This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/862214-ae29-43dd-a59f-a4e4423f1172/1/W_DjI-nKZq9OgGUNObQuWWK-wQk.roa
File:                     W_DjI-nKZq9OgGUNObQuWWK-wQk.roa (raw, json)
Hash identifier:          kXFVL8QlxL4Cb8zN0Zv8DJvFM5qzHm5WWJnrE+ctjkI=
Subject key identifier:   5B:F0:E3:23:E9:CA:66:AF:4E:80:65:0D:39:B4:2E:59:62:BE:C1:09
Certificate issuer:       /CN=051c7341abb798f8f4e64a518558c88d1fe26fd7
Certificate serial:       019B7C126EDEE1E147BDDF62ADF3DB28103F
Authority key identifier: 05:1C:73:41:AB:B7:98:F8:F4:E6:4A:51:85:58:C8:8D:1F:E2:6F:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BRxzQau3mPj05kpRhVjIjR_ib9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/862214-ae29-43dd-a59f-a4e4423f1172/1/W_DjI-nKZq9OgGUNObQuWWK-wQk.roa
Signing time:             Fri 02 Jan 2026 00:19:01 +0000
ROA not before:           Fri 02 Jan 2026 00:19:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206354
IP address blocks:        109.175.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/862214-ae29-43dd-a59f-a4e4423f1172/1/BRxzQau3mPj05kpRhVjIjR_ib9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/862214-ae29-43dd-a59f-a4e4423f1172/1/BRxzQau3mPj05kpRhVjIjR_ib9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BRxzQau3mPj05kpRhVjIjR_ib9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:6e:de:e1:e1:47:bd:df:62:ad:f3:db:28:10:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=051c7341abb798f8f4e64a518558c88d1fe26fd7
        Validity
            Not Before: Jan  2 00:19:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5bf0e323e9ca66af4e80650d39b42e5962bec109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:13:61:d0:80:2d:eb:62:a4:8e:48:a0:49:
                    05:76:4b:a5:f8:95:7a:04:3c:92:b8:37:fa:55:bf:
                    f6:07:32:64:48:a6:b5:e6:a4:4f:c4:ca:c9:64:c4:
                    46:b9:f7:d8:bc:63:78:81:9f:ab:04:3f:76:a4:06:
                    8c:8a:33:5c:ea:7f:45:ca:9d:47:f4:d2:08:bc:59:
                    cc:66:21:02:0e:96:8c:29:be:a7:d5:2a:5b:f0:4a:
                    aa:1b:fa:08:ea:a2:4e:92:cc:e6:27:78:e7:94:8e:
                    22:35:76:02:86:91:b6:0e:75:29:e0:a4:c1:e7:03:
                    c1:40:e7:6c:03:a5:e4:57:b0:26:69:95:2a:5c:af:
                    78:be:50:1c:a9:8d:b9:4d:4c:01:7d:c3:11:e1:45:
                    b1:f2:30:1b:cc:33:93:b4:8d:20:f2:01:0b:4a:0a:
                    8c:f2:ea:94:57:23:40:1c:f0:95:0d:d2:73:e7:e8:
                    f4:c4:fc:09:dc:25:c3:c1:31:d3:b4:51:1d:a7:f7:
                    f2:89:7b:15:77:05:f1:32:62:9d:84:32:b7:f6:da:
                    ea:f4:12:86:ae:a7:e7:fc:1b:23:60:65:a9:8e:1b:
                    ec:9d:31:46:25:a5:ba:dc:a6:45:ca:ba:01:eb:49:
                    53:9c:bc:6c:b1:17:37:a4:43:a9:08:01:d3:72:11:
                    1d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F0:E3:23:E9:CA:66:AF:4E:80:65:0D:39:B4:2E:59:62:BE:C1:09
            X509v3 Authority Key Identifier:
                keyid:05:1C:73:41:AB:B7:98:F8:F4:E6:4A:51:85:58:C8:8D:1F:E2:6F:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRxzQau3mPj05kpRhVjIjR_ib9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/862214-ae29-43dd-a59f-a4e4423f1172/1/W_DjI-nKZq9OgGUNObQuWWK-wQk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/862214-ae29-43dd-a59f-a4e4423f1172/1/BRxzQau3mPj05kpRhVjIjR_ib9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.175.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:93:70:9d:f0:14:ad:d0:64:43:c8:52:5e:89:98:8a:ee:8c:
         5d:76:4f:ad:e3:43:32:9d:1d:b6:d1:68:28:d4:1f:16:81:71:
         ae:a1:30:82:d0:8c:6b:13:bd:62:25:9e:59:cb:89:7c:8d:00:
         50:c7:72:27:34:0e:43:05:b6:47:b9:2d:1f:08:c5:f1:4f:2d:
         19:f9:76:6b:a4:10:20:76:7f:a0:56:02:21:b9:1c:1b:6d:8e:
         97:09:d4:f1:6f:5f:d1:b3:44:27:9e:89:b9:da:ba:0d:34:2f:
         80:ef:dd:fb:4e:44:ce:fb:6c:3e:79:99:d8:c8:da:05:3e:57:
         89:74:75:09:02:54:94:57:c3:0b:32:ea:86:ff:b6:6f:78:b6:
         45:4a:8e:3b:07:ef:d0:eb:62:f7:c2:94:64:83:56:b2:e6:89:
         67:81:5f:23:eb:43:9d:64:5c:00:e0:dd:bb:eb:b4:9d:42:5b:
         92:8a:b6:1e:96:27:3b:a0:ce:81:c1:f2:5d:4b:d7:78:cd:bd:
         a6:4b:3c:35:86:52:67:0b:76:72:b2:e9:ce:f9:96:60:48:43:
         64:6b:57:42:42:6b:b2:3e:da:eb:1d:49:49:62:51:6c:4d:bd:
         75:30:8d:7d:98:c8:e2:ff:a2:c4:35:3d:76:ec:1a:6f:4b:3b:
         13:70:22:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:14:43 2026 by rpki-client