This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/wshhYohjqXbtPI9N4_VP7v1zc_4.roa
File:                     wshhYohjqXbtPI9N4_VP7v1zc_4.roa (raw, json)
Hash identifier:          K9LIAOWThDljnJHgTvgI98ZZwaUx513/nLgNGKabvmI=
Subject key identifier:   C2:C8:61:62:88:63:A9:76:ED:3C:8F:4D:E3:F5:4F:EE:FD:73:73:FE
Certificate issuer:       /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial:       019B78A2CB27D81FF096284F45A888B0A762
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/wshhYohjqXbtPI9N4_VP7v1zc_4.roa
Signing time:             Thu 01 Jan 2026 08:18:13 +0000
ROA not before:           Thu 01 Jan 2026 08:18:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31077
IP address blocks:        91.192.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Feb 2026 03:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:cb:27:d8:1f:f0:96:28:4f:45:a8:88:b0:a7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
        Validity
            Not Before: Jan  1 08:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2c861628863a976ed3c8f4de3f54feefd7373fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:8d:86:0c:8a:00:1d:3d:08:8c:5f:f3:8d:
                    bc:ec:ca:4f:cf:1e:ee:95:0d:1a:e5:09:bd:1f:ce:
                    05:97:e7:61:e2:d3:2c:32:9b:24:13:61:2f:f6:44:
                    8f:29:59:d8:38:17:68:0c:fd:fa:06:22:2d:61:20:
                    9e:1d:eb:58:8f:51:a6:e9:22:ba:44:74:d0:77:9d:
                    4e:3a:a5:bb:54:ab:c6:64:e6:40:a5:da:9f:fd:5f:
                    65:1b:bd:be:32:67:79:98:62:48:5f:46:1d:32:b2:
                    bb:e6:ed:0b:4e:98:8e:dc:d0:76:a9:02:db:20:db:
                    45:7b:b1:6a:91:94:c3:9d:bd:71:29:1d:6d:25:5f:
                    89:21:c9:7d:63:24:70:cc:b1:23:7f:93:4b:ab:5a:
                    df:2f:f3:7a:28:cc:ea:5e:98:3c:a1:63:28:d0:d1:
                    f1:1c:18:d7:67:a9:1d:1c:5c:2b:85:3c:16:27:e6:
                    ce:1b:b8:a3:6e:89:c7:ca:86:f5:06:56:85:00:9e:
                    05:c3:a7:9e:66:ad:70:67:dc:a0:ca:5d:e4:66:c6:
                    4a:e7:9d:47:f3:68:a6:bf:0b:0c:a5:98:23:70:13:
                    2e:40:d4:4b:3f:44:f1:1e:c6:8e:ed:6d:4e:d4:60:
                    84:d8:28:80:93:3f:4d:f1:8c:e1:da:98:8a:2e:c1:
                    42:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C8:61:62:88:63:A9:76:ED:3C:8F:4D:E3:F5:4F:EE:FD:73:73:FE
            X509v3 Authority Key Identifier:
                keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/wshhYohjqXbtPI9N4_VP7v1zc_4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.192.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:bf:85:04:5e:47:7c:d3:9e:66:e7:3a:9e:53:d7:1a:6b:48:
         c7:03:6f:d5:09:e0:9c:0f:28:e8:b5:f5:37:7e:e8:90:80:5c:
         e7:8d:8f:e2:41:ba:05:b7:a4:4e:8a:8d:d8:8a:e5:43:5c:10:
         2e:67:7a:08:25:93:e6:40:dd:91:c1:74:4b:72:1c:78:1b:fb:
         ea:a0:f8:c3:b2:35:90:b2:e4:45:a5:98:4b:d3:b5:9d:3f:af:
         80:4f:43:65:19:66:35:3b:49:ac:01:38:e6:74:88:49:02:81:
         93:ff:85:63:78:75:3f:9c:6c:0c:70:83:fe:83:81:43:a2:fe:
         07:46:02:36:d1:e5:0f:4a:20:34:e4:7e:d3:25:a6:c6:76:56:
         1f:57:91:60:16:fd:93:37:a8:72:8a:27:e7:3f:40:81:df:e8:
         e1:e5:02:c4:7f:17:ac:81:cd:c8:57:80:f5:72:f3:ce:64:de:
         0e:5f:92:bc:2e:b2:58:17:ea:da:73:28:c9:97:46:3d:d3:30:
         c0:cc:f6:df:01:72:6a:bf:9f:7b:30:40:94:bc:ee:a7:02:00:
         23:01:e1:e5:fd:25:12:a9:df:1a:1d:b8:61:81:4c:1a:16:5b:
         96:81:42:6e:d1:c1:58:cf:05:6e:de:5b:82:93:ea:0c:6a:a3:
         62:ae:a9:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4ossn2B/wlihPRaiIsKdiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYWVhMzU4YWVlZWI3ZDBiOWUwZjkzZDIzZjY3ZDI5YTdl
YzYyYzgwHhcNMjYwMTAxMDgxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmM4NjE2Mjg4NjNhOTc2ZWQzYzhmNGRlM2Y1NGZlZWZkNzM3M2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwyNhgyKAB09CIxf84287MpPzx7u
lQ0a5Qm9H84Fl+dh4tMsMpskE2Ev9kSPKVnYOBdoDP36BiItYSCeHetYj1Gm6SK6
RHTQd51OOqW7VKvGZOZApdqf/V9lG72+Mmd5mGJIX0YdMrK75u0LTpiO3NB2qQLb
INtFe7FqkZTDnb1xKR1tJV+JIcl9YyRwzLEjf5NLq1rfL/N6KMzqXpg8oWMo0NHx
HBjXZ6kdHFwrhTwWJ+bOG7ijbonHyob1BlaFAJ4Fw6eeZq1wZ9ygyl3kZsZK551H
82imvwsMpZgjcBMuQNRLP0TxHsaO7W1O1GCE2CiAkz9N8Yzh2piKLsFCUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMLIYWKIY6l27TyPTeP1T+79c3P+MB8GA1UdIwQY
MBaAFL+uo1iu7rfQueD5PSP2fSmn7GLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjY2aldLN3V0OUM1NFBrOUlfWjlLYWZzWXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yODg0MTYtYTQ2ZS00OWMzLTkzMzct
MjQ5Y2UwYzMxMmIzLzEvd3NoaFlvaGpxWGJ0UEk5TjRfVlA3djF6Y180LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8yODg0MTYtYTQ2ZS00OWMzLTkzMzctMjQ5Y2UwYzMxMmIz
LzEvdjY2aldLN3V0OUM1NFBrOUlfWjlLYWZzWXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8C4MA0G
CSqGSIb3DQEBCwUAA4IBAQBQv4UEXkd8055m5zqeU9caa0jHA2/VCeCcDyjotfU3
fuiQgFznjY/iQboFt6ROio3YiuVDXBAuZ3oIJZPmQN2RwXRLchx4G/vqoPjDsjWQ
suRFpZhL07WdP6+AT0NlGWY1O0msATjmdIhJAoGT/4VjeHU/nGwMcIP+g4FDov4H
RgI20eUPSiA05H7TJabGdlYfV5FgFv2TN6hyiifnP0CB3+jh5QLEfxesgc3IV4D1
cvPOZN4OX5K8LrJYF+racyjJl0Y90zDAzPbfAXJqv597MECUvO6nAgAjAeHl/SUS
qd8aHbhhgUwaFluWgUJu0cFYzwVu3luCk+oMaqNirqlE
-----END CERTIFICATE-----
Generated at Sun Feb 8 08:10:19 2026 by rpki-client