This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/WyJkTQDxeU--B8tMbQaUhVBkzwA.roa
File:                     WyJkTQDxeU--B8tMbQaUhVBkzwA.roa (raw, json)
Hash identifier:          aGt5pAbUTrRi1DGDiWRes6dRqU4nVpyBZTbysU7oWyA=
Subject key identifier:   5B:22:64:4D:00:F1:79:4F:BE:07:CB:4C:6D:06:94:85:50:64:CF:00
Certificate issuer:       /CN=c1eb076d16702c7dbea972e2972ef576a1f2c873
Certificate serial:       019B7D5C616DF9A061E8BEE5373B867DBA51
Authority key identifier: C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/WyJkTQDxeU--B8tMbQaUhVBkzwA.roa
Signing time:             Fri 02 Jan 2026 06:19:24 +0000
ROA not before:           Fri 02 Jan 2026 06:19:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43573
IP address blocks:        185.32.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:61:6d:f9:a0:61:e8:be:e5:37:3b:86:7d:ba:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1eb076d16702c7dbea972e2972ef576a1f2c873
        Validity
            Not Before: Jan  2 06:19:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5b22644d00f1794fbe07cb4c6d0694855064cf00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:96:14:7c:42:20:cd:88:8c:6c:69:ce:1b:85:
                    2b:e3:9a:5b:87:fb:a5:01:28:85:21:44:1a:21:47:
                    71:3e:45:c1:d0:c7:ad:f3:70:ef:1f:4e:49:01:0a:
                    12:b2:0f:17:11:cc:4e:0a:a8:e5:34:a0:28:b8:af:
                    b0:c2:f8:c5:27:59:dd:be:eb:95:ab:68:80:3f:8f:
                    e9:d8:a9:eb:cc:47:77:3d:c5:f4:94:d9:e5:6b:7e:
                    38:49:74:e5:63:b3:cf:76:60:a4:0c:0c:5c:c4:b9:
                    5e:af:3c:de:be:a9:79:56:4c:6b:eb:c0:03:e3:3c:
                    be:76:89:b8:50:ff:3c:63:40:51:35:3a:cb:ca:94:
                    a8:30:f6:af:fe:52:6d:68:9d:3b:9e:80:0c:d9:84:
                    43:cf:0c:e6:4f:e3:26:9e:03:8f:47:47:d8:13:7a:
                    ca:f0:ee:51:2c:46:8c:9d:d8:7c:99:b8:af:38:86:
                    b7:8e:c3:57:5b:b2:2d:26:8c:80:22:24:5b:52:75:
                    17:6a:8e:9d:37:c1:4f:d6:82:84:e4:35:d1:d1:b3:
                    43:42:33:75:d5:c1:99:57:6c:ab:28:cc:a5:a5:41:
                    a7:1e:7d:b8:41:b6:98:af:c0:0a:21:67:46:a7:92:
                    89:eb:cd:11:10:74:63:ed:aa:9e:d0:67:ba:f9:f3:
                    39:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:22:64:4D:00:F1:79:4F:BE:07:CB:4C:6D:06:94:85:50:64:CF:00
            X509v3 Authority Key Identifier:
                keyid:C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/WyJkTQDxeU--B8tMbQaUhVBkzwA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.32.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:6a:54:65:51:9a:0e:1f:b9:4c:e8:68:81:3a:16:21:ad:ab:
