This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/W-ufQjOcGl91afHginNv40fKWsY.roa
File:                     W-ufQjOcGl91afHginNv40fKWsY.roa (raw, json)
Hash identifier:          j3ycx5Cjdts8LWV1/1jMoGk0+p0SZARujtf9Pwq3P7I=
Subject key identifier:   5B:EB:9F:42:33:9C:1A:5F:75:69:F1:E0:8A:73:6F:E3:47:CA:5A:C6
Certificate issuer:       /CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
Certificate serial:       019B7EA4CFA8144B4A1FCDE22229F848258C
Authority key identifier: 82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/W-ufQjOcGl91afHginNv40fKWsY.roa
Signing time:             Fri 02 Jan 2026 12:18:08 +0000
ROA not before:           Fri 02 Jan 2026 12:18:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8727
IP address blocks:        195.190.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a4:cf:a8:14:4b:4a:1f:cd:e2:22:29:f8:48:25:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
        Validity
            Not Before: Jan  2 12:18:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5beb9f42339c1a5f7569f1e08a736fe347ca5ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a2:f7:b2:a2:cf:85:0a:ec:2b:52:11:4f:c0:
                    f4:0a:27:71:d8:ba:71:a5:99:76:b1:d0:02:6b:84:
                    d7:33:8e:23:1c:c8:af:a1:af:88:c9:b3:45:f0:f2:
                    13:a3:c1:e6:b0:e9:d8:3e:55:31:15:7d:b6:72:67:
                    c5:cb:64:16:af:0c:47:0b:4e:dd:4a:a6:50:ef:84:
                    77:07:6a:56:c8:fc:80:1c:04:a1:59:1f:8a:a8:16:
                    95:8a:7b:ad:3f:8e:75:9c:40:91:0b:ee:b5:9f:55:
                    3b:f6:2b:df:45:36:d5:ad:8d:06:13:41:fa:2a:5e:
                    a6:f5:24:c6:cd:0a:56:45:8d:ed:57:d1:89:f1:39:
                    16:7b:0c:99:12:93:fb:2b:55:0a:4d:6d:c1:5d:87:
                    7f:82:a6:da:df:08:b6:c4:1b:87:38:ea:64:c0:5b:
                    56:99:7f:9a:1a:6c:5c:23:34:fa:92:ef:38:66:84:
                    c6:ff:19:ac:ec:15:fd:38:7f:b0:ee:df:e4:6e:11:
                    8e:c2:bb:d4:f5:13:6c:ad:f9:bf:ea:0b:b4:83:a5:
                    dc:eb:1d:b2:a4:11:54:15:09:f8:d9:c1:56:c9:85:
                    f8:1c:68:38:ad:a1:1b:c6:ea:be:60:b4:7a:25:a7:
                    d7:5e:82:2c:0b:79:37:f8:59:29:0f:70:22:73:57:
                    81:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EB:9F:42:33:9C:1A:5F:75:69:F1:E0:8A:73:6F:E3:47:CA:5A:C6
            X509v3 Authority Key Identifier:
                keyid:82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/W-ufQjOcGl91afHginNv40fKWsY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.190.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:b9:5c:63:33:f6:10:3d:66:66:a0:b1:4d:f7:f0:12:a7:88:
         49:75:d4:f8:3a:a3:b4:07:e5:c0:40:3e:3a:ab:a0:38:e6:d6:
         64:1a:07:a3:db:36:b5:e1:35:3b:bb:1f:67:cb:76:47:00:f2:
         0e:93:46:e0:0c:e4:f4:75:37:cd:37:a8:4f:c9:44:fe:d4:3d:
         eb:42:48:3b:74:f5:68:7f:75:21:ff:f0:df:b3:07:78:68:35:
         cc:86:62:54:16:94:70:98:64:ab:5f:c6:6f:ca:4f:e2:5e:10:
         1b:18:7e:88:8f:4d:66:a2:be:0b:ce:6d:2a:08:95:ac:99:41:
         e7:55:3b:7a:f0:9d:aa:9c:77:7b:ca:97:c1:7e:e7:f2:16:d3:
         e5:e4:45:64:02:4f:c5:c5:aa:8c:57:4e:4a:2a:c5:3d:f2:bf:
         4b:92:ad:79:e0:ac:72:ce:52:a5:80:1d:64:01:bc:9f:0b:e9:
         04:1e:b8:b6:74:12:c9:81:ac:12:ec:ec:02:75:a8:8f:59:83:
         84:7e:de:b6:35:27:51:11:df:f6:9a:47:c5:4e:65:40:03:c4:
         c9:44:b8:23:c5:1a:d4:e5:de:b4:6e:fe:98:db:92:e2:e3:9a:
         14:5a:63:32:28:66:93:d5:59:60:0f:cb:76:58:65:69:91:06:
         db:ab:28:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:39 2026 by rpki-client