This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/W7FoM9P8V95TjMG5CxF-kXC2djY.roa
File:                     W7FoM9P8V95TjMG5CxF-kXC2djY.roa (raw, json)
Hash identifier:          cqNL2j3ndLF7zdz8pZtr2cRhV6k7abA3ZyK4595EJ/s=
Subject key identifier:   5B:B1:68:33:D3:FC:57:DE:53:8C:C1:B9:0B:11:7E:91:70:B6:76:36
Certificate issuer:       /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial:       019B7EA560ECFA9EBE1BB488F6EC0651DBFA
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/W7FoM9P8V95TjMG5CxF-kXC2djY.roa
Signing time:             Fri 02 Jan 2026 12:18:46 +0000
ROA not before:           Fri 02 Jan 2026 12:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41320
IP address blocks:        195.26.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a5:60:ec:fa:9e:be:1b:b4:88:f6:ec:06:51:db:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
        Validity
            Not Before: Jan  2 12:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5bb16833d3fc57de538cc1b90b117e9170b67636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:85:16:01:7f:b5:fd:f5:96:79:ea:7d:f5:36:
                    f7:27:68:54:8b:30:d8:aa:c5:8f:5a:1e:17:dc:76:
                    fd:07:f3:03:44:d8:ab:1f:f2:97:89:49:5e:8f:d6:
                    b4:68:7c:0e:e2:29:0e:fb:0f:c9:1b:31:5c:f3:e5:
                    0d:6b:2e:3d:16:ef:2f:a1:e6:bf:a5:cb:b4:38:47:
                    f6:c4:f3:1c:32:6e:19:6b:82:e0:01:0c:a9:00:04:
                    91:11:45:1f:5b:1b:76:f2:e5:b8:40:c7:9c:a7:10:
                    bc:a5:d4:66:0a:10:27:4e:2b:c0:06:65:ab:fb:40:
                    b4:06:61:ec:d0:70:53:8f:28:93:28:d7:83:57:df:
                    93:97:eb:bc:a7:ca:12:19:3e:7e:a2:b4:7e:35:9c:
                    7b:5b:01:74:5f:d7:45:5c:21:7b:13:ff:d2:db:64:
                    3a:f4:58:ac:62:65:3f:cf:5a:af:8d:82:92:1a:43:
                    ce:21:b0:98:ff:c3:0d:0a:dc:14:b0:71:fb:9e:5d:
                    9f:d8:e2:40:a7:c0:4e:40:fc:ab:35:75:37:f0:53:
                    ee:cf:f7:42:23:1a:e3:26:88:d1:1c:c7:1b:28:27:
                    a1:e2:39:e2:fe:1e:15:99:47:0c:65:20:0a:fc:1e:
                    97:f1:d9:1a:fc:27:e3:6d:6b:1c:29:2b:33:27:6c:
                    88:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B1:68:33:D3:FC:57:DE:53:8C:C1:B9:0B:11:7E:91:70:B6:76:36
            X509v3 Authority Key Identifier:
                keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/W7FoM9P8V95TjMG5CxF-kXC2djY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.26.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:d2:b9:36:b5:69:d4:27:bd:1f:fb:43:06:4c:8a:74:83:eb:
         5e:34:f3:6e:08:de:7b:97:b6:3f:da:9f:16:37:5c:e9:52:ba:
         15:c8:b1:4e:ba:93:db:29:33:ef:ec:84:e4:5f:e4:43:cc:85:
         d7:26:0f:c7:ca:ff:8d:e6:64:72:c2:9b:88:d9:53:0e:06:e2:
         a3:3b:80:7e:ec:b7:35:39:40:90:c9:fa:41:f2:36:59:7c:f2:
         3b:be:58:a8:8c:fa:34:28:2e:ae:19:81:71:d3:1c:52:b4:15:
         f6:90:98:d6:6a:6b:13:11:66:e7:92:2a:61:40:56:1d:82:7a:
         86:0e:f2:8b:2c:e2:ce:c1:ba:b1:64:5c:d8:56:3b:71:57:11:
         5c:be:8f:04:d3:cf:08:2a:2e:aa:c2:f6:8d:5b:ad:e0:fe:93:
         49:44:48:ad:e6:24:f1:2d:35:f6:6c:88:f9:32:57:c4:c4:da:
         35:12:2d:76:56:82:f9:9a:f3:f7:eb:51:15:00:8c:12:af:a2:
         2f:4c:fb:da:75:ca:53:6c:6f:58:6d:59:25:03:1d:a6:a6:1a:
         2c:ae:8d:94:52:00:29:03:64:99:d3:0b:a7:c4:77:64:ff:cf:
         2b:01:d5:40:36:9b:2f:e4:b3:9b:d0:6f:ed:5e:c4:93:37:59:
         a3:c6:d5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:08 2026 by rpki-client