This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/wswbiWhFN53OcrlAurii4-C90OY.roa
File:                     wswbiWhFN53OcrlAurii4-C90OY.roa (raw, json)
Hash identifier:          FaPWRVidTojhM8z9Dp/5f4Ru4RTG3RuxDK7oQeJK2nY=
Subject key identifier:   C2:CC:1B:89:68:45:37:9D:CE:72:B9:40:BA:B8:A2:E3:E0:BD:D0:E6
Certificate issuer:       /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Certificate serial:       019B77C7153DCA6C43688AD7239900F11000
Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/wswbiWhFN53OcrlAurii4-C90OY.roa
Signing time:             Thu 01 Jan 2026 04:18:14 +0000
ROA not before:           Thu 01 Jan 2026 04:18:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206932
IP address blocks:        194.242.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:15:3d:ca:6c:43:68:8a:d7:23:99:00:f1:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
        Validity
            Not Before: Jan  1 04:18:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2cc1b896845379dce72b940bab8a2e3e0bdd0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:c0:58:77:1e:fc:9d:a3:96:a5:48:b3:33:
                    73:5c:0e:40:79:15:f6:9a:7a:ef:a4:e9:a8:51:8c:
                    4f:bc:13:44:ae:8b:60:60:85:ca:84:ab:18:46:7d:
                    45:f8:2d:e8:f1:d4:43:a0:7a:3c:12:84:4e:22:4a:
                    10:20:6e:98:85:cc:1e:eb:f2:1c:23:df:00:f1:d4:
                    00:bb:9c:00:6a:96:36:80:0e:64:c1:af:ed:a0:11:
                    b1:2b:89:a2:fa:fb:a9:bd:6e:b8:57:79:eb:23:3c:
                    86:95:c9:29:80:cb:ab:08:97:06:f0:e3:54:a7:a4:
                    6c:49:1a:07:34:1c:d8:21:be:c8:27:08:ca:da:01:
                    29:9c:84:cb:ca:21:30:5a:ee:b4:ac:88:47:35:72:
                    28:07:c7:3b:b6:59:51:9c:b4:b0:51:7c:35:de:a3:
                    ae:bd:24:88:d3:41:a8:dd:c1:42:4c:c7:7b:d9:3e:
                    6b:d3:8f:9c:b4:a2:f0:99:8e:e6:2f:45:a2:37:92:
                    3e:22:ad:89:8e:9e:2b:7e:7c:6d:03:1e:62:4d:b6:
                    9c:b1:a0:21:28:0d:4c:b6:ca:d4:6f:1a:e3:fd:2c:
                    77:14:3c:49:11:44:df:bc:94:22:75:46:d2:b6:a1:
                    e3:bb:0e:cd:a7:cb:c8:ce:23:d0:14:22:f2:5d:05:
                    2c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CC:1B:89:68:45:37:9D:CE:72:B9:40:BA:B8:A2:E3:E0:BD:D0:E6
            X509v3 Authority Key Identifier:
                keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/wswbiWhFN53OcrlAurii4-C90OY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.242.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:79:a9:32:d7:64:1b:52:9f:67:1e:63:1a:be:36:d1:65:ae:
         f4:23:9c:08:6c:8b:6e:d6:d1:ec:ee:23:e1:be:57:e7:63:1e:
         18:e9:7f:cb:e0:02:bf:c9:41:65:cd:71:4a:ca:7e:64:4c:32:
         cd:ed:1f:68:30:12:de:06:11:30:ca:ab:9f:89:5f:64:95:d2:
         a9:63:2b:46:10:fb:28:11:69:98:d4:f9:b5:24:c3:f6:fa:74:
         44:76:8a:82:8f:80:a0:e1:4a:a9:5b:bb:34:ef:e4:72:37:8f:
         91:85:a2:e6:b5:62:b2:11:9e:e4:b4:a8:67:80:25:ac:fe:7d:
         18:d0:a2:7c:11:96:0d:f2:da:74:94:84:6b:0f:e5:83:62:4e:
         ea:4b:f1:6a:ee:8f:f3:85:04:68:fe:b2:17:75:6e:e9:a6:e4:
         28:1d:13:73:ab:09:1d:27:4e:0e:4e:60:b9:bd:e4:4b:42:b7:
         86:da:5d:fe:5b:7e:96:51:4e:f5:55:a0:ce:9b:f3:c8:97:8e:
         75:c5:8c:24:9f:75:b5:72:6d:c7:b8:b5:08:d2:20:d2:f7:04:
         6c:33:1c:1e:c0:2c:9d:3c:1b:42:88:59:6a:b2:ac:ed:4e:c4:
         5f:78:09:41:86:07:b6:a8:7f:f0:32:d0:62:d6:3a:72:9e:d9:
         47:be:0f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:28 2026 by rpki-client