This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/_wcSqPRV5JgTozaPPAply-Zy5SI.roa
File:                     _wcSqPRV5JgTozaPPAply-Zy5SI.roa (raw, json)
Hash identifier:          kaddq5Zo4l9c0eBW6a1M05v2cAL5RJlZmJFBmkNxnmk=
Subject key identifier:   FF:07:12:A8:F4:55:E4:98:13:A3:36:8F:3C:0A:65:CB:E6:72:E5:22
Certificate issuer:       /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial:       019B7F157EB729AAAB26281B552284E0BA55
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/_wcSqPRV5JgTozaPPAply-Zy5SI.roa
Signing time:             Fri 02 Jan 2026 14:21:13 +0000
ROA not before:           Fri 02 Jan 2026 14:21:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61094
IP address blocks:        185.187.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:7e:b7:29:aa:ab:26:28:1b:55:22:84:e0:ba:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
        Validity
            Not Before: Jan  2 14:21:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ff0712a8f455e49813a3368f3c0a65cbe672e522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:30:ca:68:66:9c:e3:3c:57:f2:0e:8b:51:0c:
                    e8:2e:e2:e3:2c:51:8e:e5:61:42:ed:d0:51:f5:46:
                    d4:16:ae:c1:2a:42:1e:f6:1a:f8:5b:2e:22:8b:cb:
                    11:67:2d:4c:5a:ce:cb:b5:b3:cf:2a:be:97:7b:a6:
                    38:77:31:b4:dd:0e:0c:9b:4f:c4:79:fb:8f:f8:0e:
                    78:48:96:ae:b4:33:1d:f1:fd:46:b0:5a:a0:48:f5:
                    b3:8d:7a:40:52:a1:d2:52:78:08:9f:27:97:f8:f8:
                    b1:ee:20:26:93:e6:92:44:06:e2:a1:e7:82:46:fd:
                    4a:c3:b2:46:32:eb:0b:d0:90:00:ee:24:67:e4:cc:
                    9a:51:a0:58:c6:b2:3a:a2:10:d7:6f:10:be:b8:f5:
                    ec:df:10:3f:88:b3:27:6a:3d:cc:17:90:af:bd:96:
                    64:fa:76:04:18:62:5c:5e:a1:60:81:8c:cb:f9:d9:
                    5a:70:10:32:e9:11:ea:cd:f5:21:b7:2a:86:aa:6d:
                    66:70:de:87:54:4e:4f:a4:84:d5:fd:c8:c1:21:ef:
                    30:d7:aa:cf:d8:27:2c:a4:46:89:58:ae:75:ba:08:
                    03:24:d4:60:97:a0:7a:cd:66:e7:b9:86:3b:79:be:
                    15:2e:ea:3f:96:10:a5:65:86:33:d3:52:95:cd:5b:
                    58:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:07:12:A8:F4:55:E4:98:13:A3:36:8F:3C:0A:65:CB:E6:72:E5:22
            X509v3 Authority Key Identifier:
                keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/_wcSqPRV5JgTozaPPAply-Zy5SI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:5a:6a:97:0d:18:dc:76:4b:ff:4d:51:41:6c:c4:25:88:19:
         31:ba:f4:4a:58:20:df:27:b7:71:af:92:34:ec:22:b1:c4:ca:
         fb:af:18:5f:01:69:9a:af:3e:69:c5:90:11:0b:db:23:fb:76:
         d5:75:23:ce:48:2c:60:da:61:a5:a2:71:f4:2a:85:ca:62:78:
         9b:1e:00:ee:7b:cf:c8:72:36:db:cb:53:11:14:a0:28:88:bd:
         12:da:fd:b7:30:53:28:c6:be:df:8f:e3:85:10:bc:79:50:97:
         80:c1:38:29:fc:f1:ea:95:06:97:e7:8d:ba:2c:71:cf:a5:79:
         5e:ae:f0:2b:02:a4:80:dd:42:b0:d6:38:1c:1c:1c:43:18:af:
         db:79:b1:09:2a:76:96:7b:74:1d:ff:a0:d0:95:6c:74:f9:f4:
         fd:7b:48:af:45:29:69:81:00:f6:33:d9:0c:9c:59:33:fe:b2:
         51:fc:f4:e5:2c:e1:77:74:cf:be:23:a8:87:c5:ff:fa:54:22:
         27:f2:23:df:9e:9b:34:11:a2:45:01:9a:13:79:ef:d5:29:f2:
         0c:32:2f:3e:31:a3:04:40:89:ee:7c:2c:ef:fe:3a:43:8a:f1:
         74:e8:e0:7c:cb:61:ea:d5:87:67:61:f9:9c:b1:55:41:f4:32:
         b6:39:cc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:12 2026 by rpki-client