This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/wwgOSiyDJCbc4Dd25-hiHFFVydI.roa
File:                     wwgOSiyDJCbc4Dd25-hiHFFVydI.roa (raw, json)
Hash identifier:          5sAIyPhih2yo/oCUdeqXVJ32SO2GS5hm7rjgamDiLJ4=
Subject key identifier:   C3:08:0E:4A:2C:83:24:26:DC:E0:37:76:E7:E8:62:1C:51:55:C9:D2
Certificate issuer:       /CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Certificate serial:       019B7C1267FA2372AA61F3D341226EDF96A8
Authority key identifier: F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/wwgOSiyDJCbc4Dd25-hiHFFVydI.roa
Signing time:             Fri 02 Jan 2026 00:18:59 +0000
ROA not before:           Fri 02 Jan 2026 00:18:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25352
IP address blocks:        91.212.48.0/24 maxlen: 24
                          195.190.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:67:fa:23:72:aa:61:f3:d3:41:22:6e:df:96:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
        Validity
            Not Before: Jan  2 00:18:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c3080e4a2c832426dce03776e7e8621c5155c9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:44:cd:6a:07:50:22:ab:15:50:43:51:6e:
                    6e:1d:4f:bf:73:91:2a:73:cd:d8:ef:40:a0:3b:f5:
                    56:a2:95:24:85:8b:5d:55:96:e8:67:58:80:df:e2:
                    3a:a4:f4:e1:47:23:cd:9e:8f:e9:1b:7b:5a:3c:28:
                    b1:1d:0a:e4:93:09:3e:fe:e6:2a:2c:be:93:59:18:
                    1a:fb:15:c6:d9:80:f0:c3:ef:2c:fe:a5:98:d7:cd:
                    9f:51:92:6d:01:c5:17:57:5a:23:dd:05:cd:21:d7:
                    84:97:38:3b:82:17:06:3e:b8:da:7d:89:99:d6:fa:
                    5a:e2:d7:b5:7b:31:c8:d0:a9:67:20:71:cd:d5:ae:
                    61:77:30:0b:84:a3:d7:ae:59:69:21:3d:34:eb:c6:
                    c4:dd:4b:6b:80:2c:7d:72:5e:db:90:fb:00:27:ba:
                    6f:28:ec:e9:6a:04:f2:c1:eb:a6:e9:fc:11:ed:58:
                    4e:c5:89:08:cb:68:bb:0c:a7:8b:25:2f:9e:ff:02:
                    5e:03:50:ff:b6:4a:80:7d:fb:11:b2:9e:83:1c:21:
                    be:8d:ee:c8:64:51:60:7e:ab:4c:71:36:a3:9b:f3:
                    21:16:2f:ab:79:f5:97:56:98:e3:50:c8:90:50:35:
                    4d:ed:d5:b2:e7:f7:50:f4:a9:50:68:d7:39:63:81:
                    f1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:08:0E:4A:2C:83:24:26:DC:E0:37:76:E7:E8:62:1C:51:55:C9:D2
            X509v3 Authority Key Identifier:
                keyid:F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/wwgOSiyDJCbc4Dd25-hiHFFVydI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.48.0/24
                  195.190.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:88:ae:7c:9b:b6:72:54:62:01:24:8b:c1:c3:30:97:1e:ea:
         bd:e1:6f:8a:33:1f:91:b9:35:da:52:3a:5e:26:6b:df:06:a8:
         a0:e0:df:99:f0:41:06:d1:80:b6:33:8f:4e:04:1f:eb:b2:2f:
         1a:2a:44:47:72:11:e9:f0:a1:79:da:bc:2f:f8:34:fa:5b:63:
         f8:b4:ff:f9:06:8a:c0:7a:53:92:91:f1:91:e6:8c:e4:f2:cf:
         dd:c7:ee:fa:0f:d0:f5:97:ec:be:b8:5b:64:eb:03:15:4d:1d:
         a0:bb:e0:58:7d:6b:32:bf:8e:9a:f1:6e:94:c8:0f:9d:93:38:
         1b:d8:65:5b:8a:27:2b:da:8a:fa:97:52:0d:5c:f6:a6:14:85:
         c0:26:f0:6a:6d:be:5f:11:65:0e:56:0c:25:eb:77:2c:e1:be:
         18:c8:5d:73:0d:bb:f6:2f:c6:0f:d2:6b:4b:e7:a8:bb:a0:77:
         7f:5b:2a:7b:58:bd:52:67:d6:46:5d:e6:e9:70:7d:28:e3:36:
         72:3f:b8:03:2a:16:60:6f:68:2e:f6:04:0c:ff:81:9b:f2:90:
         46:14:e5:f5:9b:16:6c:e1:80:d8:51:e6:98:b4:e7:77:6c:9c:
         23:67:78:c6:33:38:66:c7:46:a3:26:5d:e1:12:da:a5:00:04:
         62:ef:bb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:21 2026 by rpki-client