This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/wnofk64UVBKP93Op1kPJw8OAZVA.roa
File:                     wnofk64UVBKP93Op1kPJw8OAZVA.roa (raw, json)
Hash identifier:          tsj9FpIfOqGKJfVIRwRR/8c5mdUoax0lYr1/5kPg6Rc=
Subject key identifier:   C2:7A:1F:93:AE:14:54:12:8F:F7:73:A9:D6:43:C9:C3:C3:80:65:50
Certificate issuer:       /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial:       019B79ED6AF55510F37313C0B5AC586043C2
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/wnofk64UVBKP93Op1kPJw8OAZVA.roa
Signing time:             Thu 01 Jan 2026 14:19:21 +0000
ROA not before:           Thu 01 Jan 2026 14:19:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210538
IP address blocks:        87.248.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 17:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:6a:f5:55:10:f3:73:13:c0:b5:ac:58:60:43:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
        Validity
            Not Before: Jan  1 14:19:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c27a1f93ae1454128ff773a9d643c9c3c3806550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e6:54:4a:de:60:16:69:9d:f5:0c:30:77:07:
                    7e:15:d1:60:9c:0a:93:29:2b:6c:e0:75:aa:ac:36:
                    61:36:c7:99:e7:ce:1e:df:7f:3d:0b:59:05:0e:61:
                    0b:d1:16:1a:f9:a6:93:cb:43:27:5e:03:07:35:12:
                    5b:b0:2c:51:b5:05:68:8e:3d:02:40:96:be:e9:1d:
                    72:c8:57:f3:27:e2:ba:d4:35:d4:50:88:76:54:c0:
                    15:7f:cb:64:e2:80:e5:74:fe:19:c7:cf:bf:4a:58:
                    2e:54:ad:ac:6b:a5:5f:90:56:8e:60:f1:95:7b:e0:
                    43:c9:c6:80:87:e0:6f:0c:53:d1:55:31:d9:74:06:
                    5b:6f:8a:5a:56:f8:b1:a8:fb:60:08:b9:23:04:a2:
                    47:00:cd:02:1a:3b:5a:19:87:a5:de:ab:37:fc:6c:
                    1a:a0:d7:1a:7c:3a:d8:cb:2f:bd:a7:63:23:fe:0a:
                    72:95:ca:c8:47:15:2e:12:06:57:1e:64:e2:b4:2f:
                    3b:98:17:6d:f6:d6:67:30:24:da:70:ed:29:f5:8d:
                    6f:63:65:34:e0:57:6b:91:50:b2:bc:03:7f:2b:31:
                    1b:55:8c:4f:c0:6f:26:60:b7:e6:5e:16:e8:42:3e:
                    66:5b:d0:45:b3:dc:02:57:9d:30:84:dc:dc:1f:37:
                    d3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7A:1F:93:AE:14:54:12:8F:F7:73:A9:D6:43:C9:C3:C3:80:65:50
            X509v3 Authority Key Identifier:
                keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/wnofk64UVBKP93Op1kPJw8OAZVA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.248.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:40:81:b3:9b:1d:69:14:f2:36:9d:6d:08:82:c5:2f:48:e6:
         3a:99:a6:26:63:f3:3a:33:34:83:f9:e5:63:3e:c0:fc:c0:30:
         d5:ca:91:43:47:7b:c6:56:9c:8e:a8:74:c6:24:28:36:96:ab:
         ee:97:1a:a6:18:e8:3c:ce:9b:f2:f1:3a:3e:48:1a:1f:be:13:
         59:24:c4:c5:51:b9:04:85:92:c9:ed:bb:e2:e5:68:c5:07:71:
         d7:60:63:3b:eb:25:e6:94:6b:32:2f:66:d9:b1:70:56:ac:cd:
         de:a4:bb:49:30:24:11:2e:00:20:60:b4:5a:9a:91:24:cb:47:
         89:c3:4a:12:7c:df:a3:8d:f2:0f:0d:26:46:ad:31:6a:65:9f:
         40:7e:9f:aa:d9:da:34:3f:d5:be:20:2d:56:39:9f:70:29:b2:
         ca:45:b1:3f:e9:54:24:52:82:80:26:78:c8:37:5c:b0:29:bd:
         ce:20:ae:d5:8a:7e:d8:7a:e4:62:7e:2a:ab:37:7f:17:6f:0c:
         44:a5:f0:2d:50:ff:f5:da:6a:ae:9d:b7:8c:84:46:38:2a:ba:
         d9:18:42:b5:8f:4b:3e:5d:c4:ff:85:e9:37:30:18:85:aa:56:
         25:c8:ee:d2:b6:c2:9b:05:6d:c6:66:de:4a:b6:d7:f8:53:6b:
         3b:d3:9e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:20:47 2026 by rpki-client