This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/WWHOCdsacMdGnHdJhOLy9pPWRYo.roa
File:                     WWHOCdsacMdGnHdJhOLy9pPWRYo.roa (raw, json)
Hash identifier:          oBwrZQKt+LueihEP9ZDumJepktt4dnTgXqwHx+nSZEE=
Subject key identifier:   59:61:CE:09:DB:1A:70:C7:46:9C:77:49:84:E2:F2:F6:93:D6:45:8A
Certificate issuer:       /CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Certificate serial:       019B77590B867B784833735F5226051E6D9D
Authority key identifier: 82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/WWHOCdsacMdGnHdJhOLy9pPWRYo.roa
Signing time:             Thu 01 Jan 2026 02:18:02 +0000
ROA not before:           Thu 01 Jan 2026 02:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197721
IP address blocks:        192.162.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:0b:86:7b:78:48:33:73:5f:52:26:05:1e:6d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
        Validity
            Not Before: Jan  1 02:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5961ce09db1a70c7469c774984e2f2f693d6458a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:07:5e:42:f4:73:25:72:4e:1f:90:c2:90:7a:
                    f2:ef:33:97:1d:2a:03:a3:47:c1:88:25:56:c7:99:
                    3a:16:ec:12:88:b3:3f:23:05:3b:46:32:7e:cb:ca:
                    89:47:44:29:30:cd:7d:9c:26:c7:83:da:bd:25:cf:
                    23:3f:35:88:66:b6:62:79:bb:46:ec:d0:72:a0:75:
                    3c:1e:60:69:08:2f:97:69:b2:9f:67:2a:0b:d0:2e:
                    78:f5:df:d1:d7:55:ff:35:ed:27:4c:3f:8f:23:e4:
                    49:d4:18:e1:85:37:52:62:ed:af:a8:98:97:80:4d:
                    c9:7c:80:2e:95:4d:e5:64:53:a6:c3:e9:b8:b9:e2:
                    f8:c2:f4:79:28:4b:6f:44:7d:ad:c7:61:12:55:6c:
                    2a:aa:52:80:07:87:4d:9a:d2:8b:86:bc:12:49:90:
                    e4:d9:34:5b:15:f3:e0:d3:b1:5f:6d:fb:56:9f:f0:
                    09:ee:b6:28:5c:6f:df:16:e4:ca:47:ce:72:24:5c:
                    0e:5d:05:6d:27:de:1a:97:f8:54:04:36:0c:f4:2c:
                    bb:8c:33:42:da:f7:a9:09:a6:55:ac:d4:8d:13:93:
                    c4:2b:14:04:02:f9:24:ff:48:4c:26:17:84:ab:e8:
                    95:b5:3b:5d:4b:25:0a:6a:36:91:f3:74:6d:ce:a2:
                    44:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:61:CE:09:DB:1A:70:C7:46:9C:77:49:84:E2:F2:F6:93:D6:45:8A
            X509v3 Authority Key Identifier:
                keyid:82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/WWHOCdsacMdGnHdJhOLy9pPWRYo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.162.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:cd:28:f5:c7:10:91:df:24:1a:de:d4:ed:82:57:44:4a:0f:
         7b:04:1b:ee:71:8f:26:66:a5:b7:15:cf:d8:51:0a:62:9e:4b:
         e2:f7:29:c7:83:89:6a:a5:6d:61:b7:61:53:ed:bd:96:74:5f:
         61:24:21:78:85:0a:16:23:8e:24:c6:95:9d:45:41:9a:5a:59:
         20:45:bd:1c:7d:72:f8:c1:74:c8:d0:ec:cd:ae:a6:89:82:b3:
         ef:2e:71:82:3d:3b:88:36:67:f3:1a:64:85:4c:a9:0b:95:80:
         e6:ae:fe:68:15:e7:ea:ba:84:a7:15:f9:97:a9:44:bb:8f:c9:
         76:9b:0f:81:7d:fc:d4:70:1f:b6:f3:da:4c:8c:09:83:ea:33:
         28:51:c2:37:d5:54:2d:c3:cc:b7:eb:50:1e:7f:21:3b:9c:7a:
         97:23:c8:a0:bb:5d:14:ff:36:4c:4a:f4:09:09:92:21:b4:80:
         e7:2a:09:e7:27:7f:5f:7d:73:4c:7d:0f:69:03:28:dd:67:e6:
         a6:d4:3b:3d:67:c8:c9:72:1b:5f:bf:37:5b:3d:0f:31:1d:e8:
         3a:4e:c6:30:fb:c2:7c:28:82:d8:06:1d:84:bb:f3:64:3d:86:
         22:fd:14:65:bc:d6:af:22:22:65:a5:bc:7c:d6:3c:27:2a:d6:
         f8:e9:c7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:27 2026 by rpki-client