This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/WosD3hO75NeEA5i1pYu4jjBvKZk.roa
File:                     WosD3hO75NeEA5i1pYu4jjBvKZk.roa (raw, json)
Hash identifier:          OY0wCbzw4br81Lxlh7tGimlRcQLzd5IIOnNVOlypPYY=
Subject key identifier:   5A:8B:03:DE:13:BB:E4:D7:84:03:98:B5:A5:8B:B8:8E:30:6F:29:99
Certificate issuer:       /CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
Certificate serial:       019C1F30656F3B2F453444E0A2E8443A7149
Authority key identifier: 53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/WosD3hO75NeEA5i1pYu4jjBvKZk.roa
Signing time:             Mon 02 Feb 2026 16:29:51 +0000
ROA not before:           Mon 02 Feb 2026 16:29:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213069
IP address blocks:        91.231.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1f:30:65:6f:3b:2f:45:34:44:e0:a2:e8:44:3a:71:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
        Validity
            Not Before: Feb  2 16:29:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a8b03de13bbe4d7840398b5a58bb88e306f2999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1e:ea:e9:41:a0:56:2a:29:7c:37:ab:b8:a5:
                    8d:e5:ac:2e:86:7a:9c:8f:47:a0:33:16:4b:1b:56:
                    34:09:0b:8a:d5:4d:a4:c7:a4:a3:95:48:2d:76:84:
                    14:4f:6a:45:d8:a5:3c:2b:8a:70:85:31:99:45:f5:
                    ff:92:2c:3a:bf:1b:06:46:46:cb:da:90:e9:10:0c:
                    b4:c6:aa:e8:f9:cb:2f:56:d6:44:1f:93:97:97:1c:
                    98:49:65:78:48:3e:c7:d7:31:4b:76:8a:cb:f6:07:
                    0b:f7:13:f6:9f:30:63:11:37:01:7c:f1:d3:97:12:
                    71:fc:83:41:4c:5a:b2:82:b4:98:22:a9:8e:6e:30:
                    3e:26:67:84:ec:dd:d8:ac:c2:1c:48:92:1b:ec:65:
                    23:bf:15:67:6f:b1:46:ea:ae:bf:f6:01:f5:2d:6a:
                    39:71:87:70:bd:0d:12:83:ee:85:b4:b8:09:5a:70:
                    2b:c7:ef:2e:6f:ca:5c:94:16:36:85:8a:6b:27:52:
                    89:60:9c:18:38:88:5b:8b:44:3b:c9:f2:82:a1:4d:
                    0c:dc:4c:96:01:42:ca:0e:b4:33:0f:16:16:38:19:
                    cd:30:95:1e:a7:05:b1:15:ce:61:7e:a9:a1:65:66:
                    34:db:17:99:84:84:9b:49:e1:58:a3:f3:54:e9:a5:
                    6c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8B:03:DE:13:BB:E4:D7:84:03:98:B5:A5:8B:B8:8E:30:6F:29:99
            X509v3 Authority Key Identifier:
                keyid:53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/WosD3hO75NeEA5i1pYu4jjBvKZk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.231.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:9d:56:7c:59:26:05:5e:4b:dd:8b:14:a1:67:af:5f:31:f7:
         81:90:d3:fc:ed:2a:8d:b7:57:9c:b3:7d:19:4a:2b:7d:1a:4e:
         53:c4:b9:28:51:b2:04:df:ce:73:aa:46:ef:52:8c:6a:a1:28:
         d5:60:19:d2:a8:7e:bf:36:f0:fa:63:5c:05:51:2f:47:b0:52:
         82:06:cd:ec:3e:c9:21:75:70:b6:51:99:67:e2:0c:7f:72:70:
         10:15:83:ab:a2:f6:90:37:7b:51:aa:8b:29:19:9e:73:c5:4d:
         d5:1e:7b:93:0b:65:5d:63:40:a3:3a:61:4d:0b:4f:f7:e0:e7:
         dc:45:dc:ab:60:98:72:cf:76:c2:28:16:49:22:64:c1:64:8a:
         7a:47:54:b6:a9:3f:96:81:59:10:b3:28:1f:7c:32:e5:87:04:
         f6:15:ef:89:c4:ed:36:bc:7e:7b:78:e8:92:cd:7b:ca:16:60:
         71:d6:75:de:d0:d9:81:b8:f6:77:77:e3:4f:7d:e6:08:18:c1:
         1c:4c:95:30:e4:7c:37:93:ba:1a:d6:4c:fb:db:84:b3:2e:e2:
         de:08:68:d1:35:2b:3c:b9:e6:46:71:65:f2:1d:54:92:82:60:
         77:e0:da:c7:11:12:2d:a8:54:86:36:32:39:6a:9c:35:1e:5a:
         af:cc:f7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:39:55 2026 by rpki-client