This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/W47tZvu_CAnfpr4QCettmz3h4VA.roa
File:                     W47tZvu_CAnfpr4QCettmz3h4VA.roa (raw, json)
Hash identifier:          m6c/GDR1Z9ctHQPSYVmUi8E4ot+sOPV9fr/Kpm+Mrgw=
Subject key identifier:   5B:8E:ED:66:FB:BF:08:09:DF:A6:BE:10:09:EB:6D:9B:3D:E1:E1:50
Certificate issuer:       /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Certificate serial:       019B79109387246579921572C807818C4D07
Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/W47tZvu_CAnfpr4QCettmz3h4VA.roa
Signing time:             Thu 01 Jan 2026 10:18:07 +0000
ROA not before:           Thu 01 Jan 2026 10:18:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        185.230.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:93:87:24:65:79:92:15:72:c8:07:81:8c:4d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
        Validity
            Not Before: Jan  1 10:18:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5b8eed66fbbf0809dfa6be1009eb6d9b3de1e150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:38:e3:5e:88:c9:f9:26:0c:fe:92:d8:69:
                    bc:94:a7:06:3b:6f:2c:8c:6e:d3:85:14:d7:4c:89:
                    2d:75:15:3a:42:9a:7d:02:02:ad:6a:62:7c:85:be:
                    a1:0c:c1:9a:46:b7:7f:f5:2a:1c:5a:85:94:19:a8:
                    28:8f:ff:a1:c9:7d:47:65:6d:b9:f9:80:e7:a6:b1:
                    9d:4b:05:bc:41:67:ae:9e:05:c7:3f:6e:56:31:4f:
                    01:27:be:f2:7e:f7:76:a0:95:16:0b:c6:27:58:4f:
                    d1:4f:38:c9:d5:65:f3:8c:b1:00:06:6a:5d:f5:98:
                    ba:44:d5:65:3f:40:3a:9d:59:e2:76:f7:9c:3a:a1:
                    77:bd:13:82:d1:1d:22:14:c5:53:f8:2c:65:20:b0:
                    82:2f:52:90:be:61:34:55:ff:f5:1d:02:78:f3:eb:
                    ac:46:fd:50:9a:25:8d:ab:c1:ba:46:2a:55:08:1e:
                    23:c9:b8:18:1c:a0:fe:e0:97:42:44:20:8d:82:e4:
                    9f:b5:41:61:9e:9f:03:d2:2b:ee:ac:75:51:99:81:
                    43:1a:cd:9a:05:0b:a9:1e:92:27:9a:4f:76:00:aa:
                    23:fc:62:4b:80:1b:66:9d:fa:dc:08:73:90:44:28:
                    3a:3f:71:b8:78:e9:96:69:d8:3f:1e:42:92:d9:e1:
                    a6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8E:ED:66:FB:BF:08:09:DF:A6:BE:10:09:EB:6D:9B:3D:E1:E1:50
            X509v3 Authority Key Identifier:
                keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/W47tZvu_CAnfpr4QCettmz3h4VA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:e1:08:3b:ca:5b:02:96:93:fe:04:f9:56:ea:d4:e8:95:01:
         0b:b8:b2:7c:a9:e2:47:7f:70:fe:76:23:a7:e8:13:e8:f9:49:
         ab:61:19:ea:1b:eb:26:36:96:e5:90:44:de:2a:36:0f:08:05:
         80:11:16:32:28:7f:5a:e3:b5:1a:43:72:32:e5:77:21:c2:ad:
         98:93:91:c6:f1:b3:ff:ba:5a:f0:5f:62:4f:57:82:eb:3d:3c:
         1a:d4:95:a6:81:6b:66:bb:e9:17:e4:3a:f8:fb:fe:64:10:b4:
         3a:2d:a8:71:68:45:cb:da:05:bf:fe:85:aa:bc:63:65:2e:71:
         5e:5d:48:e9:3a:c2:24:30:79:63:49:0b:a3:9f:00:37:8f:4f:
         20:f7:c7:b2:55:53:f1:94:ed:73:04:8d:f1:24:3e:d4:b8:83:
         9d:aa:1b:3e:6c:fa:ae:84:93:49:6d:8d:15:1c:73:8d:1c:12:
         24:46:4d:27:d5:22:24:4d:a7:ad:3d:77:2f:dc:02:af:e4:f4:
         2d:05:4a:b3:a3:d7:4a:cd:ad:8d:9e:04:f5:cb:32:ec:e4:a9:
         32:70:12:d5:b9:27:8c:f4:8e:bc:b1:5f:b4:28:c0:51:ea:bf:
         9c:71:cf:1b:55:63:88:41:a7:97:74:24:50:26:fa:82:95:0a:
         ac:dc:2c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:21:56 2026 by rpki-client