This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa
File:                     W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa (raw, json)
Hash identifier:          VsS3OZqPtVzXeu3oeLIkDEifPtVcvvgiHyu0vYriLJ8=
Subject key identifier:   5B:E4:71:57:F6:F8:1F:54:34:A8:0A:40:81:6F:D9:64:83:4B:E5:FE
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       019B7E389582C88009A725730369C6EC52F0
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa
Signing time:             Fri 02 Jan 2026 10:19:56 +0000
ROA not before:           Fri 02 Jan 2026 10:19:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198883
IP address blocks:        188.66.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:95:82:c8:80:09:a7:25:73:03:69:c6:ec:52:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Jan  2 10:19:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5be47157f6f81f5434a80a40816fd964834be5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:d7:26:f5:cc:8a:f0:e3:d7:d7:6e:d3:62:
                    32:e9:b7:78:1f:60:99:6a:64:c9:40:0d:3c:a5:33:
                    7a:4d:51:93:ca:db:43:ab:0d:65:e3:c5:02:f7:a9:
                    c0:5b:31:ad:96:25:31:e4:16:b2:53:c4:94:49:d6:
                    88:7b:cb:c6:cb:e6:d8:9b:66:f9:ec:a5:e4:f8:2c:
                    51:71:99:8f:a8:30:7e:66:94:5e:26:60:6e:73:18:
                    32:b1:8a:ca:18:2d:38:e4:5f:9e:b3:7c:03:3e:3d:
                    bb:1c:e2:5e:04:95:c1:6b:26:3a:f7:0d:cc:88:6d:
                    2a:2c:2f:04:27:32:28:94:7a:4c:27:3c:de:c2:6c:
                    91:4c:ef:6d:89:29:8a:d0:1e:22:5b:3a:3d:87:cc:
                    e5:68:46:2b:4c:da:09:68:b2:16:e7:20:c8:1f:4a:
                    ac:c7:f5:b2:78:0d:23:1c:cb:a8:ed:cd:9d:8e:bc:
                    3f:ac:58:a5:5f:db:c7:47:be:fd:62:eb:82:07:15:
                    3b:f1:23:26:4d:17:09:47:9b:b1:30:04:d2:62:7d:
                    7c:22:c2:22:5b:97:45:b0:42:6e:11:42:c3:1c:94:
                    a3:f9:fd:ac:1b:0c:c1:24:c0:2b:5d:66:46:1a:91:
                    e4:18:03:d0:86:b6:a0:0b:60:a0:d3:86:61:b6:18:
                    9a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E4:71:57:F6:F8:1F:54:34:A8:0A:40:81:6F:D9:64:83:4B:E5:FE
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.66.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:8b:d5:a8:4b:b2:b1:97:2e:97:02:10:f5:b4:d5:1a:ea:ec:
         a3:9b:41:dd:88:4d:e9:4c:b9:b9:1e:53:a3:7e:fa:41:b9:0a:
         61:ed:63:f0:cb:4c:7f:e7:6c:69:22:6b:54:90:e5:83:dc:9b:
         77:e4:43:68:fc:8f:eb:cc:71:8e:a1:c2:ee:4f:67:4d:9c:22:
         97:37:9a:fd:0d:71:25:9c:d3:a8:c1:83:5b:24:b4:93:77:fe:
         84:bb:9f:20:d8:6e:fb:00:a9:4b:bb:95:02:56:81:7b:99:fa:
         16:15:7a:bf:06:45:7f:96:37:07:be:9c:d4:f6:16:51:48:19:
         ba:b1:58:7d:70:cf:0a:21:92:0b:66:f1:44:bd:f9:80:23:3d:
         f1:c2:f7:b2:50:b4:fb:47:a6:69:d6:09:26:86:ba:dc:7c:37:
         c8:3a:10:3a:3a:c9:27:33:32:79:8c:d3:bd:5b:ac:95:18:fa:
         ad:14:38:89:85:8f:4e:6d:e1:20:cf:03:09:fd:8d:33:f0:7b:
         82:bf:bd:a1:b4:db:da:0d:90:4b:60:be:0e:5a:56:4b:9b:1b:
         9e:77:5f:06:ab:1b:ca:1b:fb:99:58:fd:e5:e7:ba:cd:f7:a3:
         46:ec:bf:e7:5e:3b:b7:c9:c8:28:41:a9:4e:9f:2a:93:62:ad:
         3f:12:66:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 10:39:20 2026 by rpki-client