This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/WYjLSaMGcDVPun0w5caUa6SyhAw.roa
File:                     WYjLSaMGcDVPun0w5caUa6SyhAw.roa (raw, json)
Hash identifier:          anCxFP8+izWbbd8RY7CAFyWBE9Qml7hPuy8Dd9kuR+Q=
Subject key identifier:   59:88:CB:49:A3:06:70:35:4F:BA:7D:30:E5:C6:94:6B:A4:B2:84:0C
Certificate issuer:       /CN=06d093a1776c085a2648ff78b4ce1fe417c5635d
Certificate serial:       019B7AC7FEF8766523A256D6E442CD773753
Authority key identifier: 06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/WYjLSaMGcDVPun0w5caUa6SyhAw.roa
Signing time:             Thu 01 Jan 2026 18:18:05 +0000
ROA not before:           Thu 01 Jan 2026 18:18:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     5603
IP address blocks:        195.5.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:fe:f8:76:65:23:a2:56:d6:e4:42:cd:77:37:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06d093a1776c085a2648ff78b4ce1fe417c5635d
        Validity
            Not Before: Jan  1 18:18:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5988cb49a30670354fba7d30e5c6946ba4b2840c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1c:d5:16:52:57:09:3c:69:7a:c2:ed:f7:59:
                    28:b6:c5:70:b4:13:a1:6e:c5:c2:c2:5a:a0:e6:dc:
                    48:45:bd:e8:26:08:b0:3f:ef:b4:44:b5:c5:81:c3:
                    70:22:8b:b4:3c:b1:c4:d6:d4:09:4d:21:d5:6d:f0:
                    e4:6c:0e:13:93:99:75:61:a1:a2:70:ac:45:86:f3:
                    88:1c:55:17:30:b6:64:e3:31:25:31:92:4b:ab:fd:
                    4e:6b:99:5c:fd:d7:3e:93:d3:cc:34:f1:5d:d5:8c:
                    4b:d4:94:17:c3:41:b7:26:7a:1f:c6:83:67:a3:e9:
                    b0:96:60:25:0a:dd:e0:98:a8:25:b4:fe:2a:c3:36:
                    48:4d:98:72:88:ed:8f:ca:0a:01:0c:0d:ab:8e:30:
                    46:4c:7d:a0:8b:5f:da:59:2f:df:81:12:be:ca:0d:
                    dc:3e:b2:13:6a:1c:14:65:08:9a:13:8b:18:c1:20:
                    b4:da:d9:68:59:75:ba:bb:1d:0b:6a:34:5c:a0:eb:
                    80:a5:e0:89:e4:f0:7e:6c:eb:1b:13:b0:d0:41:57:
                    f2:0d:c5:cc:d9:cd:75:5b:5a:a5:02:19:75:1d:f2:
                    68:52:e3:b1:56:d9:72:9d:7b:72:e5:e0:b2:d6:90:
                    73:e9:85:22:b6:71:ea:7e:2b:4b:38:a7:fe:8c:fe:
                    88:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:88:CB:49:A3:06:70:35:4F:BA:7D:30:E5:C6:94:6B:A4:B2:84:0C
            X509v3 Authority Key Identifier:
                keyid:06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/WYjLSaMGcDVPun0w5caUa6SyhAw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.5.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:db:8f:41:9e:28:1c:19:db:68:83:ad:16:24:36:b2:2a:cc:
         e6:5b:0d:e7:ca:3a:6f:a8:6e:48:81:78:1b:17:54:68:91:9d:
         9c:8d:cb:29:72:85:be:b0:39:62:6a:f7:eb:cc:fd:a0:93:d4:
         cc:fb:8e:c0:3c:a2:52:dc:01:ce:09:24:c1:33:57:00:87:0d:
         2a:df:79:b8:f0:90:02:f8:68:73:89:1f:19:5b:bf:5e:79:c5:
         11:92:dd:d2:0e:4e:73:bf:19:44:99:8d:e7:32:c5:67:bc:51:
         2b:d8:e7:82:9c:fa:f9:f0:d8:d8:50:d9:7f:1d:72:4a:c3:9f:
         90:97:6e:c3:bd:0b:18:aa:4a:a4:94:aa:dc:6c:9e:79:4b:e2:
         ae:ee:f4:89:fa:c1:f4:cd:9c:f6:03:2d:42:94:d3:07:22:13:
         05:0b:26:37:0c:b0:a7:5e:5c:8b:29:ec:8e:1a:6a:1e:fc:9b:
         5d:65:0f:4a:7b:0e:de:54:22:05:19:a8:b2:32:fb:3e:ce:b9:
         c6:c6:af:94:78:bc:f1:c6:95:fd:14:3c:46:59:9f:12:53:f9:
         93:f1:9f:7a:8c:84:f7:ad:a0:ae:ea:44:12:73:a0:a3:f6:7f:
         44:32:3b:d1:94:49:25:62:d8:03:26:b4:db:d3:80:3d:4b:f7:
         f0:d6:43:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:11:06 2026 by rpki-client