This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/W58AdD7Rr0uuvxheyA1GWjToFJE.roa
File:                     W58AdD7Rr0uuvxheyA1GWjToFJE.roa (raw, json)
Hash identifier:          pv8QvvpO275zobKXc0NtewA2Ek7SkRQfl2TPBrL090s=
Subject key identifier:   5B:9F:00:74:3E:D1:AF:4B:AE:BF:18:5E:C8:0D:46:5A:34:E8:14:91
Certificate issuer:       /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial:       019B797F4C7B86FA65A61FA49AF19CF0D87B
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/W58AdD7Rr0uuvxheyA1GWjToFJE.roa
Signing time:             Thu 01 Jan 2026 12:19:04 +0000
ROA not before:           Thu 01 Jan 2026 12:19:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209371
IP address blocks:        213.238.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:4c:7b:86:fa:65:a6:1f:a4:9a:f1:9c:f0:d8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
        Validity
            Not Before: Jan  1 12:19:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5b9f00743ed1af4baebf185ec80d465a34e81491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d5:a9:05:ea:3e:34:0a:f3:f9:5d:54:5b:3e:
                    6a:a4:ae:52:78:b8:89:a0:46:a0:ac:7e:da:15:e7:
                    7b:ab:fe:a6:a8:25:ee:21:57:89:e2:9b:0a:a9:cf:
                    2d:01:38:41:fc:cb:4e:48:56:dd:62:d1:64:df:04:
                    8d:c7:15:23:9c:62:0b:71:11:0b:c4:17:e5:38:64:
                    70:8c:0d:68:91:16:a3:0c:34:70:b4:83:26:85:d2:
                    20:91:32:ce:bc:c3:a2:2a:55:c1:6b:67:cd:1a:3c:
                    b3:34:f8:b1:08:4a:3f:0b:d0:01:80:86:17:f7:63:
                    d8:46:34:7d:af:c3:c7:08:a7:f0:af:71:e4:8c:c8:
                    72:dc:89:57:bb:b0:bc:4e:4f:f1:6b:83:a8:34:9f:
                    e9:5e:42:e2:4b:c0:16:6f:93:ae:f4:c7:a3:f5:f3:
                    f0:61:73:40:82:0c:28:8d:e9:48:fb:5f:3a:be:82:
                    52:68:ab:e0:d8:1d:41:30:ff:2b:af:8b:4c:db:5a:
                    2c:66:91:71:b5:9b:5f:df:23:96:96:d9:c9:80:41:
                    7a:13:f9:85:5b:34:0c:78:7c:d5:79:a4:be:c3:a7:
                    32:c4:50:a5:9d:94:b9:82:0c:10:3c:7c:d0:93:ee:
                    7c:0a:fd:85:8c:c3:62:4f:b6:74:79:7c:fb:c6:0f:
                    d9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9F:00:74:3E:D1:AF:4B:AE:BF:18:5E:C8:0D:46:5A:34:E8:14:91
            X509v3 Authority Key Identifier:
                keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/W58AdD7Rr0uuvxheyA1GWjToFJE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.238.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:e4:38:85:e1:53:f3:fe:0d:98:25:88:70:50:e2:2f:b1:33:
         35:ad:33:ec:ce:79:0a:b5:d6:ca:22:e6:1b:d2:63:7b:84:ab:
         71:e6:23:2a:0e:b3:27:2a:96:17:f6:a2:2e:76:11:c0:71:8d:
         45:fe:c5:cf:d2:f2:ef:7b:b7:0c:24:fc:15:eb:c5:eb:74:14:
         de:f6:e0:db:a2:83:97:5e:e9:bd:dc:42:8f:d1:74:55:02:ab:
         b8:c6:eb:bf:36:95:ad:48:aa:e3:ff:1c:f8:34:9b:4f:b1:18:
         96:49:5a:42:9d:32:b4:a6:3d:91:a9:ac:28:b2:e1:a4:a1:43:
         40:82:ac:bb:7d:64:c1:8d:3e:c4:5e:89:20:b1:28:7a:fd:81:
         8d:c7:36:36:8b:e6:6a:8f:f8:09:d6:15:34:cd:22:77:8a:a4:
         39:88:36:ea:4b:b9:ae:9e:02:60:a7:5e:a2:db:21:3d:14:ec:
         a7:32:cf:bd:52:53:d4:7b:16:88:4c:3b:99:5e:54:68:a3:a3:
         5b:21:5b:a6:3d:06:3a:16:32:b4:62:f4:42:48:b3:a1:0e:81:
         de:4e:9e:13:8f:6c:14:01:d2:3e:a0:56:c6:e4:2a:e7:76:da:
         bf:6e:88:fe:1f:9e:2d:b0:fe:07:34:82:9e:65:1b:0d:19:f2:
         d5:ef:b8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:11:47 2026 by rpki-client