This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/w883UTvE9aAPM26F3jGQ91P2JH0.roa
File:                     w883UTvE9aAPM26F3jGQ91P2JH0.roa (raw, json)
Hash identifier:          Zo+XYBLtWLmmmelaOVtJ2aF9Vo4DulRMeStZXPCZZiY=
Subject key identifier:   C3:CF:37:51:3B:C4:F5:A0:0F:33:6E:85:DE:31:90:F7:53:F6:24:7D
Certificate issuer:       /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial:       019B7C1221EF43A4B80B90A762BC06003728
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/w883UTvE9aAPM26F3jGQ91P2JH0.roa
Signing time:             Fri 02 Jan 2026 00:18:41 +0000
ROA not before:           Fri 02 Jan 2026 00:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60015
IP address blocks:        193.57.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:21:ef:43:a4:b8:0b:90:a7:62:bc:06:00:37:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b613794927050b22525ab70091835408eee4c79
        Validity
            Not Before: Jan  2 00:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c3cf37513bc4f5a00f336e85de3190f753f6247d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:25:b0:3e:8c:dd:0f:ec:68:f3:b1:03:76:
                    fe:99:a6:4d:cb:2a:b5:a9:13:a7:da:d4:ba:f2:d9:
                    3f:a7:d8:27:7f:09:f0:c8:57:15:ab:f1:f3:a6:ee:
                    36:c0:e8:c6:f5:a2:57:a0:b9:af:67:c1:2e:94:c5:
                    b9:6f:8c:75:22:b0:aa:7e:07:1c:4b:3b:14:15:4f:
                    d4:fc:91:c1:48:ad:b9:09:8b:42:c9:71:3d:6d:fe:
                    fa:e5:ec:24:68:6c:bf:a7:06:86:67:09:19:7b:88:
                    e0:5f:ab:f2:d7:12:37:fc:f9:53:d3:46:02:a8:f6:
                    3c:00:2c:bc:95:d6:fa:d6:ce:0c:ab:ec:e7:0f:2d:
                    7f:9a:4a:05:39:86:9e:08:f6:bc:b8:60:96:d3:65:
                    3e:93:a9:af:f0:07:44:c1:00:15:21:71:0e:2e:90:
                    b9:04:a9:0b:24:9c:3f:52:10:2a:2d:a6:be:bd:96:
                    5b:67:c3:23:13:bc:21:bb:e7:56:f9:e5:3a:2c:5a:
                    16:c1:bf:bb:68:e9:c8:ca:a2:07:58:ca:68:bc:0c:
                    87:b4:ff:7f:16:47:6a:34:57:94:52:18:18:bc:42:
                    4d:63:72:c2:ee:36:cc:cb:68:ad:a4:84:6c:99:6d:
                    b1:e7:05:77:b0:d8:ce:f9:4c:4b:13:f4:ff:28:9b:
                    a2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CF:37:51:3B:C4:F5:A0:0F:33:6E:85:DE:31:90:F7:53:F6:24:7D
            X509v3 Authority Key Identifier:
                keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/w883UTvE9aAPM26F3jGQ91P2JH0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.57.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:d6:99:b3:f6:27:79:0b:9c:3f:89:53:1d:2a:ca:7e:06:c6:
         8d:56:08:25:81:f6:dd:17:36:a8:99:9d:01:de:e3:b3:14:40:
         3b:14:cc:ac:dd:0a:77:ab:44:bf:ae:f3:3d:24:39:ee:0b:8a:
         90:66:2e:8b:f3:16:f8:5f:e7:ed:3e:bc:b3:48:52:2d:bf:0e:
         66:56:4d:ce:e1:5e:06:65:24:62:30:f7:54:4b:a8:2a:c4:e2:
         8e:8a:ab:87:6e:f2:d4:40:93:6c:68:43:20:65:e2:48:e8:fc:
         20:7b:37:0d:39:af:33:a5:f1:96:b3:a8:8e:84:fe:86:26:cd:
         4d:dc:4b:5c:a5:9b:0b:0c:5e:da:bd:72:b9:dc:f4:d1:11:fc:
         47:28:6a:fb:38:75:fd:15:b3:1d:5a:38:1e:90:01:d4:83:f1:
         27:1c:4a:16:2f:fa:be:ed:0e:2a:61:90:9f:e6:0c:6c:b7:11:
         fd:92:74:6b:30:43:17:4e:58:13:b5:eb:cd:bf:a0:c6:7a:bd:
         0b:35:1d:5b:0a:a4:ba:19:92:92:85:a3:54:7d:d6:a4:17:63:
         75:78:30:d5:1a:c0:1b:42:11:ab:23:cc:99:49:15:d3:9e:e1:
         53:82:a9:53:fb:f9:0b:12:5b:87:a7:bb:1e:62:04:cd:ca:ce:
         74:0e:c4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:23:22 2026 by rpki-client