         ff:d5:cd:bc:b6:dd:03:7c:91:d0:b3:fc:7c:5e:96:18:49:2b:
         23:00:53:20:0f:92:c5:9a:da:f1:fa:9f:e2:4c:6e:4b:03:ef:
         64:99:ad:df:23:a3:c1:cc:7c:ad:a1:63:ab:e5:58:d8:7e:4b:
         df:cb:39:52:e6:00:1e:72:07:01:e2:2c:e5:25:ac:89:37:3a:
         14:63:c5:0f:e1:73:8b:e7:f8:13:d6:6c:f0:88:43:89:6a:24:
         c2:dc:8c:bc:56:4a:ce:56:1a:d1:db:f5:ac:45:c9:3c:ea:d6:
         74:78:90:72:27:1e:3a:6c:f8:77:c5:9b:25:46:a9:63:29:7b:
         e5:cf:98:25:81:0d:ae:0b:60:56:73:20:bd:1e:97:d9:fc:02:
         e9:f9:eb:82:fc:b0:08:5e:10:70:09:df:1a:c2:b9:4a:86:fc:
         af:86:60:d6:75:55:dd:57:2d:23:51:71:38:ed:d7:07:e6:c7:
         06:ca:49:ba:6d:71:b1:90:72:6d:79:28:5b:fa:61:bf:80:a7:
         08:99:10:0a:d3:20:53:4d:26:59:50:4f:83:02:7e:d2:98:ab:
         38:3d:ef:9a:e6:45:17:25:1b:41:91:9a:ef:d4:be:ce:18:e7:
         28:f8:64:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9XGFt+aBh6L7lNzuGfbpRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZWIwNzZkMTY3MDJjN2RiZWE5NzJlMjk3MmVmNTc2YTFm
MmM4NzMwHhcNMjYwMTAyMDYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjIyNjQ0ZDAwZjE3OTRmYmUwN2NiNGM2ZDA2OTQ4NTUwNjRjZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpYUfEIgzYiMbGnOG4Ur45pbh/ul
ASiFIUQaIUdxPkXB0Met83DvH05JAQoSsg8XEcxOCqjlNKAouK+wwvjFJ1ndvuuV
q2iAP4/p2KnrzEd3PcX0lNnla344SXTlY7PPdmCkDAxcxLlerzzevql5Vkxr68AD
4zy+dom4UP88Y0BRNTrLypSoMPav/lJtaJ07noAM2YRDzwzmT+MmngOPR0fYE3rK
8O5RLEaMndh8mbivOIa3jsNXW7ItJoyAIiRbUnUXao6dN8FP1oKE5DXR0bNDQjN1
1cGZV2yrKMylpUGnHn24QbaYr8AKIWdGp5KJ680REHRj7aqe0Ge6+fM59wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFsiZE0A8XlPvgfLTG0GlIVQZM8AMB8GA1UdIwQY
MBaAFMHrB20WcCx9vqly4pcu9Xah8shzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2VzSGJSWndMSDItcVhMaWx5NzFkcUh5eUhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNDNjNmUtMzQ5Yy00OTE0LThkYTMt
NmMzMmE2YWIxZWYyLzEvV3lKa1RRRHhlVS0tQjh0TWJRYVVoVkJrendBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9hNDNjNmUtMzQ5Yy00OTE0LThkYTMtNmMzMmE2YWIxZWYy
LzEvd2VzSGJSWndMSDItcVhMaWx5NzFkcUh5eUhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSBnMA0G
CSqGSIb3DQEBCwUAA4IBAQAFalRlUZoOH7lM6GiBOhYhrav/1c28tt0DfJHQs/x8
XpYYSSsjAFMgD5LFmtrx+p/iTG5LA+9kma3fI6PBzHytoWOr5VjYfkvfyzlS5gAe
cgcB4izlJayJNzoUY8UP4XOL5/gT1mzwiEOJaiTC3Iy8VkrOVhrR2/WsRck86tZ0
eJByJx46bPh3xZslRqljKXvlz5glgQ2uC2BWcyC9HpfZ/ALp+euC/LAIXhBwCd8a
wrlKhvyvhmDWdVXdVy0jUXE47dcH5scGykm6bXGxkHJteShb+mG/gKcImRAK0yBT
TSZZUE+DAn7SmKs4Pe+a5kUXJRtBkZrv1L7OGOco+GTK
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:02 2026 by rpki-client