This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/w9cLMtPbCYYrwoKERp06IPmC2bE.roa
File:                     w9cLMtPbCYYrwoKERp06IPmC2bE.roa (raw, json)
Hash identifier:          ey9n1gs4fwmE4LkooDwQ9cZLvMTfaqnyxO7TGDUAj68=
Subject key identifier:   C3:D7:0B:32:D3:DB:09:86:2B:C2:82:84:46:9D:3A:20:F9:82:D9:B1
Certificate issuer:       /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial:       019B78A346BC1522BB28350F097837B4988C
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/w9cLMtPbCYYrwoKERp06IPmC2bE.roa
Signing time:             Thu 01 Jan 2026 08:18:44 +0000
ROA not before:           Thu 01 Jan 2026 08:18:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60721
IP address blocks:        185.193.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 02:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:46:bc:15:22:bb:28:35:0f:09:78:37:b4:98:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
        Validity
            Not Before: Jan  1 08:18:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c3d70b32d3db09862bc28284469d3a20f982d9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e2:9c:3f:57:d7:27:17:2a:17:12:54:af:94:
                    62:c5:c8:ae:2f:81:70:3c:a4:b5:fd:7a:f8:68:ab:
                    e3:9f:38:63:dc:9e:86:21:39:a9:4f:a5:c7:d3:a3:
                    cc:a4:c4:2b:93:26:22:c7:94:3f:57:16:ef:ae:1a:
                    b6:94:0e:d6:3e:4c:2a:ed:18:f5:7e:a1:a9:cb:63:
                    c9:31:4d:c2:aa:6b:fd:78:8b:1a:20:d4:be:69:82:
                    50:6a:51:73:e7:3d:c4:29:79:2b:8a:8b:47:09:aa:
                    38:c8:3d:81:9b:45:2e:1f:92:ce:60:80:e9:b3:7c:
                    8c:17:b3:48:47:13:15:26:89:6a:c4:76:fe:c9:85:
                    0c:77:5d:58:8e:e3:c3:97:08:c0:4a:b5:58:97:29:
                    71:e8:d4:67:96:b4:ed:ac:9b:0c:d5:ef:da:a5:95:
                    4f:42:c0:dd:40:71:0b:9e:d7:85:47:ba:c3:16:43:
                    d7:92:7d:71:e1:14:37:f3:13:00:7c:2c:7b:f8:96:
                    f4:67:39:56:5f:e4:08:44:42:46:3e:10:cc:03:1b:
                    9c:f1:b8:0f:a0:50:6e:6f:aa:5b:62:24:ee:1d:ae:
                    13:31:0f:fb:fb:c8:06:e3:43:e8:3e:20:b1:04:94:
                    2c:83:f4:76:c0:4f:e3:73:31:5a:6e:25:8c:d3:6a:
                    6d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D7:0B:32:D3:DB:09:86:2B:C2:82:84:46:9D:3A:20:F9:82:D9:B1
            X509v3 Authority Key Identifier:
                keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/w9cLMtPbCYYrwoKERp06IPmC2bE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:e3:0a:37:f0:fd:ea:a1:21:e2:2a:51:3f:32:21:e9:db:8c:
         6d:bd:d8:53:d2:de:af:8a:0a:30:63:6c:85:a9:8e:b8:25:31:
         d4:84:8b:d8:ee:31:6a:3b:dd:2d:90:fe:34:25:5a:6e:d1:a5:
         f3:26:22:0f:58:f7:5c:0f:73:0b:e6:ca:59:45:6c:d5:d5:d9:
         6b:fb:69:84:65:80:ea:35:b4:d6:79:d9:49:74:cd:44:79:00:
         04:3f:1e:83:49:01:46:06:90:dc:3a:32:c8:51:83:1c:ca:b0:
         be:41:17:eb:ed:ef:c9:e3:25:3d:32:ff:95:9e:de:52:62:ba:
         99:ea:a9:91:ee:59:42:b0:61:ac:8d:6d:e2:6f:58:93:4f:c4:
         da:b4:ba:7f:26:48:5b:d3:7c:e1:97:cc:72:ef:2f:be:9f:68:
         99:66:71:a4:7a:bd:4e:89:79:98:9a:fe:4a:c2:43:d1:0d:36:
         42:eb:51:29:28:62:07:89:f7:07:98:59:41:98:96:25:b6:b1:
         2f:a1:01:a0:a8:7d:e3:94:5a:19:76:37:9b:98:78:bd:8f:5a:
         56:02:87:e8:29:f0:60:6a:05:db:47:35:71:e4:d8:12:41:2f:
         2f:f5:9c:2a:12:b0:dc:55:49:9c:66:93:fd:e0:e2:30:5d:e7:
         84:b9:ae:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:04:39 2026 by rpki-client