This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/w0awLyAE7bpppRvJ-JMjMZHR1kw.roa
File:                     w0awLyAE7bpppRvJ-JMjMZHR1kw.roa (raw, json)
Hash identifier:          980Uh/mGmlulr/4a0C22VsIGO0hmRCY1rYF5n7rPjaQ=
Subject key identifier:   C3:46:B0:2F:20:04:ED:BA:69:A5:1B:C9:F8:93:23:31:91:D1:D6:4C
Certificate issuer:       /CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
Certificate serial:       019B791133B380FA05EB1EFAA18150585399
Authority key identifier: 5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/w0awLyAE7bpppRvJ-JMjMZHR1kw.roa
Signing time:             Thu 01 Jan 2026 10:18:49 +0000
ROA not before:           Thu 01 Jan 2026 10:18:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25460
IP address blocks:        193.32.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:33:b3:80:fa:05:eb:1e:fa:a1:81:50:58:53:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
        Validity
            Not Before: Jan  1 10:18:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c346b02f2004edba69a51bc9f893233191d1d64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:72:d3:54:ad:33:06:52:94:5b:5b:6b:c4:
                    cb:11:a8:dc:a0:90:22:40:fa:7c:07:d5:e3:21:ac:
                    08:89:d4:09:33:43:a1:2c:58:11:dc:2b:f1:cd:b0:
                    df:9d:16:98:c8:52:51:1d:32:fe:d4:09:70:71:8c:
                    18:dc:94:67:88:80:d3:b8:32:83:05:aa:c0:85:71:
                    53:0c:7d:85:0d:98:f6:3b:fe:d5:ba:92:fa:70:cb:
                    3e:cb:8f:20:56:fb:51:37:a0:2b:6a:43:01:09:e4:
                    d7:41:d2:a3:40:85:42:2f:76:f6:a3:d7:a2:f4:81:
                    11:cd:ef:38:03:25:eb:e7:5b:11:9f:ca:d3:42:cf:
                    f2:a5:0e:ea:20:78:2f:88:d5:48:74:33:86:49:57:
                    86:e3:46:92:28:00:ba:bd:79:40:98:05:6c:71:8e:
                    a6:f4:c3:a9:70:ed:ef:b9:1c:5a:9f:f8:8b:89:1a:
                    9a:ed:a1:4d:6a:e8:4e:0c:b6:1a:2a:96:7c:35:b8:
                    c9:df:d0:3d:28:0e:ef:4c:03:cd:46:3b:de:35:4e:
                    37:e9:65:6d:7f:01:88:1b:26:c8:4e:48:a2:ef:84:
                    87:33:a7:9d:6c:62:5c:ea:1a:5c:20:69:8f:af:f7:
                    ab:b0:94:de:a8:69:20:3f:e6:2a:63:5f:a1:de:23:
                    f9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:46:B0:2F:20:04:ED:BA:69:A5:1B:C9:F8:93:23:31:91:D1:D6:4C
            X509v3 Authority Key Identifier:
                keyid:5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/w0awLyAE7bpppRvJ-JMjMZHR1kw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.32.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:b1:26:45:e4:2f:49:c9:b1:79:e0:ec:4d:1e:3f:dd:2f:82:
         ee:1d:c8:7e:44:b3:95:eb:cd:40:8a:fc:5b:04:13:e5:f8:c2:
         a0:30:2e:fe:5f:d7:30:4a:6f:a1:4a:c8:09:f8:44:42:b2:0f:
         39:26:88:38:1c:ad:9c:1c:6d:33:c2:fe:e3:9a:ec:6b:cb:ba:
         c7:8e:07:f5:22:bf:4a:1b:5d:dc:bd:aa:01:59:6d:39:ac:b3:
         9b:ad:68:84:9d:19:ed:b2:7c:32:cf:f4:ab:4a:57:1f:df:30:
         10:b5:ec:8c:7f:05:9a:a4:d6:1b:1e:40:42:0f:74:cd:8b:00:
         57:ad:e5:8c:18:7c:33:ee:a3:9a:06:78:ab:6b:35:59:33:2f:
         27:0a:10:1e:da:3f:47:c6:c8:a6:52:a1:94:23:f5:ed:9d:24:
         34:9f:0c:de:4c:d9:9e:f9:fe:ec:fa:d8:71:e8:7d:e3:51:2a:
         c3:ff:66:06:64:fb:4e:f3:89:e9:dd:37:f3:33:f9:7f:ed:62:
         0a:c7:f9:bd:6a:e8:42:f7:56:fc:3f:26:04:33:bb:d0:c6:ab:
         bb:98:de:11:71:d5:df:40:b9:c9:12:71:dd:08:a9:eb:1d:a0:
         64:26:2d:80:85:ba:34:4a:f7:e2:09:5e:e0:65:f5:8e:d8:45:
         2d:a4:a1:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5ETOzgPoF6x76oYFQWFOZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNDViMTM0YzA5MTQxMGUzMTQyM2VhYzJjY2FkMGFlZGI4
YTZlYzUwHhcNMjYwMTAxMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzQ2YjAyZjIwMDRlZGJhNjlhNTFiYzlmODkzMjMzMTkxZDFkNjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/xy01StMwZSlFtba8TLEajcoJAi
QPp8B9XjIawIidQJM0OhLFgR3CvxzbDfnRaYyFJRHTL+1AlwcYwY3JRniIDTuDKD
BarAhXFTDH2FDZj2O/7VupL6cMs+y48gVvtRN6ArakMBCeTXQdKjQIVCL3b2o9ei
9IERze84AyXr51sRn8rTQs/ypQ7qIHgviNVIdDOGSVeG40aSKAC6vXlAmAVscY6m
9MOpcO3vuRxan/iLiRqa7aFNauhODLYaKpZ8NbjJ39A9KA7vTAPNRjveNU436WVt
fwGIGybITkii74SHM6edbGJc6hpcIGmPr/ersJTeqGkgP+YqY1+h3iP5cwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMNGsC8gBO26aaUbyfiTIzGR0dZMMB8GA1UdIwQY
MBaAFF9FsTTAkUEOMUI+rCzK0K7bim7FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDBXeE5NQ1JRUTR4UWo2c0xNclFydHVLYnNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xYmQxYmUtY2RkZS00NWFlLWExMjQt
YTdiZDgzYThmNTZjLzEvdzBhd0x5QUU3YnBwcFJ2Si1KTWpNWkhSMWt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xYmQxYmUtY2RkZS00NWFlLWExMjQtYTdiZDgzYThmNTZj
LzEvWDBXeE5NQ1JRUTR4UWo2c0xNclFydHVLYnNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSASMA0G
CSqGSIb3DQEBCwUAA4IBAQB7sSZF5C9JybF54OxNHj/dL4LuHch+RLOV681Aivxb
BBPl+MKgMC7+X9cwSm+hSsgJ+ERCsg85Jog4HK2cHG0zwv7jmuxry7rHjgf1Ir9K
G13cvaoBWW05rLObrWiEnRntsnwyz/SrSlcf3zAQteyMfwWapNYbHkBCD3TNiwBX
reWMGHwz7qOaBnirazVZMy8nChAe2j9HxsimUqGUI/XtnSQ0nwzeTNme+f7s+thx
6H3jUSrD/2YGZPtO84np3TfzM/l/7WIKx/m9auhC91b8PyYEM7vQxqu7mN4RcdXf
QLnJEnHdCKnrHaBkJi2Ahbo0SvfiCV7gZfWO2EUtpKGr
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:29 2026 by rpki-client