This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/w_Q84tF8PLojnMinkyYANCaOxXs.roa
File:                     w_Q84tF8PLojnMinkyYANCaOxXs.roa (raw, json)
Hash identifier:          Jzw6yeUBG+N2KYzwvGCZl6H5NvFM3gjwVo1zImgRTkw=
Subject key identifier:   C3:F4:3C:E2:D1:7C:3C:BA:23:9C:C8:A7:93:26:00:34:26:8E:C5:7B
Certificate issuer:       /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial:       019B7D5AFDF609E9094C295BC3F0D0C2E743
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/w_Q84tF8PLojnMinkyYANCaOxXs.roa
Signing time:             Fri 02 Jan 2026 06:17:53 +0000
ROA not before:           Fri 02 Jan 2026 06:17:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     53616
IP address blocks:        93.114.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 12:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5a:fd:f6:09:e9:09:4c:29:5b:c3:f0:d0:c2:e7:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
        Validity
            Not Before: Jan  2 06:17:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c3f43ce2d17c3cba239cc8a793260034268ec57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cf:9a:ac:b7:94:30:6a:49:4c:2d:dd:fa:28:
                    dd:59:e8:a6:d3:a4:76:90:3d:3c:65:f6:4a:b9:eb:
                    b5:18:f1:14:e8:88:5e:c7:7a:38:2e:94:e4:56:2a:
                    94:09:39:60:27:af:c2:5e:ea:cd:eb:d4:e1:47:37:
                    60:da:46:26:3d:e7:34:58:5b:94:7a:45:d4:f7:3e:
                    33:82:25:b2:1e:fd:17:6e:b2:21:e2:95:66:23:0d:
                    c3:40:7e:67:20:18:49:89:3e:d6:69:c2:f5:fb:1c:
                    10:99:11:ea:0d:e6:84:c1:bc:cd:c2:10:62:de:4c:
                    00:fc:b7:91:67:e9:a9:5b:fd:4d:e1:4f:5f:6e:6f:
                    b4:e8:60:77:2e:dc:3d:d2:37:26:36:b7:8e:dc:66:
                    b3:6c:63:d7:fa:66:30:50:44:19:e6:40:46:fd:9a:
                    5f:60:67:32:1c:79:bb:39:02:ac:e7:21:f1:45:60:
                    c4:ab:36:46:7f:ef:65:ab:02:20:e6:ca:3e:28:d7:
                    bc:bd:41:22:b2:af:7b:5e:86:45:86:26:bc:64:5f:
                    82:cb:40:d6:47:e3:11:a3:8b:c5:c3:0b:7e:97:33:
                    5b:1d:52:2a:2c:cf:6e:be:0f:38:87:d0:da:9d:16:
                    0c:8e:e9:f2:90:b7:ea:30:97:c3:b4:24:2f:0c:9b:
                    49:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F4:3C:E2:D1:7C:3C:BA:23:9C:C8:A7:93:26:00:34:26:8E:C5:7B
            X509v3 Authority Key Identifier:
                keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/w_Q84tF8PLojnMinkyYANCaOxXs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.114.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:0e:02:39:9a:e7:63:32:bf:3f:3e:2e:45:c2:dd:d8:01:e2:
         ba:b0:11:ad:5e:5c:0c:9d:ad:a4:23:fd:dc:9d:06:b2:42:b5:
         a0:d9:87:fb:4e:f9:7e:f4:0c:12:b8:4d:01:65:71:c7:76:61:
         5c:d1:da:31:07:a4:99:69:57:b4:ac:5c:4b:90:b8:1f:2e:8b:
         ad:19:11:5b:fa:f2:aa:d2:a9:a9:cd:e5:fd:57:3b:07:ce:71:
         ca:cb:57:fb:34:f6:c7:e8:e4:d3:13:94:88:ff:71:8c:91:67:
         02:f1:07:8a:df:d9:fe:7d:d6:4f:50:98:da:b9:7a:8e:b3:3e:
         7a:39:86:11:07:3a:02:c9:ba:25:b9:79:e7:ef:41:bc:40:0b:
         a3:fb:d1:6a:79:32:dc:4d:21:67:f3:bd:a3:46:74:07:40:d6:
         15:60:f3:0e:e5:24:d4:df:ab:8f:75:54:fc:92:1a:51:46:12:
         86:1c:8c:fe:60:b3:4a:a6:e9:18:85:0a:97:31:2f:52:38:fa:
         27:27:8e:45:27:b7:39:6c:68:ca:4f:82:7f:76:d4:82:87:d2:
         00:63:1d:0c:0a:b4:ce:6f:51:30:f7:eb:21:ba:d9:eb:dd:9a:
         45:3d:6f:29:e1:4d:21:38:0b:62:a1:20:2e:bf:18:e0:40:6e:
         a8:7a:17:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9Wv32CekJTClbw/DQwudDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYwMTAyMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2Y0M2NlMmQxN2MzY2JhMjM5Y2M4YTc5MzI2MDAzNDI2OGVjNTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5s+arLeUMGpJTC3d+ijdWeim06R2
kD08ZfZKueu1GPEU6Ihex3o4LpTkViqUCTlgJ6/CXurN69ThRzdg2kYmPec0WFuU
ekXU9z4zgiWyHv0XbrIh4pVmIw3DQH5nIBhJiT7WacL1+xwQmRHqDeaEwbzNwhBi
3kwA/LeRZ+mpW/1N4U9fbm+06GB3Ltw90jcmNreO3GazbGPX+mYwUEQZ5kBG/Zpf
YGcyHHm7OQKs5yHxRWDEqzZGf+9lqwIg5so+KNe8vUEisq97XoZFhia8ZF+Cy0DW
R+MRo4vFwwt+lzNbHVIqLM9uvg84h9DanRYMjunykLfqMJfDtCQvDJtJ3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMP0POLRfDy6I5zIp5MmADQmjsV7MB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvd19RODR0RjhQTG9qbk1pbmt5WUFOQ2FPeFhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXJZMA0G
CSqGSIb3DQEBCwUAA4IBAQB3DgI5mudjMr8/Pi5Fwt3YAeK6sBGtXlwMna2kI/3c
nQayQrWg2Yf7Tvl+9AwSuE0BZXHHdmFc0doxB6SZaVe0rFxLkLgfLoutGRFb+vKq
0qmpzeX9VzsHznHKy1f7NPbH6OTTE5SI/3GMkWcC8QeK39n+fdZPUJjauXqOsz56
OYYRBzoCyboluXnn70G8QAuj+9FqeTLcTSFn872jRnQHQNYVYPMO5STU36uPdVT8
khpRRhKGHIz+YLNKpukYhQqXMS9SOPonJ45FJ7c5bGjKT4J/dtSCh9IAYx0MCrTO
b1Ew9+shutnr3ZpFPW8p4U0hOAtioSAuvxjgQG6oehdh
-----END CERTIFICATE-----
Generated at Mon Jan 19 19:56:37 2026 by rpki-client