This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/wXIpuWNeJpplraRivZmQRjPoSsY.roa
File:                     wXIpuWNeJpplraRivZmQRjPoSsY.roa (raw, json)
Hash identifier:          LFZwGG9uojAXiF1PDv3sxki5/LPjehfpl7jo7RdhMzE=
Subject key identifier:   C1:72:29:B9:63:5E:26:9A:65:AD:A4:62:BD:99:90:46:33:E8:4A:C6
Certificate issuer:       /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial:       019B7F8504141564C520658067C96E61326B
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/wXIpuWNeJpplraRivZmQRjPoSsY.roa
Signing time:             Fri 02 Jan 2026 16:23:02 +0000
ROA not before:           Fri 02 Jan 2026 16:23:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39257
IP address blocks:        193.110.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:04:14:15:64:c5:20:65:80:67:c9:6e:61:32:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
        Validity
            Not Before: Jan  2 16:23:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c17229b9635e269a65ada462bd99904633e84ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:21:50:8c:ed:a6:27:e0:a4:00:a9:67:b4:
                    f5:92:c5:c4:2e:74:da:85:d1:7e:95:e1:fd:47:6b:
                    e6:b5:02:ae:c2:e4:f3:9a:fd:37:c2:fe:4b:62:79:
                    f7:9e:6e:e6:5f:f2:d0:7f:e6:fc:28:df:e7:d5:54:
                    6c:7e:f7:e7:c3:ef:62:41:32:25:f6:7e:79:0a:20:
                    22:47:87:8b:d6:f2:c2:0b:f4:6a:ae:1c:0d:0e:c4:
                    9c:12:d2:40:5d:12:01:c7:fc:60:84:71:c7:6c:12:
                    dc:74:b2:44:ba:00:e3:fc:8c:2a:41:6f:43:e6:95:
                    bd:f4:e6:08:f4:88:c6:a2:d1:f4:7c:ce:bc:bb:b5:
                    97:58:05:ef:c3:8e:1c:eb:2d:87:7a:07:1d:06:d2:
                    3e:b8:6a:b8:93:9c:30:83:ac:ef:7f:f4:5f:7b:51:
                    35:13:30:f2:b0:24:d8:e1:c2:62:3c:05:2c:ec:8e:
                    ca:7a:59:c5:ba:b1:c1:82:40:7f:d8:45:0f:56:6e:
                    0d:25:dc:58:06:29:63:af:35:8a:19:00:c8:ea:25:
                    cb:3d:fe:a6:12:bb:6e:95:01:a9:63:7f:c3:89:58:
                    15:9b:5f:72:03:9a:b0:75:4e:f2:1d:3b:cc:67:dd:
                    03:df:da:02:3f:10:21:f6:dd:4b:38:bc:4e:04:28:
                    ed:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:72:29:B9:63:5E:26:9A:65:AD:A4:62:BD:99:90:46:33:E8:4A:C6
            X509v3 Authority Key Identifier:
                keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/wXIpuWNeJpplraRivZmQRjPoSsY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:ba:11:2c:ec:9d:15:e5:03:b0:5f:ea:67:b0:0e:0c:02:29:
         ba:13:b9:17:73:de:5e:76:ea:26:5d:01:51:e4:f8:a1:ae:fc:
         19:ba:08:5f:f4:2c:32:ae:93:ef:de:f1:09:41:03:96:a5:13:
         6f:b5:d4:88:30:9d:25:ba:0e:69:65:61:54:e2:cd:a8:05:d0:
         2a:89:01:d5:13:ed:d7:3f:83:59:75:2b:d5:e9:99:ba:5d:83:
         a7:c4:0d:45:0f:82:14:8f:29:35:b9:e2:bd:3f:2c:14:fc:8d:
         2a:f3:64:be:c6:9a:58:a4:18:13:0f:27:71:2e:d3:25:6b:c9:
         41:7f:7f:6d:31:13:f7:7b:66:67:90:53:bc:94:e8:7b:3f:4c:
         b7:f4:6e:a0:4a:76:1a:29:14:d4:40:70:11:72:e9:34:2a:b4:
         21:79:53:22:ea:5d:02:e6:7c:09:40:57:00:4c:ec:28:f3:64:
         86:05:78:04:a7:12:66:0c:c4:ba:05:16:7e:24:21:10:dd:f0:
         c5:5a:a7:1b:3b:d6:a8:be:a8:90:e2:36:f4:4b:ee:df:9b:87:
         86:41:49:08:06:37:5a:62:07:ed:a1:5e:4f:ea:7d:d9:87:e3:
         13:b3:f1:7f:27:8d:6a:04:29:63:da:1c:37:2e:4e:13:4a:b0:
         2a:64:1d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:25:26 2026 by rpki-client