This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wzdrUoatb97pO_FLJO9rUJTh9Oo.roa
File:                     wzdrUoatb97pO_FLJO9rUJTh9Oo.roa (raw, json)
Hash identifier:          ulHhV7O46eYaB7HmAMEuEUno6SEtsrLTfFRF+t2vmlk=
Subject key identifier:   C3:37:6B:52:86:AD:6F:DE:E9:3B:F1:4B:24:EF:6B:50:94:E1:F4:EA
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019C2A49A1976EE2388CF17556F6B349B65E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wzdrUoatb97pO_FLJO9rUJTh9Oo.roa
Signing time:             Wed 04 Feb 2026 20:13:14 +0000
ROA not before:           Wed 04 Feb 2026 20:13:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205414
IP address blocks:        2a0e:97c0:b00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 18:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2a:49:a1:97:6e:e2:38:8c:f1:75:56:f6:b3:49:b6:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb  4 20:13:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c3376b5286ad6fdee93bf14b24ef6b5094e1f4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9d:30:84:85:e2:c4:2b:71:19:55:da:ed:0e:
                    b1:2a:31:9e:4e:7c:f5:c9:3d:17:74:00:3b:95:4a:
                    70:01:7e:48:af:f9:26:af:84:f3:de:5f:0b:21:35:
                    af:21:8d:6b:5f:f4:1c:c9:e3:29:63:0c:33:ca:8c:
                    1e:bb:55:67:6d:9e:31:cb:40:86:54:9f:c2:37:1c:
                    66:62:17:8f:93:92:bb:68:fc:55:6c:93:ca:e5:0e:
                    d4:a3:71:e9:36:35:f3:1f:28:42:8f:94:ae:46:5d:
                    10:a2:b4:82:a9:8a:46:da:ca:88:ef:88:4e:7a:9a:
                    4f:06:15:dc:cf:47:b5:10:4a:ae:da:45:f9:2e:3b:
                    1b:77:0f:4c:2d:80:1d:3f:b9:cb:66:b7:0f:7f:26:
                    f2:15:bd:d6:c9:8c:a6:6b:c5:65:f2:2a:80:2c:f3:
                    17:d7:0d:14:6b:e6:e2:b8:7f:a6:25:cf:e9:c3:96:
                    c7:00:b9:de:24:ce:93:35:e2:8a:87:e6:01:00:ef:
                    fb:57:fa:9a:b6:a8:d7:62:a8:3a:06:49:be:30:9a:
                    64:f5:47:a1:03:ff:60:e1:ca:77:d6:59:43:ff:31:
                    f1:c8:bd:b1:2f:5f:e6:61:f5:92:bf:2e:de:c0:33:
                    04:a1:3b:0d:2f:72:60:f6:be:70:6f:95:46:08:12:
                    d0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:37:6B:52:86:AD:6F:DE:E9:3B:F1:4B:24:EF:6B:50:94:E1:F4:EA
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wzdrUoatb97pO_FLJO9rUJTh9Oo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:b00::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:4f:39:65:1e:2d:f4:86:03:22:1a:f3:fe:32:0e:5a:e8:f4:
         0e:e6:94:b3:e3:61:2d:90:00:d3:00:a6:12:bb:5c:00:c7:9b:
         7d:b1:a9:4d:3b:9e:65:79:8d:1a:9e:8e:e5:40:e7:63:83:50:
         06:4e:f7:da:36:21:a5:d1:71:f9:87:17:0b:fd:d3:e5:2c:42:
         3e:3b:95:46:44:0f:8e:29:8d:c7:f2:5f:0c:a9:49:1c:a2:c4:
         a7:76:c0:18:fd:aa:07:49:6f:7b:41:da:9b:62:6e:7d:ca:42:
         a7:8c:d5:fa:6e:b9:d5:c3:7a:60:4a:56:d7:c6:48:26:bc:dc:
         2b:63:ba:d3:b1:b4:b9:3d:26:f8:a8:7a:ce:3e:ad:d7:18:67:
         f5:a0:7f:bd:74:f1:ae:b1:d4:f2:74:57:b9:17:77:2e:a5:2b:
         77:0a:9c:7a:48:01:06:8e:e8:95:c3:ac:5f:08:ed:bd:85:e6:
         df:ef:3a:00:91:04:05:c9:0a:f0:f0:88:b4:7f:b9:a2:e6:6a:
         83:41:8f:89:cd:18:d9:bf:f4:87:31:ca:af:e6:81:eb:d4:78:
         45:97:92:5a:ec:5c:ed:59:d7:9d:d3:4e:b1:04:f3:2c:85:e2:
         fe:34:5d:af:2c:fe:eb:6c:a3:c5:9e:cc:6c:df:cb:bf:30:69:
         52:2f:58:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 01:07:31 2026 by rpki-client