBK_Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:7c:f5:34:33:9e:47:88:f8:65:c0:b2:18:f3:1c:ac:49:d1:
         c0:41:5d:6a:30:13:31:a2:46:93:3b:74:e9:ae:40:97:5c:63:
         db:3d:63:78:4d:19:67:fa:c4:fd:ce:d1:eb:bc:aa:34:b5:78:
         77:07:cd:6c:ae:8c:09:aa:83:05:9f:ef:ec:9f:e2:d3:43:82:
         d5:cb:2b:1d:39:6f:45:59:a2:b2:a7:b7:5a:26:12:e5:dd:58:
         f9:06:f7:80:5f:0d:34:e0:84:40:3d:05:a3:5a:2a:87:65:e2:
         da:67:dc:6e:10:d7:a2:85:44:e8:d0:79:31:40:49:66:d4:c4:
         ee:f7:33:24:8b:a0:96:0f:ba:30:3b:57:25:8d:83:da:14:87:
         78:3b:b7:f4:b9:6d:76:d4:82:33:97:40:b2:bf:b8:48:8d:45:
         e7:72:57:1e:15:dc:99:92:d9:47:d5:e8:d4:22:30:3a:1d:83:
         9f:8e:11:e9:7e:73:ce:a7:3c:d4:a3:15:d2:d9:da:e0:5b:f0:
         bc:8e:69:95:dd:21:18:a8:06:e5:0d:52:e0:bf:ff:29:2a:7f:
         63:50:70:82:ad:48:23:e4:e5:80:83:90:28:65:4b:d6:e8:ff:
         89:4c:12:c1:2f:f3:6b:ca:1a:5f:45:74:df:77:3a:b8:2d:82:
         ae:d8:7c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:16 2026 by rpki-client