This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/WsvNi9fHVaR-QhhBc-1gHE69wug.roa
File:                     WsvNi9fHVaR-QhhBc-1gHE69wug.roa (raw, json)
Hash identifier:          Lfbnxpr5l5lYF7k2njm/AqL3hJumFpGwecHcxo26Gqc=
Subject key identifier:   5A:CB:CD:8B:D7:C7:55:A4:7E:42:18:41:73:ED:60:1C:4E:BD:C2:E8
Certificate issuer:       /CN=9218cd25ebf74cb1b004b01ee505503fff246d61
Certificate serial:       019B7AC80CC73F3A6795EABBE97622356343
Authority key identifier: 92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/WsvNi9fHVaR-QhhBc-1gHE69wug.roa
Signing time:             Thu 01 Jan 2026 18:18:09 +0000
ROA not before:           Thu 01 Jan 2026 18:18:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51583
IP address blocks:        91.219.88.0/24 maxlen: 24
                          91.219.89.0/24 maxlen: 24
                          91.219.90.0/24 maxlen: 24
                          91.219.91.0/24 maxlen: 24
                          91.228.246.0/24 maxlen: 24
                          91.228.247.0/24 maxlen: 24
                          185.32.120.0/24 maxlen: 24
                          185.32.121.0/24 maxlen: 24
                          185.32.122.0/24 maxlen: 24
                          185.32.123.0/24 maxlen: 24
                          193.104.224.0/24 maxlen: 24
                          193.104.225.0/24 maxlen: 24
                          193.104.226.0/24 maxlen: 24
                          193.104.227.0/24 maxlen: 24
                          193.242.202.0/24 maxlen: 24
                          193.242.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:0c:c7:3f:3a:67:95:ea:bb:e9:76:22:35:63:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9218cd25ebf74cb1b004b01ee505503fff246d61
        Validity
            Not Before: Jan  1 18:18:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5acbcd8bd7c755a47e42184173ed601c4ebdc2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:13:14:6a:d8:5f:2b:73:3d:93:37:ab:95:4b:
                    09:c0:be:81:43:d4:12:a9:d9:bc:73:e2:7a:b8:10:
                    9b:5a:38:48:f1:83:80:3c:50:68:46:07:39:9e:30:
                    d2:de:cc:27:63:ad:ce:6d:28:8f:59:1b:ff:e9:b4:
                    e5:37:dc:bf:c8:84:77:05:de:0d:6d:ac:50:84:26:
                    ae:4e:6a:98:0d:11:03:07:8a:93:4d:cf:26:9c:bc:
                    65:8b:e6:04:99:08:12:39:ad:a7:28:cc:07:f6:c9:
                    09:e7:d9:e7:94:65:3a:f9:6b:37:43:83:b6:a3:bf:
                    65:1c:c5:91:b6:aa:ad:48:aa:99:0a:d5:8c:9a:e5:
                    eb:c2:a4:ee:f3:7e:5d:8f:fb:d8:49:9f:f8:5f:95:
                    ff:ad:ab:10:ec:d4:17:97:c8:38:d9:49:03:03:9e:
                    fb:e9:ef:dc:5e:32:5f:18:97:51:4a:5f:99:0d:73:
                    d6:e9:7b:fc:27:7d:d2:4e:ef:f7:a6:6b:38:ef:5b:
                    e1:4a:31:2b:62:5c:ea:0c:96:2d:43:83:6d:50:5a:
                    2b:f1:5a:a8:2c:04:d2:2c:4e:0b:98:91:10:c1:a8:
                    c0:74:f2:e2:b4:4a:10:bb:db:92:e8:f9:13:a7:32:
                    4b:69:e2:b7:02:14:64:7c:83:f5:71:2c:27:e0:9e:
                    e3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CB:CD:8B:D7:C7:55:A4:7E:42:18:41:73:ED:60:1C:4E:BD:C2:E8
            X509v3 Authority Key Identifier:
                keyid:92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/WsvNi9fHVaR-QhhBc-1gHE69wug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.219.88.0/22
                  91.228.246.0/23
                  185.32.120.0/22
                  193.104.224.0/22
                  193.242.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:d9:c1:df:80:9e:ff:26:b0:44:00:72:0b:b9:bc:1c:04:9a:
         e9:bc:ed:56:5f:4f:d3:ec:71:59:8b:be:ee:8e:e4:4b:57:ab:
         00:3d:e9:1b:38:20:05:26:e5:e1:cb:1f:65:6e:b8:b2:0b:57:
         bd:52:f6:5b:d5:86:0d:a6:ce:c0:5b:d3:73:9e:20:ab:fc:20:
         e7:25:e5:a7:45:26:aa:14:0f:3a:44:42:f6:b4:a5:2a:a3:56:
         3d:68:44:b9:31:df:18:96:d5:b7:90:4e:d5:b2:c0:9b:5c:c0:
         fd:82:24:50:88:e3:ec:b2:ba:03:6e:9e:3d:7a:c0:d0:18:c4:
         f5:9b:75:d0:5b:c0:69:e5:dd:75:fb:6c:3a:c5:f3:37:f9:a2:
         a7:50:b0:30:2f:fa:aa:fc:25:aa:a8:a8:ac:d5:e0:bb:27:a4:
         6f:6a:4f:8c:33:83:d2:9f:3d:c0:c5:32:a4:a8:20:81:72:f1:
         20:44:ce:41:6f:85:f4:16:a3:49:8c:30:70:82:b8:7f:b7:e4:
         f5:48:4f:40:e9:93:09:41:31:6e:b7:8e:be:29:38:ba:8f:d9:
         8a:c5:3c:7c:f3:e4:a5:d2:4a:03:ab:da:6d:de:d4:2c:68:67:
         ec:a0:61:6e:8c:38:0f:33:de:69:5d:ff:ec:d7:5c:2c:01:3e:
         d6:a4:b7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:24:50 2026 by rpki-client