This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/WrV4ZemJwrw_kjB05-5Id3wYxlE.roa
File:                     WrV4ZemJwrw_kjB05-5Id3wYxlE.roa (raw, json)
Hash identifier:          eepRF61Uwq1JqMLzpuul90ksZb6fVRDXJtYxt1swjFQ=
Subject key identifier:   5A:B5:78:65:E9:89:C2:BC:3F:92:30:74:E7:EE:48:77:7C:18:C6:51
Certificate issuer:       /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Certificate serial:       019B79EC0F0A74F35620BAAD0520B7AE9628
Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/WrV4ZemJwrw_kjB05-5Id3wYxlE.roa
Signing time:             Thu 01 Jan 2026 14:17:52 +0000
ROA not before:           Thu 01 Jan 2026 14:17:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48716
IP address blocks:        185.253.8.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:0f:0a:74:f3:56:20:ba:ad:05:20:b7:ae:96:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
        Validity
            Not Before: Jan  1 14:17:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5ab57865e989c2bc3f923074e7ee48777c18c651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:63:10:8b:d8:a7:a8:3c:b6:ea:fc:79:1a:
                    cc:37:84:ee:28:f6:c0:4c:35:b3:c2:fd:93:e3:a0:
                    d0:fd:05:7f:d9:39:30:c1:99:12:de:46:d8:36:f3:
                    bd:53:0f:b3:b4:29:ac:da:20:e1:db:1a:02:a4:bc:
                    6e:82:97:c0:93:1c:75:e5:55:2d:45:53:3b:18:59:
                    c4:bb:6c:e7:8f:6e:b0:e2:0d:c8:e9:87:e7:1a:22:
                    c5:f0:01:85:06:ca:84:5e:e5:45:86:e8:eb:f4:0a:
                    f1:f3:71:08:54:30:b2:71:4c:1e:22:a3:c4:22:7f:
                    e8:7b:9d:3a:69:c0:cc:34:4f:9a:dd:6d:be:2b:99:
                    14:4b:8f:32:c4:50:cc:0b:ae:f1:e6:34:03:71:80:
                    60:ef:4f:42:9e:2a:96:c5:1f:bb:08:fa:03:fb:70:
                    d0:72:e2:c1:ac:54:c2:6b:a6:8a:5e:5a:64:9d:0b:
                    d2:ae:1b:38:61:5e:19:9d:07:0b:9e:5c:6f:c2:00:
                    ed:7d:88:bb:78:98:0f:61:3c:77:62:d8:6e:33:10:
                    4e:ca:82:75:05:8a:51:d5:b0:51:b0:b3:4a:51:c6:
                    15:c9:72:4a:31:41:fd:6e:f8:fa:52:a5:bf:22:9f:
                    23:1e:83:89:61:90:17:da:94:ed:7b:79:b3:35:69:
                    b8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B5:78:65:E9:89:C2:BC:3F:92:30:74:E7:EE:48:77:7C:18:C6:51
            X509v3 Authority Key Identifier:
                keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/WrV4ZemJwrw_kjB05-5Id3wYxlE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.253.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:b3:e9:34:f8:ed:36:2a:b6:58:d8:74:b5:18:49:13:b5:ac:
         88:00:ad:1d:26:71:fa:01:57:a2:8f:a6:9c:f4:db:8d:58:24:
         98:b7:fa:e7:67:03:9b:ef:d0:6b:41:3d:4d:9a:97:c6:74:55:
         e7:10:61:d0:24:58:84:a4:eb:f7:fe:b5:d9:40:74:20:e2:b8:
         48:f4:d0:22:24:08:ab:d9:6f:61:61:d5:bc:aa:05:b6:ab:44:
         f5:7a:ee:7a:ed:a1:ad:44:da:72:82:14:f2:1f:f1:46:cd:78:
         cb:66:a6:fa:36:fb:06:fb:36:62:ea:0b:56:dd:28:72:b0:9f:
         f9:64:90:fb:3a:06:05:0d:ee:17:94:e2:0c:c1:6f:0c:05:86:
         eb:8a:18:d0:0f:09:07:48:f8:ba:67:0b:cb:67:51:1b:af:b8:
         b0:b1:eb:7a:5a:7e:a3:b2:58:51:63:c6:9e:c6:40:6c:b9:7c:
         6b:e1:23:0f:49:fe:42:40:98:b5:cd:0b:b3:17:30:21:57:81:
         6f:47:af:97:79:13:55:b0:6e:90:e7:3a:be:5e:15:a4:6e:22:
         6b:9f:e3:44:05:fc:fa:d8:22:ca:1b:f7:ea:3e:f9:87:e7:98:
         53:d5:52:2b:c0:e1:a2:f1:d0:71:9e:f8:ad:db:f2:fc:d0:a3:
         0e:fc:0d:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt57A8KdPNWILqtBSC3rpYoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZmIwODdmZmI3ZjYxY2UxMTNmNjkzNDVlNGQ1MGExMTM4
MDhmZWEwHhcNMjYwMTAxMTQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWI1Nzg2NWU5ODljMmJjM2Y5MjMwNzRlN2VlNDg3NzdjMThjNjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVFjEIvYp6g8tur8eRrMN4TuKPbA
TDWzwv2T46DQ/QV/2TkwwZkS3kbYNvO9Uw+ztCms2iDh2xoCpLxugpfAkxx15VUt
RVM7GFnEu2znj26w4g3I6YfnGiLF8AGFBsqEXuVFhujr9Arx83EIVDCycUweIqPE
In/oe506acDMNE+a3W2+K5kUS48yxFDMC67x5jQDcYBg709CniqWxR+7CPoD+3DQ
cuLBrFTCa6aKXlpknQvSrhs4YV4ZnQcLnlxvwgDtfYi7eJgPYTx3YthuMxBOyoJ1
BYpR1bBRsLNKUcYVyXJKMUH9bvj6UqW/Ip8jHoOJYZAX2pTte3mzNWm4CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFq1eGXpicK8P5IwdOfuSHd8GMZRMB8GA1UdIwQY
MBaAFBz7CH/7f2HOET9pNF5NUKETgI/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mZGQ1MWUtYmNhMS00ODkyLWI5N2Et
NjlhYTUzYzY5ZDU0LzEvV3JWNFplbUp3cndfa2pCMDUtNUlkM3dZeGxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9mZGQ1MWUtYmNhMS00ODkyLWI5N2EtNjlhYTUzYzY5ZDU0
LzEvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf0IMA0G
CSqGSIb3DQEBCwUAA4IBAQC3s+k0+O02KrZY2HS1GEkTtayIAK0dJnH6AVeij6ac
9NuNWCSYt/rnZwOb79BrQT1NmpfGdFXnEGHQJFiEpOv3/rXZQHQg4rhI9NAiJAir
2W9hYdW8qgW2q0T1eu567aGtRNpyghTyH/FGzXjLZqb6NvsG+zZi6gtW3ShysJ/5
ZJD7OgYFDe4XlOIMwW8MBYbrihjQDwkHSPi6ZwvLZ1Ebr7iwset6Wn6jslhRY8ae
xkBsuXxr4SMPSf5CQJi1zQuzFzAhV4FvR6+XeRNVsG6Q5zq+XhWkbiJrn+NEBfz6
2CLKG/fqPvmH55hT1VIrwOGi8dBxnvit2/L80KMO/A27
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:09:13 2026 by rpki-client