This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/WaUsXAeG_b8Yr6THF_rGlOGCGWI.roa
File:                     WaUsXAeG_b8Yr6THF_rGlOGCGWI.roa (raw, json)
Hash identifier:          q0S6vBvhHT/53tAXed3mxaItMS4ENbcQL9CBknkF+54=
Subject key identifier:   59:A5:2C:5C:07:86:FD:BF:18:AF:A4:C7:17:FA:C6:94:E1:82:19:62
Certificate issuer:       /CN=bc3a252a8fcca0361da234a4f3ddb957789d0e55
Certificate serial:       019B7758D20EC309A4CB1F8B4BF8848B644A
Authority key identifier: BC:3A:25:2A:8F:CC:A0:36:1D:A2:34:A4:F3:DD:B9:57:78:9D:0E:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDolKo_MoDYdojSk8925V3idDlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/WaUsXAeG_b8Yr6THF_rGlOGCGWI.roa
Signing time:             Thu 01 Jan 2026 02:17:48 +0000
ROA not before:           Thu 01 Jan 2026 02:17:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        212.96.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/vDolKo_MoDYdojSk8925V3idDlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/vDolKo_MoDYdojSk8925V3idDlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDolKo_MoDYdojSk8925V3idDlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:d2:0e:c3:09:a4:cb:1f:8b:4b:f8:84:8b:64:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3a252a8fcca0361da234a4f3ddb957789d0e55
        Validity
            Not Before: Jan  1 02:17:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=59a52c5c0786fdbf18afa4c717fac694e1821962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a2:7f:12:01:79:81:9b:3a:2b:d0:65:1b:e8:
                    2c:dc:6b:8c:d4:07:6e:c6:b4:4b:6d:1b:f9:00:b7:
                    8b:39:66:57:84:9c:a6:13:27:6f:ff:8f:38:e6:87:
                    bc:79:ab:cb:7d:02:64:fb:28:89:24:08:b1:f3:4f:
                    30:2e:d9:c6:de:08:3a:f9:e9:22:86:cd:13:ae:9e:
                    ea:78:05:1c:08:f3:28:8e:ea:0a:74:00:37:12:5e:
                    a6:14:8a:3d:01:12:82:4e:c9:be:5b:90:75:62:0c:
                    9e:ec:19:67:2a:10:74:c2:ff:cd:d9:db:1c:16:92:
                    c9:24:e3:fa:64:d1:e4:1f:ac:c8:27:74:a5:3d:d3:
                    b5:94:79:8b:d5:ed:fa:e0:34:a8:cf:15:a0:43:ed:
                    53:ec:57:23:e5:4b:0b:24:ff:c7:05:5c:96:f5:eb:
                    9e:47:ae:be:bf:57:cd:ec:0d:81:59:32:c6:63:56:
                    58:04:ff:24:ab:ee:22:64:e9:99:40:f0:ba:a5:61:
                    b7:43:62:56:dc:f9:24:5c:12:ca:47:2b:c7:ef:8c:
                    99:ad:be:27:80:2f:4a:2a:e5:79:38:a5:c0:2e:2a:
                    09:bb:1f:6c:aa:10:9c:74:86:2a:fa:f5:00:67:8f:
                    cd:79:8c:4a:99:b4:6f:92:d8:4f:23:75:c9:bc:3f:
                    6f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A5:2C:5C:07:86:FD:BF:18:AF:A4:C7:17:FA:C6:94:E1:82:19:62
            X509v3 Authority Key Identifier:
                keyid:BC:3A:25:2A:8F:CC:A0:36:1D:A2:34:A4:F3:DD:B9:57:78:9D:0E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDolKo_MoDYdojSk8925V3idDlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/WaUsXAeG_b8Yr6THF_rGlOGCGWI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/vDolKo_MoDYdojSk8925V3idDlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.96.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:f6:78:3e:12:d3:e9:67:51:27:20:1c:7b:b4:31:3a:5f:52:
         ea:62:e6:18:b7:80:25:09:63:c6:8e:6e:07:5f:24:68:29:e5:
         ba:d2:95:55:be:83:35:3c:de:36:76:b5:42:9c:17:4a:98:62:
         b2:13:b0:59:ef:7c:39:4c:fe:ad:bf:37:f3:77:2c:71:82:db:
         84:14:f8:b8:44:a4:e5:c4:f7:4d:32:b8:4d:98:32:5a:64:e5:
         50:49:34:64:59:66:3f:ec:8b:7e:ed:6f:8f:4b:e1:22:8c:6a:
         55:08:07:f0:9e:a4:d4:2f:ec:f8:d4:ad:d9:b1:fd:95:31:af:
         7c:25:60:e6:be:54:37:cc:33:ac:ae:8b:66:88:ae:8c:f4:3f:
         e2:74:19:74:79:83:18:8c:b4:62:5e:2d:40:1a:4d:87:56:3e:
         2f:a3:e2:5a:30:1f:df:b3:80:cc:0b:0e:f0:16:2f:50:03:35:
         1d:0a:6f:09:62:7f:27:a0:b9:84:d0:7f:98:06:ca:5d:78:c3:
         2d:c7:da:8d:72:71:ce:d5:96:93:08:f0:ad:2c:bb:71:25:e0:
         0b:9b:3f:4a:c5:0d:05:d3:50:4e:2f:56:89:09:10:51:a6:7b:
         2b:18:8b:d0:52:4e:2a:07:00:18:c5:6d:59:ca:c1:20:30:d7:
         68:8c:7a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:48:09 2026 by rpki-client