This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/WoJUK_VlF2x2Y6RewR1W0jcXELM.roa
File:                     WoJUK_VlF2x2Y6RewR1W0jcXELM.roa (raw, json)
Hash identifier:          49/N0yckcfgw+Jpt1B3ZylVpCRtLmR+tToTlhzbYrNM=
Subject key identifier:   5A:82:54:2B:F5:65:17:6C:76:63:A4:5E:C1:1D:56:D2:37:17:10:B3
Certificate issuer:       /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial:       019B7C11348443716A500AC0D83DF5B9A2B5
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/WoJUK_VlF2x2Y6RewR1W0jcXELM.roa
Signing time:             Fri 02 Jan 2026 00:17:40 +0000
ROA not before:           Fri 02 Jan 2026 00:17:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43474
IP address blocks:        2a00:ece1:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:11:34:84:43:71:6a:50:0a:c0:d8:3d:f5:b9:a2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
        Validity
            Not Before: Jan  2 00:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a82542bf565176c7663a45ec11d56d2371710b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dd:04:97:e7:14:b4:00:ae:db:6e:fe:37:21:
                    47:28:b7:cc:36:c7:6e:d7:ab:42:56:e2:54:ed:b0:
                    0e:ad:53:c0:31:33:3d:1b:f8:4c:89:ab:a4:cb:a4:
                    97:de:6c:d3:13:fb:79:22:53:d4:fa:3e:d3:9f:61:
                    83:4b:d7:75:7c:15:19:14:d1:46:c9:c7:b0:1d:f4:
                    9d:d4:3c:cd:fe:31:13:d6:80:1a:8e:ad:67:2d:29:
                    d2:62:32:6d:37:d9:40:df:2c:05:cc:4b:fe:67:28:
                    13:8e:04:94:1e:5e:d2:4f:be:64:c0:df:9b:c3:06:
                    8c:e8:9a:da:5b:5b:8e:50:49:96:98:ca:3f:db:c3:
                    cd:2e:83:d2:77:a2:04:d8:cd:77:25:b2:38:44:e9:
                    dc:af:49:3e:ab:36:6a:77:dd:65:79:f4:10:ce:5d:
                    81:c2:2f:fd:94:98:e7:e9:48:b0:26:9d:71:f5:20:
                    3a:35:9a:f1:08:67:7e:29:ec:e1:ac:29:25:25:3f:
                    a8:82:d8:75:5c:8e:d9:96:95:14:2b:4d:e1:9d:94:
                    5f:de:97:a5:a6:12:be:08:6f:c0:fe:b5:6c:86:67:
                    d4:51:ab:b6:7c:bf:d3:94:aa:15:ea:64:8f:1d:d1:
                    d3:02:ce:64:a3:58:0e:1c:61:56:03:3d:35:52:95:
                    5f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:82:54:2B:F5:65:17:6C:76:63:A4:5E:C1:1D:56:D2:37:17:10:B3
            X509v3 Authority Key Identifier:
                keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/WoJUK_VlF2x2Y6RewR1W0jcXELM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:ece1:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:f5:44:e1:ae:56:f5:1a:02:c9:66:00:8a:a1:33:4b:de:5e:
         d9:37:a5:3d:33:1c:56:21:ca:86:f8:0d:92:3a:35:8a:fc:5f:
         5e:69:fd:a2:a4:dd:6a:f0:f0:27:bd:c1:53:83:ac:9a:cf:2c:
         81:ba:1a:d3:d1:37:bc:f0:99:7a:2a:a7:a0:7f:e0:c7:1e:83:
         00:3e:2b:11:5a:f1:23:99:76:b3:53:05:cf:0d:27:5d:f6:7c:
         ce:86:46:5b:94:53:36:12:35:62:2a:c6:ac:25:df:8f:dd:54:
         b3:76:db:db:99:e9:be:b0:ea:1d:53:99:64:31:f4:f3:d6:d7:
         7a:0b:a7:40:bf:28:a2:27:53:54:06:f7:c3:32:f0:e1:04:c8:
         b0:10:58:39:6d:0f:ea:58:2d:fd:f0:25:38:58:4b:55:8e:e1:
         6f:87:c7:93:11:9b:7c:1e:05:91:71:f9:9b:a5:5a:61:12:34:
         36:f2:45:ee:d2:3c:e1:4a:42:66:9a:7a:9d:a9:f8:83:96:da:
         16:12:54:5f:d5:73:9b:b6:18:41:82:14:c5:06:69:82:fd:92:
         ae:d6:58:33:98:74:28:77:6f:cd:10:69:73:dd:c3:23:dd:34:
         f1:0e:84:b5:d4:d8:62:5a:76:80:36:b7:60:4f:b7:df:1f:ea:
         ff:83:ed:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:54:53 2026 by rpki-client