This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/wsHpLkBYw1EeftdDR6sp04VigBw.roa
File:                     wsHpLkBYw1EeftdDR6sp04VigBw.roa (raw, json)
Hash identifier:          /kY3oNdD/MtjNpfjYxiTgX3Hn7hLZLYXv3Sx0dMMAnA=
Subject key identifier:   C2:C1:E9:2E:40:58:C3:51:1E:7E:D7:43:47:AB:29:D3:85:62:80:1C
Certificate issuer:       /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial:       019B7D5C75DE62330C890093FB3D688BB184
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/wsHpLkBYw1EeftdDR6sp04VigBw.roa
Signing time:             Fri 02 Jan 2026 06:19:30 +0000
ROA not before:           Fri 02 Jan 2026 06:19:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     7155
IP address blocks:        193.77.30.0/24 maxlen: 24
                          193.77.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:75:de:62:33:0c:89:00:93:fb:3d:68:8b:b1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
        Validity
            Not Before: Jan  2 06:19:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2c1e92e4058c3511e7ed74347ab29d38562801c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d1:85:4c:25:b4:d7:77:7d:f7:db:61:f6:11:
                    68:26:cf:a8:33:16:90:40:ab:d8:54:c6:9d:44:f5:
                    d0:af:70:a0:7e:00:48:46:81:06:3a:43:1e:2e:e8:
                    93:8d:9a:f9:c2:03:14:2c:55:3d:84:47:1e:af:5e:
                    2d:3a:1e:c2:93:bc:37:27:0d:16:a4:de:17:36:00:
                    8d:c5:1c:3f:40:64:d3:c8:bd:24:ba:f2:ca:11:b8:
                    f2:87:b7:67:9a:62:89:94:0e:cc:b7:d3:9b:da:52:
                    05:1e:2b:76:03:64:8b:00:86:12:f2:ab:a4:5f:1c:
                    d4:d8:d6:39:4d:9c:d2:3f:69:c9:be:e3:7b:61:26:
                    08:23:15:3e:e0:21:88:da:90:df:aa:b7:2d:d4:27:
                    83:04:96:ba:1c:06:48:98:e9:28:6b:d8:96:52:64:
                    17:eb:a0:a1:62:2a:a1:a0:7d:12:e8:fd:cf:a9:55:
                    3d:49:01:14:62:20:fc:ab:3e:91:c0:88:cf:24:6a:
                    fe:b4:d3:80:16:7a:ab:0e:b3:8b:4f:ab:49:0e:7a:
                    da:4a:f5:cd:9e:29:5f:e3:3d:27:0f:2b:14:e8:05:
                    dd:53:92:72:87:e5:47:be:a0:76:9d:b5:d8:19:43:
                    14:0b:f3:08:26:53:55:b0:75:8d:07:8e:e7:15:ce:
                    4e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C1:E9:2E:40:58:C3:51:1E:7E:D7:43:47:AB:29:D3:85:62:80:1C
            X509v3 Authority Key Identifier:
                keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/wsHpLkBYw1EeftdDR6sp04VigBw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.77.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:c8:3a:c3:a3:8f:ce:c4:8e:87:37:24:15:52:90:39:42:67:
         a6:73:9e:88:40:31:94:b5:fb:fc:79:d4:6c:e9:01:0d:d3:6b:
         8f:34:f4:5f:c1:ca:85:53:6a:79:ba:b9:e0:57:d6:a5:54:18:
         c3:c1:05:bc:a3:bb:4d:03:3f:3d:3d:54:f2:eb:d2:46:ed:66:
         03:6c:01:57:22:1b:a7:41:89:a9:c1:3b:1f:66:63:40:9f:df:
         ad:7e:96:84:70:65:21:41:1c:04:52:b0:59:03:b5:d4:cb:c5:
         27:37:5c:40:eb:84:93:73:e3:d8:4d:86:cd:07:6e:6a:14:fa:
         1f:88:ed:b3:fe:00:e5:2f:c6:64:8c:94:0f:28:98:b6:f9:7e:
         0a:50:58:01:1a:dc:20:e9:49:32:5a:27:13:66:c7:2b:14:0b:
         86:e5:f3:ad:79:c8:65:9f:d6:6f:48:2f:64:19:e9:b6:bc:65:
         52:65:73:5d:55:64:f9:9c:94:d7:40:bb:c9:19:27:a0:03:ca:
         a0:ea:04:e6:7a:0b:09:ca:7c:68:88:f3:ac:33:82:d0:7f:6f:
         37:f7:5d:61:95:c3:9e:82:82:c6:a9:f0:e0:b5:9a:11:8c:be:
         a3:9a:e7:3e:38:65:4b:9b:0d:d0:c5:43:2d:b1:e6:2c:a6:f1:
         24:91:b8:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9XHXeYjMMiQCT+z1oi7GEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MzUwYWE4YTk0YWY2NjYwOTlmZDA3M2VjNjIxY2QxNWQw
NGIzMTYwHhcNMjYwMTAyMDYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmMxZTkyZTQwNThjMzUxMWU3ZWQ3NDM0N2FiMjlkMzg1NjI4MDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldGFTCW013d999th9hFoJs+oMxaQ
QKvYVMadRPXQr3CgfgBIRoEGOkMeLuiTjZr5wgMULFU9hEcer14tOh7Ck7w3Jw0W
pN4XNgCNxRw/QGTTyL0kuvLKEbjyh7dnmmKJlA7Mt9Ob2lIFHit2A2SLAIYS8quk
XxzU2NY5TZzSP2nJvuN7YSYIIxU+4CGI2pDfqrct1CeDBJa6HAZImOkoa9iWUmQX
66ChYiqhoH0S6P3PqVU9SQEUYiD8qz6RwIjPJGr+tNOAFnqrDrOLT6tJDnraSvXN
nilf4z0nDysU6AXdU5Jyh+VHvqB2nbXYGUMUC/MIJlNVsHWNB47nFc5OqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMLB6S5AWMNRHn7XQ0erKdOFYoAcMB8GA1UdIwQY
MBaAFCQ1CqipSvZmCZ/Qc+xiHNFdBLMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEt
YjQyNTIyZDA1ODk1LzEvd3NIcExrQll3MUVlZnRkRFI2c3AwNFZpZ0J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEtYjQyNTIyZDA1ODk1
LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwU0eMA0G
CSqGSIb3DQEBCwUAA4IBAQAYyDrDo4/OxI6HNyQVUpA5Qmemc56IQDGUtfv8edRs
6QEN02uPNPRfwcqFU2p5urngV9alVBjDwQW8o7tNAz89PVTy69JG7WYDbAFXIhun
QYmpwTsfZmNAn9+tfpaEcGUhQRwEUrBZA7XUy8UnN1xA64STc+PYTYbNB25qFPof
iO2z/gDlL8ZkjJQPKJi2+X4KUFgBGtwg6UkyWicTZscrFAuG5fOtechln9ZvSC9k
Gem2vGVSZXNdVWT5nJTXQLvJGSegA8qg6gTmegsJynxoiPOsM4LQf283911hlcOe
goLGqfDgtZoRjL6jmuc+OGVLmw3QxUMtseYspvEkkbjU
-----END CERTIFICATE-----
Generated at Tue Jan 27 02:50:12 2026 by rpki-client