This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/Wlc1mb_xj0DVaYUUDsBCwlVjTTI.roa
File:                     Wlc1mb_xj0DVaYUUDsBCwlVjTTI.roa (raw, json)
Hash identifier:          OHp7KIYzafsL5kJAIldfo0uoA+OMQo8MF+eM1s5TkVM=
Subject key identifier:   5A:57:35:99:BF:F1:8F:40:D5:69:85:14:0E:C0:42:C2:55:63:4D:32
Certificate issuer:       /CN=f8b9ce1fbde7c8a4c58c16e554643aea73e7d158
Certificate serial:       019BF9FB49EADD94B33B44957E7A03DD3F30
Authority key identifier: F8:B9:CE:1F:BD:E7:C8:A4:C5:8C:16:E5:54:64:3A:EA:73:E7:D1:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/Wlc1mb_xj0DVaYUUDsBCwlVjTTI.roa
Signing time:             Mon 26 Jan 2026 11:05:53 +0000
ROA not before:           Mon 26 Jan 2026 11:05:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3209
IP address blocks:        91.217.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 11:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:fb:49:ea:dd:94:b3:3b:44:95:7e:7a:03:dd:3f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b9ce1fbde7c8a4c58c16e554643aea73e7d158
        Validity
            Not Before: Jan 26 11:05:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a573599bff18f40d56985140ec042c255634d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:fa:8c:fa:13:48:9a:33:7d:cb:9c:2f:ce:
                    d9:ed:81:f3:f3:3a:fa:31:85:79:f7:71:6e:14:b2:
                    c4:fa:4a:1a:9b:24:e5:81:3b:d7:5c:7a:87:5b:6e:
                    c4:ee:1c:24:45:a6:08:58:a7:f5:94:e8:d2:46:c1:
                    b2:f4:22:92:b0:c8:2f:69:e2:d8:9f:48:33:60:81:
                    08:ab:45:cc:48:97:5c:21:a2:7a:66:b8:c7:50:f7:
                    e7:a8:fd:23:a6:f6:b8:db:b9:a0:3e:95:7b:a6:5b:
                    19:ac:78:97:4a:3e:75:83:ad:75:d3:09:2d:b5:5b:
                    b9:80:76:64:5c:c4:19:fc:0b:ea:1e:ef:8c:69:4b:
                    c0:94:97:7f:a9:13:89:1e:16:95:d5:12:d6:c7:d9:
                    56:a1:96:f7:9b:23:c4:d1:04:5b:43:22:19:be:33:
                    ff:ea:fe:87:17:95:eb:00:b1:cd:cd:aa:60:c6:71:
                    74:19:3f:6f:48:8c:a3:d1:2b:bc:c1:1e:f9:43:3e:
                    eb:43:92:81:04:8f:fb:ff:dc:ab:6e:cd:f3:a0:68:
                    b2:c9:d1:d5:5b:02:98:36:bc:3c:22:b6:3f:0a:24:
                    a1:eb:be:99:46:f3:fb:61:ac:fd:e5:b6:67:ee:04:
                    d4:77:a5:2d:3e:05:b1:d4:91:d8:d1:be:91:6e:28:
                    12:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:57:35:99:BF:F1:8F:40:D5:69:85:14:0E:C0:42:C2:55:63:4D:32
            X509v3 Authority Key Identifier:
                keyid:F8:B9:CE:1F:BD:E7:C8:A4:C5:8C:16:E5:54:64:3A:EA:73:E7:D1:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/Wlc1mb_xj0DVaYUUDsBCwlVjTTI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:a1:69:f0:91:f2:e4:e7:55:50:08:22:1d:49:4f:c0:6e:0e:
         9a:b7:57:d5:08:2b:d6:8e:51:21:c4:45:17:51:3f:e7:3f:a6:
         94:3d:f0:8a:87:aa:eb:05:4e:af:f4:1b:65:6b:90:05:4b:27:
         ce:b9:9c:e7:4e:e9:dc:d8:21:9a:98:f3:df:e5:aa:08:26:54:
         9f:27:0a:49:80:20:b5:e8:9d:48:6c:8f:c1:36:20:48:06:90:
         9d:b5:7e:40:11:38:ff:60:f2:af:b0:a4:52:bc:d3:4b:78:43:
         59:2e:7e:f3:42:75:57:f9:69:2d:03:01:3d:b5:e1:28:b8:1b:
         b9:f0:ba:38:5b:f2:0c:5b:c4:f8:23:34:40:64:3d:4a:a0:13:
         09:9f:95:a7:05:a4:c8:26:52:57:e1:06:41:11:5e:fd:22:75:
         7b:ea:68:84:32:73:79:7b:5e:3f:ca:be:da:be:ed:9c:d2:6e:
         0b:24:a4:22:e4:ce:e4:fa:ef:52:38:14:48:5c:42:a2:3e:a7:
         55:e9:bd:9d:da:8d:17:fe:5f:55:dc:16:b0:10:0b:25:10:f9:
         34:40:27:b4:29:9c:6b:57:d9:87:a6:6d:35:52:dd:ba:c7:ce:
         e5:01:c9:80:4b:62:40:e0:13:e8:86:c2:6d:7f:e5:d7:9b:94:
         35:5d:38:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:32:40 2026 by rpki-client