This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/wyOe-kBLzrVKspKdZubryPdenk8.roa
File:                     wyOe-kBLzrVKspKdZubryPdenk8.roa (raw, json)
Hash identifier:          t5x0Z3ogkqDWsaKAMSpmWX7JpOr9Rc3hWNswuA+qbps=
Subject key identifier:   C3:23:9E:FA:40:4B:CE:B5:4A:B2:92:9D:66:E6:EB:C8:F7:5E:9E:4F
Certificate issuer:       /CN=83020637e89655e299d91843769254af07714994
Certificate serial:       019B77C676A37AC888CD788330666A52694D
Authority key identifier: 83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/wyOe-kBLzrVKspKdZubryPdenk8.roa
Signing time:             Thu 01 Jan 2026 04:17:33 +0000
ROA not before:           Thu 01 Jan 2026 04:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48745
IP address blocks:        91.212.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:76:a3:7a:c8:88:cd:78:83:30:66:6a:52:69:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83020637e89655e299d91843769254af07714994
        Validity
            Not Before: Jan  1 04:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c3239efa404bceb54ab2929d66e6ebc8f75e9e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bc:4b:42:3c:66:61:fc:45:54:a3:13:bb:0d:
                    50:2b:7d:a3:d6:52:95:67:b1:e5:77:52:ba:27:c6:
                    5f:35:6b:57:a3:05:99:f1:5b:1d:7d:51:a0:ce:80:
                    68:ba:cf:83:30:38:e0:f4:3e:fe:90:f0:b1:38:94:
                    1d:37:7c:d0:89:30:dd:99:c0:e4:f4:6a:bb:66:55:
                    98:2a:36:d9:aa:43:ea:98:58:52:29:36:f8:03:b9:
                    17:06:2f:1c:f0:d0:ca:03:19:bf:4a:2f:47:99:58:
                    f9:0d:d3:65:2a:f3:c9:85:ce:d4:5d:85:1e:ff:da:
                    1a:e3:5e:64:5b:84:83:29:8c:5c:5b:ff:51:68:3e:
                    05:5f:10:85:20:72:52:7d:60:4d:f5:4c:8d:b4:19:
                    52:e6:36:8d:99:cb:36:91:65:53:32:b5:71:c5:02:
                    8b:06:5a:d8:d7:fd:62:13:78:9c:5f:4b:4a:54:d3:
                    6d:0f:32:94:85:9d:be:e0:2f:33:41:e5:e3:ed:1d:
                    75:7e:a0:59:d1:b7:f3:27:5f:55:c5:9b:09:39:a3:
                    13:43:9d:d3:41:9c:62:1e:8e:09:c0:fe:d8:99:6c:
                    60:06:86:3b:18:ec:bb:40:83:3d:46:6c:bf:8a:31:
                    95:67:21:36:cd:44:27:71:13:06:76:a9:76:6a:d0:
                    08:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:23:9E:FA:40:4B:CE:B5:4A:B2:92:9D:66:E6:EB:C8:F7:5E:9E:4F
            X509v3 Authority Key Identifier:
                keyid:83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/wyOe-kBLzrVKspKdZubryPdenk8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:fc:9d:6f:6a:8b:9d:40:0f:9e:f5:13:68:2f:e0:6f:ae:87:
         fe:f8:1c:f9:ec:83:15:e1:cd:51:39:06:dc:16:22:07:89:ce:
         3b:6d:ec:cb:4a:e2:92:e0:55:5f:9a:fa:93:eb:19:e2:5d:29:
         3a:c6:6a:3a:06:32:88:22:cb:d3:93:69:18:3d:ea:3d:84:80:
         fa:97:be:36:a6:c4:05:2e:bb:8f:9d:f8:eb:cd:68:2c:d6:d3:
         f6:26:e1:f4:cd:05:81:91:45:7c:30:d3:30:d7:0e:f5:ff:2a:
         34:17:24:05:b5:6c:5a:df:fb:66:f8:67:1a:e8:1e:33:14:f2:
         07:10:ee:b6:3c:27:54:0b:b3:03:a7:3c:9e:e2:e4:20:da:fe:
         a0:68:8c:02:c7:aa:2d:a8:c0:dd:3c:ed:19:02:65:b3:d1:59:
         f0:01:2f:43:d0:70:8c:04:bd:56:98:a5:a2:a7:88:95:7f:71:
         bb:d0:11:e4:66:d7:3b:62:49:98:44:d2:4e:93:e4:74:cc:8a:
         e1:f7:55:22:78:c2:f9:6b:8d:8e:66:93:c9:c9:2d:90:83:ca:
         08:e4:88:e5:90:cb:29:2e:6c:22:c3:40:4b:0e:97:26:2d:03:
         30:cd:b1:53:45:0f:20:e1:9c:a4:d1:2f:44:e5:78:c0:bb:85:
         94:2d:1e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:14:07 2026 by rpki-client