This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/wHcGZeO9fssaMojMLh7b76eEutw.roa
File:                     wHcGZeO9fssaMojMLh7b76eEutw.roa (raw, json)
Hash identifier:          Z81zBTKFgXNzuuqrSSQF/QN+FUjXh697pGYZEocelm0=
Subject key identifier:   C0:77:06:65:E3:BD:7E:CB:1A:32:88:CC:2E:1E:DB:EF:A7:84:BA:DC
Certificate issuer:       /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial:       019B7E37AE74F5014574019E08C656508741
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/wHcGZeO9fssaMojMLh7b76eEutw.roa
Signing time:             Fri 02 Jan 2026 10:18:56 +0000
ROA not before:           Fri 02 Jan 2026 10:18:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199532
IP address blocks:        91.217.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:ae:74:f5:01:45:74:01:9e:08:c6:56:50:87:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
        Validity
            Not Before: Jan  2 10:18:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c0770665e3bd7ecb1a3288cc2e1edbefa784badc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:ba:6a:7f:49:d3:d9:0f:27:6a:f7:b2:00:
                    08:53:a4:c8:c8:b7:8d:71:72:53:9b:ad:8b:e3:cc:
                    71:1b:47:fb:d6:16:cc:56:85:50:7d:d2:69:0a:65:
                    8d:5c:40:6a:b8:78:03:dd:76:3b:87:b9:f8:ab:b7:
                    58:99:2b:a4:65:82:7b:ef:b7:e8:2f:ca:d0:81:cd:
                    34:94:7d:ca:02:6b:fc:d4:f7:cc:56:a4:75:28:3f:
                    87:7e:1b:2c:59:db:71:50:ed:90:fb:50:ea:48:8b:
                    84:9a:3c:cf:79:96:ca:ef:c6:7e:c9:96:51:e1:11:
                    95:25:7a:b5:00:f2:f2:8f:12:26:39:6f:7f:af:77:
                    58:c7:2c:f6:f9:b8:3c:71:46:52:d5:34:37:9c:1f:
                    50:79:84:32:17:1b:d5:ed:25:2d:90:f0:75:5a:35:
                    e1:f9:e4:02:77:84:67:61:ff:94:e1:40:c4:58:82:
                    8c:02:b9:01:bb:2b:3e:99:b0:8d:aa:8a:ea:f5:4e:
                    75:bc:b1:ec:d2:c5:a5:1c:81:75:e2:79:05:ad:75:
                    e1:b8:58:c2:61:e2:10:d4:8d:b3:a8:6b:59:16:58:
                    18:09:15:66:5b:91:6e:c8:16:b0:5f:33:3c:b7:16:
                    0f:b6:21:04:04:1f:5a:5f:a4:65:29:db:09:72:cd:
                    d5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:77:06:65:E3:BD:7E:CB:1A:32:88:CC:2E:1E:DB:EF:A7:84:BA:DC
            X509v3 Authority Key Identifier:
                keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/wHcGZeO9fssaMojMLh7b76eEutw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:6a:15:71:df:5f:8a:88:c6:c7:5f:7d:00:a0:c6:d8:0f:c9:
         c5:6c:83:ab:8b:7e:07:30:ff:1f:0a:3a:32:7b:e1:db:33:bb:
         5c:1e:af:9c:31:3c:15:db:bc:e3:0c:1a:bd:3b:b4:f3:06:e0:
         f8:0f:7a:81:0b:fd:81:18:b2:ea:00:37:20:7a:1d:f4:0f:6d:
         72:e4:44:1a:80:e9:d3:20:78:f4:ed:c1:33:39:af:d8:62:fe:
         fc:5f:ad:22:fb:36:de:8e:1a:40:d3:0f:ea:50:19:19:71:d0:
         4c:fb:0d:9b:2d:a0:c6:5d:5e:c8:df:b0:e7:20:22:6f:23:75:
         36:2b:fd:7e:de:07:de:cb:69:ea:b4:b8:19:8b:b4:a7:2b:6d:
         f8:2c:3d:23:6a:e1:16:9c:96:12:9c:01:65:83:eb:48:36:12:
         9a:3a:94:3d:14:78:7b:d2:70:a5:e5:68:89:09:09:42:17:7a:
         9a:e5:e4:8a:4a:11:1f:4a:1d:00:66:b5:48:44:4c:52:64:28:
         53:f0:20:68:4f:fc:59:9b:08:86:53:54:54:43:c0:a7:ec:e1:
         61:69:96:99:a8:ec:0f:3b:98:2d:05:bb:f7:e6:90:9f:aa:da:
         e9:38:a7:20:8e:2a:0f:a3:2b:aa:69:e5:d9:d9:59:70:16:86:
         62:3d:a1:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+N6509QFFdAGeCMZWUIdBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Njg0YTdlYmY5ZGUyOTQ4MzFhMmMwM2UxYjVhMDEyNDIw
YWNkOTcwHhcNMjYwMTAyMTAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDc3MDY2NWUzYmQ3ZWNiMWEzMjg4Y2MyZTFlZGJlZmE3ODRiYWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtje6an9J09kPJ2r3sgAIU6TIyLeN
cXJTm62L48xxG0f71hbMVoVQfdJpCmWNXEBquHgD3XY7h7n4q7dYmSukZYJ777fo
L8rQgc00lH3KAmv81PfMVqR1KD+HfhssWdtxUO2Q+1DqSIuEmjzPeZbK78Z+yZZR
4RGVJXq1APLyjxImOW9/r3dYxyz2+bg8cUZS1TQ3nB9QeYQyFxvV7SUtkPB1WjXh
+eQCd4RnYf+U4UDEWIKMArkBuys+mbCNqorq9U51vLHs0sWlHIF14nkFrXXhuFjC
YeIQ1I2zqGtZFlgYCRVmW5FuyBawXzM8txYPtiEEBB9aX6RlKdsJcs3V8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMB3BmXjvX7LGjKIzC4e2++nhLrcMB8GA1UdIwQY
MBaAFEdoSn6/neKUgxosA+G1oBJCCs2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wOTg3NzItZGJiNi00ZGJiLWI1OTUt
YjI2ZjcwZTAzZDc2LzEvd0hjR1plTzlmc3NhTW9qTUxoN2I3NmVFdXR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8wOTg3NzItZGJiNi00ZGJiLWI1OTUtYjI2ZjcwZTAzZDc2
LzEvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9nDMA0G
CSqGSIb3DQEBCwUAA4IBAQCHahVx31+KiMbHX30AoMbYD8nFbIOri34HMP8fCjoy
e+HbM7tcHq+cMTwV27zjDBq9O7TzBuD4D3qBC/2BGLLqADcgeh30D21y5EQagOnT
IHj07cEzOa/YYv78X60i+zbejhpA0w/qUBkZcdBM+w2bLaDGXV7I37DnICJvI3U2
K/1+3gfey2nqtLgZi7SnK234LD0jauEWnJYSnAFlg+tINhKaOpQ9FHh70nCl5WiJ
CQlCF3qa5eSKShEfSh0AZrVIRExSZChT8CBoT/xZmwiGU1RUQ8Cn7OFhaZaZqOwP
O5gtBbv35pCfqtrpOKcgjioPoyuqaeXZ2VlwFoZiPaG1
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:05 2026 by rpki-client