This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/WVAJdgjbItg7Mo643n_cLFQt5QM.roa
File:                     WVAJdgjbItg7Mo643n_cLFQt5QM.roa (raw, json)
Hash identifier:          wQEt73D3Ylc7pRRWF2c8VCcNEdJAA1g1dE2/T5MxO+A=
Subject key identifier:   59:50:09:76:08:DB:22:D8:3B:32:8E:B8:DE:7F:DC:2C:54:2D:E5:03
Certificate issuer:       /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial:       019B7E3889C5EC5DC8066B451EBE1C002D39
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/WVAJdgjbItg7Mo643n_cLFQt5QM.roa
Signing time:             Fri 02 Jan 2026 10:19:53 +0000
ROA not before:           Fri 02 Jan 2026 10:19:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15404
IP address blocks:        185.154.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:89:c5:ec:5d:c8:06:6b:45:1e:be:1c:00:2d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
        Validity
            Not Before: Jan  2 10:19:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5950097608db22d83b328eb8de7fdc2c542de503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c5:cf:d4:82:b2:65:47:7e:bc:9d:fb:10:49:
                    a4:4e:db:23:87:b7:12:37:3b:40:7d:d2:32:a8:fc:
                    91:f1:4a:40:67:0e:26:2b:74:19:98:c0:33:cc:24:
                    e0:87:00:4e:ee:64:33:87:71:fb:8f:5f:f6:62:89:
                    48:98:37:b4:e2:dc:94:2f:5f:da:a8:38:56:fb:65:
                    3d:42:6d:ce:a4:34:c6:9e:e9:5f:a9:ba:39:c8:e4:
                    1c:39:58:d3:24:f6:17:d5:05:14:83:4b:c3:cd:67:
                    ac:06:23:6b:91:ac:2c:f2:79:3b:bc:d2:37:6a:f3:
                    9d:92:8d:34:a4:81:4a:7d:7b:b1:07:ea:81:d8:18:
                    83:53:3f:b6:2b:8a:60:6a:9e:7c:e5:20:e5:74:d8:
                    7f:a8:94:a3:e0:7b:1d:78:3c:5f:03:80:7f:83:fe:
                    c0:88:de:ea:5e:43:a5:a6:ba:d4:a0:d7:92:43:55:
                    ff:b7:88:0a:9f:b8:14:3f:1c:a3:33:94:9f:8e:5f:
                    8c:80:23:13:b5:96:5a:31:90:73:59:ae:0b:96:19:
                    a6:63:77:29:34:4e:4f:df:e7:9b:64:d9:dd:35:c3:
                    df:ba:f2:45:8b:cc:d1:0b:54:de:a6:44:d5:53:55:
                    5d:e9:10:a7:ea:80:25:8c:e8:72:c5:28:6a:63:f6:
                    3e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:50:09:76:08:DB:22:D8:3B:32:8E:B8:DE:7F:DC:2C:54:2D:E5:03
            X509v3 Authority Key Identifier:
                keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/WVAJdgjbItg7Mo643n_cLFQt5QM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.154.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:e7:c9:aa:db:4c:67:23:3d:b1:75:59:f6:79:e3:51:63:3d:
         1c:55:cc:31:69:6e:71:09:e4:45:a9:a8:40:5b:26:84:a6:b9:
         c0:05:e1:7c:7f:ed:e9:f8:bc:4d:f1:14:a7:60:fc:e7:56:13:
         92:10:85:e7:79:6d:d6:b9:7b:c0:53:35:13:2b:6b:79:70:6b:
         59:37:d2:cc:74:4b:cc:ed:79:4c:fd:2d:7e:fc:a2:f7:0e:c8:
         6b:ae:05:26:70:66:f8:32:ae:de:53:35:63:95:83:58:4a:67:
         eb:3b:c3:1f:71:4a:11:5d:48:0b:a9:8a:24:ff:47:b7:01:ba:
         19:e4:95:58:8b:e9:99:f0:f7:60:25:68:cb:0b:04:87:7f:59:
         0d:44:6c:5a:e3:76:42:32:93:a1:e2:3c:86:8b:c4:4b:e4:fc:
         78:a9:2f:de:8d:ab:3d:9d:5b:59:9f:92:56:e9:49:79:64:88:
         78:12:31:c4:dc:df:81:d6:f8:4a:cc:85:a5:e6:72:ba:f8:81:
         fc:e3:5e:83:fc:19:86:aa:00:74:04:dc:61:1f:ce:0d:df:bf:
         a9:27:76:36:66:75:30:5c:13:53:06:43:3d:7b:05:f7:a4:60:
         c6:59:57:cd:1c:1a:1a:f2:8b:18:c5:1a:bd:28:65:2b:af:be:
         66:d8:10:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:28:39 2026 by rpki-client