This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/WoaNei28YSaPDdcENSu3LjSXLKg.roa
File:                     WoaNei28YSaPDdcENSu3LjSXLKg.roa (raw, json)
Hash identifier:          YXB0+7Vswy/qgNB0Agbnb+glIUAaceZRMWc/efKKqKU=
Subject key identifier:   5A:86:8D:7A:2D:BC:61:26:8F:0D:D7:04:35:2B:B7:2E:34:97:2C:A8
Certificate issuer:       /CN=dd53f63f13a0c952a079f4578a10edbf6e3aa58b
Certificate serial:       019B79100751C4C3871416DE49730A349F66
Authority key identifier: DD:53:F6:3F:13:A0:C9:52:A0:79:F4:57:8A:10:ED:BF:6E:3A:A5:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/WoaNei28YSaPDdcENSu3LjSXLKg.roa
Signing time:             Thu 01 Jan 2026 10:17:32 +0000
ROA not before:           Thu 01 Jan 2026 10:17:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16314
IP address blocks:        217.116.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:07:51:c4:c3:87:14:16:de:49:73:0a:34:9f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd53f63f13a0c952a079f4578a10edbf6e3aa58b
        Validity
            Not Before: Jan  1 10:17:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a868d7a2dbc61268f0dd704352bb72e34972ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fd:f7:2c:ee:0c:25:17:a9:be:ac:d0:a2:68:
                    8a:2d:ef:27:0d:69:48:14:82:1a:2e:ea:d1:90:f8:
                    b1:33:04:cc:85:0b:ca:6a:bc:01:8e:cf:4a:9b:73:
                    42:db:60:8c:36:fc:55:6c:40:fe:52:0e:7d:c0:5d:
                    fe:68:65:56:4d:44:7b:62:33:50:f9:7b:7b:6c:32:
                    15:2f:4a:5f:ec:dc:21:16:a7:6b:e1:59:ba:65:63:
                    db:2e:53:24:c6:2e:f5:71:59:ed:1f:b3:d2:a6:9a:
                    39:b9:bf:2a:3b:c4:33:2b:9c:7a:ef:85:8a:e0:9e:
                    74:8e:fb:5f:2d:25:b7:d2:d0:c3:dd:9d:6b:07:b0:
                    6b:ca:74:b6:c2:89:5a:30:b8:f0:d4:9a:cd:55:32:
                    dd:b6:c2:cc:b9:95:9d:ab:e5:a0:7c:b8:98:19:6b:
                    b2:bd:24:9a:e1:49:f6:d5:16:02:77:01:d7:2f:dc:
                    14:d8:9a:ee:a5:71:46:88:00:a4:19:f0:2c:bc:7e:
                    3a:fe:a8:1e:d5:0a:ca:44:19:ff:90:7c:ff:5a:09:
                    53:0c:98:d8:e8:4b:6e:5b:7e:d2:1f:78:22:4d:56:
                    e9:a0:89:7d:29:53:cc:5f:50:30:7d:be:70:42:5e:
                    6a:13:b0:f6:f2:19:03:26:00:cf:ec:0f:e6:e5:94:
                    6d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:86:8D:7A:2D:BC:61:26:8F:0D:D7:04:35:2B:B7:2E:34:97:2C:A8
            X509v3 Authority Key Identifier:
                keyid:DD:53:F6:3F:13:A0:C9:52:A0:79:F4:57:8A:10:ED:BF:6E:3A:A5:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/WoaNei28YSaPDdcENSu3LjSXLKg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.116.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:3b:6b:43:a3:af:34:d1:06:c8:f5:fc:e7:9b:4e:06:de:6f:
         00:55:4b:f7:fb:29:92:b9:38:5b:6c:18:6d:f4:d0:2e:2c:74:
         b1:c2:3c:ae:9b:96:8d:34:fe:ac:c3:a4:de:9f:02:a9:a7:1c:
         46:3a:26:45:fb:76:6a:2b:f8:a2:9c:9b:ed:6d:36:e1:46:f7:
         ba:be:6f:cf:95:f0:cd:91:f9:20:10:28:0f:0d:9c:3b:b1:15:
         93:ee:cc:45:0a:8e:20:32:93:5d:4e:d4:3f:09:db:91:ee:47:
         6b:35:4a:6c:83:65:c6:88:5b:bb:f6:82:26:78:82:d4:47:c6:
         bd:66:09:df:38:77:05:0b:45:e1:4f:6e:a1:cf:f5:69:de:49:
         90:1c:cb:23:5f:0e:82:90:90:c8:27:cb:29:40:0b:11:00:db:
         ad:39:ee:d7:8c:68:fb:47:8b:86:52:92:7d:91:09:19:51:e9:
         99:35:d5:af:ad:d4:c1:0e:9a:e7:d5:db:73:85:15:98:f3:89:
         fc:40:d2:c6:c1:0a:4f:bf:33:d9:8b:13:1a:1f:90:86:5d:6d:
         7a:6f:a1:e9:7e:69:9b:8d:b8:55:69:54:c6:27:3a:3b:f1:54:
         50:1e:b9:eb:bc:a8:37:24:4d:4b:ce:6f:cf:13:8f:84:42:06:
         8c:f5:61:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:44:32 2026 by rpki-client