This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/WwxUIgZQzTDxG7ybBsjkioJXz8E.roa
File:                     WwxUIgZQzTDxG7ybBsjkioJXz8E.roa (raw, json)
Hash identifier:          MbjGJ2NlvdJnsdm83ackK73GTkTFyLBuLVC/1DFPquA=
Subject key identifier:   5B:0C:54:22:06:50:CD:30:F1:1B:BC:9B:06:C8:E4:8A:82:57:CF:C1
Certificate issuer:       /CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Certificate serial:       019B79102880404EA09AF694D065DE9010B5
Authority key identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/WwxUIgZQzTDxG7ybBsjkioJXz8E.roa
Signing time:             Thu 01 Jan 2026 10:17:40 +0000
ROA not before:           Thu 01 Jan 2026 10:17:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203667
IP address blocks:        185.233.72.0/22 maxlen: 22
                          2a0c:d700::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:28:80:40:4e:a0:9a:f6:94:d0:65:de:90:10:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
        Validity
            Not Before: Jan  1 10:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5b0c54220650cd30f11bbc9b06c8e48a8257cfc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:90:80:16:99:52:99:5a:bd:0f:ed:e2:f2:
                    5b:7f:c9:3f:4f:c1:0f:6d:db:b4:67:35:49:62:30:
                    be:35:ce:23:41:66:21:d6:30:c3:46:4b:f5:65:8e:
                    b0:14:3a:85:63:32:55:bd:f6:07:db:c4:ae:8b:9c:
                    1f:d2:14:02:e8:c2:f6:2a:0b:7e:5b:24:c7:f3:fe:
                    69:18:7f:f3:d7:2c:99:ef:4a:13:24:a3:9c:eb:4a:
                    33:1a:ad:0c:7d:65:09:5c:b8:fb:c3:a4:55:6f:71:
                    ea:8b:6f:90:40:42:2d:6b:76:d5:e3:df:3b:0a:d7:
                    56:73:5f:86:db:56:e3:2b:42:9d:1b:b8:78:3a:e4:
                    df:00:a7:b8:bd:aa:39:18:8c:16:57:d0:4f:9e:1f:
                    a2:8b:06:38:e0:08:17:5e:91:4d:28:ce:cb:33:fb:
                    c5:c5:ab:c0:78:f7:0f:bc:b8:9f:8d:ae:ce:91:f5:
                    8e:61:8a:1d:50:40:ca:de:d8:70:40:eb:1a:8e:fe:
                    d0:03:30:0a:df:70:a6:b7:24:b5:50:10:fe:29:db:
                    be:7b:37:01:65:a3:80:93:02:f9:78:3f:8a:c0:66:
                    a7:21:04:15:fe:71:36:70:e0:f1:60:97:a2:64:09:
                    73:43:c5:f6:fe:89:45:6e:70:80:01:aa:fe:4a:ea:
                    4d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0C:54:22:06:50:CD:30:F1:1B:BC:9B:06:C8:E4:8A:82:57:CF:C1
            X509v3 Authority Key Identifier:
                keyid:01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/WwxUIgZQzTDxG7ybBsjkioJXz8E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.72.0/22
                IPv6:
                  2a0c:d700::/29

    Signature Algorithm: sha256WithRSAEncryption
         b5:91:16:f3:7c:8a:ee:00:50:c6:13:8d:5b:24:89:10:a5:b0:
         38:e5:13:e9:f3:ab:c2:8d:11:31:92:97:63:4a:3a:de:2e:41:
         27:5a:48:5d:4b:78:0f:d0:33:5d:2c:02:30:fe:29:36:f1:17:
         30:02:8e:b7:8e:c0:d2:32:29:77:ca:3b:2d:f4:0e:79:38:c7:
         1c:23:45:6c:9a:47:de:7d:6c:88:22:16:ee:53:f2:dc:d9:4d:
         b9:70:b4:58:1c:74:81:4a:bc:2e:d3:e4:c2:b5:6a:d8:a4:d8:
         ee:c6:50:9c:b2:9f:e2:e0:b4:53:36:09:cd:27:ff:96:ef:85:
         0d:23:9c:10:a4:bc:cb:4f:c7:8d:ba:a6:29:91:a2:51:03:bd:
         ec:7c:1e:3f:47:7e:c2:c1:a7:f4:55:d6:19:cc:a8:42:1f:87:
         9f:44:7f:dd:0b:f0:8e:53:17:6c:3e:ac:8c:b7:d5:26:12:4a:
         01:24:2e:0b:04:8d:7b:60:67:70:bf:00:14:c6:5e:02:0e:79:
         2c:4b:ce:03:de:4f:c7:94:1a:ff:9d:79:ba:86:4c:ad:78:f3:
         cd:98:02:e7:a8:38:93:de:0e:9d:41:e3:5b:7c:41:0b:ac:e2:
         d7:18:f3:8b:6c:f5:fc:b7:b6:0d:ad:81:7e:b2:83:b7:c8:16:
         e1:e5:e4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:24:56 2026 by rpki-client