This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/wAmyACSqLjnSmQEp7cXSGyFoWDM.roa
File:                     wAmyACSqLjnSmQEp7cXSGyFoWDM.roa (raw, json)
Hash identifier:          97xw7yMr/LKOcqtIasEtRCu3d3Z0Fm14QWb7ZfjVI+s=
Subject key identifier:   C0:09:B2:00:24:AA:2E:39:D2:99:01:29:ED:C5:D2:1B:21:68:58:33
Certificate issuer:       /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial:       019B7F82EE5C6A08C96A76EED18EE7E1ACE7
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/wAmyACSqLjnSmQEp7cXSGyFoWDM.roa
Signing time:             Fri 02 Jan 2026 16:20:45 +0000
ROA not before:           Fri 02 Jan 2026 16:20:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207969
IP address blocks:        193.236.96.0/24 maxlen: 24
                          2001:694::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:82:ee:5c:6a:08:c9:6a:76:ee:d1:8e:e7:e1:ac:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
        Validity
            Not Before: Jan  2 16:20:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c009b20024aa2e39d2990129edc5d21b21685833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:61:68:88:91:f1:77:55:a7:71:6a:61:0d:
                    77:ef:4b:77:c5:44:44:4e:b4:a3:56:3a:3d:5a:e0:
                    5e:12:da:1d:a2:dd:67:cf:6d:86:d4:8f:ca:d2:5e:
                    75:65:bf:33:41:c0:d0:5e:44:29:eb:92:aa:19:f0:
                    a6:2e:7d:ff:7a:81:76:35:1c:6c:4d:5c:96:44:2f:
                    17:bd:a6:e4:40:ca:f6:45:2a:b5:b1:70:03:10:28:
                    3d:64:1d:58:3e:9a:ec:26:19:55:82:fd:04:6f:bf:
                    30:1c:13:90:60:24:ef:0e:70:a7:cb:b5:87:9c:86:
                    2a:50:7c:f6:2a:32:ec:95:07:32:82:41:1e:64:19:
                    e1:32:30:da:01:a1:51:db:48:25:0b:12:7b:39:6a:
                    a5:39:32:84:1f:2b:e8:73:83:5a:88:0f:7a:10:a7:
                    67:b4:89:a0:d3:2a:d7:7b:cd:f6:2b:ee:17:9a:9c:
                    46:73:ea:93:d3:5c:10:f2:56:5c:1d:e1:23:b0:a9:
                    ce:e2:a0:ed:d2:b6:29:c9:1f:c1:be:f4:41:20:7d:
                    4b:36:cd:1b:22:93:38:8e:0e:c6:81:91:53:e4:f1:
                    be:ec:75:17:13:ec:33:27:90:7f:68:2d:1f:f6:9a:
                    a1:bd:3a:9c:a7:7a:2e:43:2a:49:32:29:97:66:54:
                    0c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:09:B2:00:24:AA:2E:39:D2:99:01:29:ED:C5:D2:1B:21:68:58:33
            X509v3 Authority Key Identifier:
                keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/wAmyACSqLjnSmQEp7cXSGyFoWDM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.236.96.0/24
                IPv6:
                  2001:694::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:1a:f9:e9:d5:0b:4f:38:21:90:ab:5a:ee:c8:2d:70:3c:49:
         05:3e:ad:9d:2b:82:d2:73:99:09:9f:68:56:5d:68:40:15:8f:
         e2:cc:d5:3d:1e:d0:fd:24:0a:bf:99:86:44:b8:0f:a3:14:ce:
         e8:c2:ca:85:91:28:7a:9a:74:3c:c7:8a:53:c9:5d:45:02:d7:
         9c:57:e2:de:0d:3e:cf:0e:0e:09:ff:c3:bc:66:ca:0f:b6:9d:
         6c:b8:55:93:de:db:c6:0e:10:e4:86:ae:9b:64:bc:c6:64:13:
         a8:6a:2d:6b:3c:bd:6f:81:30:9a:4d:b5:c9:23:95:97:8e:9d:
         aa:26:16:49:2d:c4:7f:bd:73:17:f2:4c:a3:1e:ca:11:e1:8f:
         3d:18:59:84:1d:1b:c6:11:bd:ad:a5:e8:26:0d:19:5f:0b:87:
         6f:1c:b9:1b:ff:91:d5:61:4f:5a:73:5b:4b:7d:3a:36:b5:0a:
         26:84:76:38:88:ed:eb:02:c5:8f:d1:b9:ea:76:cb:7e:e5:ca:
         84:8e:1c:44:7d:c7:0b:9f:ed:19:94:3a:a0:fa:c0:b1:13:02:
         2c:5e:2a:6f:68:7d:b8:a1:83:05:65:58:fe:c5:a4:a3:6c:3c:
         81:86:08:a1:c1:04:a5:f2:1c:0b:42:7f:23:04:58:f6:ee:b7:
         a3:8d:9b:17
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZt/gu5cagjJanbu0Y7n4aznMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNGVlMTkzYjMwMTY2NWI1NmY2NzgwZjIyNWZkNDRkMTQ0
MDkzYWYwHhcNMjYwMTAyMTYyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDA5YjIwMDI0YWEyZTM5ZDI5OTAxMjllZGM1ZDIxYjIxNjg1ODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOphaIiR8XdVp3FqYQ1370t3xURE
TrSjVjo9WuBeEtodot1nz22G1I/K0l51Zb8zQcDQXkQp65KqGfCmLn3/eoF2NRxs
TVyWRC8XvabkQMr2RSq1sXADECg9ZB1YPprsJhlVgv0Eb78wHBOQYCTvDnCny7WH
nIYqUHz2KjLslQcygkEeZBnhMjDaAaFR20glCxJ7OWqlOTKEHyvoc4NaiA96EKdn
tImg0yrXe832K+4XmpxGc+qT01wQ8lZcHeEjsKnO4qDt0rYpyR/BvvRBIH1LNs0b
IpM4jg7GgZFT5PG+7HUXE+wzJ5B/aC0f9pqhvTqcp3ouQypJMimXZlQMhwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMAJsgAkqi450pkBKe3F0hshaFgzMB8GA1UdIwQY
MBaAFA1O4ZOzAWZbVvZ4DyJf1E0UQJOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYt
OWY3ZTBmODYyZjFlLzEvd0FteUFDU3FMam5TbVFFcDdjWFNHeUZvV0RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYtOWY3ZTBmODYyZjFl
LzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwexgMA8E
AgACMAkDBwAgAQaUAAAwDQYJKoZIhvcNAQELBQADggEBADsa+enVC084IZCrWu7I
LXA8SQU+rZ0rgtJzmQmfaFZdaEAVj+LM1T0e0P0kCr+ZhkS4D6MUzujCyoWRKHqa
dDzHilPJXUUC15xX4t4NPs8ODgn/w7xmyg+2nWy4VZPe28YOEOSGrptkvMZkE6hq
LWs8vW+BMJpNtckjlZeOnaomFkktxH+9cxfyTKMeyhHhjz0YWYQdG8YRva2l6CYN
GV8Lh28cuRv/kdVhT1pzW0t9Oja1CiaEdjiI7esCxY/Ruep2y37lyoSOHER9xwuf
7RmUOqD6wLETAixeKm9ofbihgwVlWP7FpKNsPIGGCKHBBKXyHAtCfyMEWPbut6ON
mxc=
-----END CERTIFICATE-----
Generated at Tue Jan 27 01:52:29 2026 by rpki-client