This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/WrwILJOkKv94JvYqGUNiy47Tb9E.roa
File:                     WrwILJOkKv94JvYqGUNiy47Tb9E.roa (raw, json)
Hash identifier:          Bjce6gPk82s+U9N9AWLeoylnd69kztnleXwX8PYNeuA=
Subject key identifier:   5A:BC:08:2C:93:A4:2A:FF:78:26:F6:2A:19:43:62:CB:8E:D3:6F:D1
Certificate issuer:       /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial:       019B78A28D5BCD78BACB5D814B09D9C83125
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/WrwILJOkKv94JvYqGUNiy47Tb9E.roa
Signing time:             Thu 01 Jan 2026 08:17:57 +0000
ROA not before:           Thu 01 Jan 2026 08:17:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201661
IP address blocks:        91.198.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:8d:5b:cd:78:ba:cb:5d:81:4b:09:d9:c8:31:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
        Validity
            Not Before: Jan  1 08:17:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5abc082c93a42aff7826f62a194362cb8ed36fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:83:19:ed:4a:dd:2c:f9:bf:64:83:10:82:
                    dd:c6:90:f4:cc:f0:78:58:33:83:f2:cb:f8:3a:06:
                    a5:03:29:1b:ba:d1:6f:70:64:59:b9:18:86:dc:a5:
                    37:c8:bf:20:a9:7b:8b:39:9a:c1:ae:2b:45:ad:06:
                    54:70:9d:c7:66:03:b7:0b:0c:18:ab:ed:b4:47:cb:
                    e2:0b:bc:8a:43:77:cd:2b:4b:cf:88:c7:f3:6c:2d:
                    af:36:54:b8:f7:27:67:94:63:0e:e0:ca:41:5c:2d:
                    b7:6c:d1:66:a8:e5:5f:71:05:cb:e9:cd:49:e7:78:
                    c1:3a:9d:b7:78:eb:b0:24:f0:bf:c1:be:7a:c9:60:
                    52:6e:6d:62:57:54:44:64:fa:d5:c7:82:ba:c1:2f:
                    61:b1:44:9b:ba:34:a3:c4:8a:92:d4:4b:fc:26:3a:
                    95:43:4f:ba:7d:0a:b5:b9:26:5d:87:c1:e4:17:af:
                    74:9f:2a:4b:2b:df:f4:06:c6:9b:c1:e4:99:d7:2f:
                    6a:6e:c4:43:08:b0:3f:3e:0d:b6:04:8c:0e:32:cd:
                    76:90:9b:10:5e:45:62:5c:22:1d:c9:7a:11:48:0b:
                    49:08:24:3e:4c:73:ef:b2:4f:53:8c:b6:fd:bc:75:
                    5b:90:a8:d6:5a:fa:fd:78:da:00:1f:0f:4a:87:2d:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BC:08:2C:93:A4:2A:FF:78:26:F6:2A:19:43:62:CB:8E:D3:6F:D1
            X509v3 Authority Key Identifier:
                keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/WrwILJOkKv94JvYqGUNiy47Tb9E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.198.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:0a:43:6d:3b:4b:d8:10:12:c6:17:3b:4d:1a:ea:7d:71:eb:
         e9:38:5c:52:4b:16:88:16:06:d8:85:69:11:59:06:3d:b8:7a:
         ab:cb:89:54:c0:a1:08:94:00:5d:52:7c:35:68:66:b6:ba:e0:
         27:2e:87:c3:12:0e:33:14:3c:b0:74:ee:9b:fd:41:01:3a:f2:
         a1:1f:e3:8e:86:b6:ed:71:95:70:a0:29:0a:c1:a1:99:fe:90:
         5e:06:68:23:1a:d0:d0:e3:e2:04:9c:3c:6c:ed:8d:71:42:ed:
         3d:62:c1:2e:bc:8f:60:f4:19:8f:82:e3:1f:97:50:11:ed:b6:
         98:01:ee:3e:db:4c:26:cf:ce:79:68:78:fb:66:1d:8c:79:c4:
         d4:1e:a4:95:c2:b4:54:1b:f8:3c:0b:4d:9a:63:fd:70:6f:16:
         6a:68:5e:15:17:bb:2b:f6:33:d9:dd:1c:75:08:f4:c4:02:3a:
         41:ad:2d:cc:11:7b:ec:3d:6d:9c:a2:d2:73:ba:1e:26:3f:04:
         b3:51:c1:ea:08:47:ff:2a:b7:2e:f7:97:37:76:4a:45:4f:74:
         ec:91:57:06:75:a5:76:32:7e:5e:6d:5b:09:8f:c3:1f:ac:15:
         59:5e:8f:8e:12:70:38:58:d6:1b:fd:d4:6b:95:f8:e3:98:37:
         9d:a3:ba:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:14:59 2026 by rpki-client