This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/WRypO8-yDgb6NJZCCYorwXfwXbM.roa
File:                     WRypO8-yDgb6NJZCCYorwXfwXbM.roa (raw, json)
Hash identifier:          4tIQDxaiySk1n1Tes8D8u/dP8eWmOAzkRZI8pT57S7U=
Subject key identifier:   59:1C:A9:3B:CF:B2:0E:06:FA:34:96:42:09:8A:2B:C1:77:F0:5D:B3
Certificate issuer:       /CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Certificate serial:       019B7C123C9EC395F3ABC4B5654020B10870
Authority key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/WRypO8-yDgb6NJZCCYorwXfwXbM.roa
Signing time:             Fri 02 Jan 2026 00:18:48 +0000
ROA not before:           Fri 02 Jan 2026 00:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50036
IP address blocks:        193.104.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:3c:9e:c3:95:f3:ab:c4:b5:65:40:20:b1:08:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
        Validity
            Not Before: Jan  2 00:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=591ca93bcfb20e06fa349642098a2bc177f05db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:92:9b:b9:96:96:50:70:0c:1a:b3:46:b4:fc:
                    35:23:7c:3b:11:f9:15:75:a4:7b:b7:00:b9:2e:87:
                    22:d8:49:85:dc:08:eb:3d:ea:70:b0:f5:88:e9:0d:
                    76:fd:d3:55:87:61:e6:19:eb:13:06:9e:d0:ec:1d:
                    eb:e3:90:48:23:f2:e8:fb:c4:ac:da:ca:4e:dd:5f:
                    4a:26:8b:f2:bc:e6:a9:7f:8c:ab:35:85:f5:85:04:
                    05:48:c2:a8:f1:23:a5:63:c4:0a:6b:3e:ef:5a:96:
                    39:f5:d6:da:4e:70:45:45:d6:8b:11:c1:7c:e2:65:
                    27:cb:69:18:96:dc:bd:9c:03:f2:e2:79:74:df:00:
                    a0:50:69:ab:a5:46:c1:72:f6:d9:36:83:33:8a:24:
                    3b:4b:a4:26:d6:e8:d8:8d:3a:60:58:59:6f:70:5e:
                    37:81:67:4e:be:5e:e7:1c:25:19:97:54:65:79:a3:
                    ae:73:df:67:d1:2a:a1:68:f8:2e:1b:e5:f6:da:ba:
                    54:34:7d:e7:16:0c:a3:a5:08:38:9f:57:f1:91:31:
                    70:64:ea:30:7c:93:99:7b:7d:a1:a5:50:29:2f:8d:
                    b2:c5:23:b0:9b:30:70:7f:20:0a:d7:52:af:c3:f3:
                    32:24:69:68:06:b1:d7:bd:f6:da:68:88:25:02:b2:
                    8e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1C:A9:3B:CF:B2:0E:06:FA:34:96:42:09:8A:2B:C1:77:F0:5D:B3
            X509v3 Authority Key Identifier:
                keyid:F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/WRypO8-yDgb6NJZCCYorwXfwXbM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ec:0b:e0:46:78:7c:5e:15:80:4f:6f:5f:05:da:86:c9:b0:
         1e:27:54:da:64:fa:f6:a5:64:45:bf:b2:c3:2c:c1:07:6a:ef:
         4a:de:c2:0e:ed:63:b0:1b:8e:5b:1f:77:1f:5b:1a:09:e6:7b:
         3e:87:80:8d:b9:18:da:05:75:cb:91:c3:b9:da:7f:92:51:76:
         36:c1:ed:32:86:a4:83:90:8b:e9:39:96:ba:93:c2:be:1c:14:
         ab:56:1e:d5:dd:61:6a:a4:1b:97:a6:fd:f7:d8:9f:7c:04:56:
         3a:17:99:f4:fc:c0:f1:3e:cc:ae:5c:79:8e:93:fd:86:a7:93:
         db:07:59:62:0b:77:21:10:f2:a8:cb:3b:e1:ce:02:38:6a:e9:
         a6:5b:e7:c3:00:3b:75:a6:3c:eb:bd:92:77:a0:97:8a:f8:c5:
         a1:e0:48:c4:9e:44:7c:b1:8a:f8:86:94:f4:0a:11:b5:27:66:
         ae:6e:88:7f:2f:7c:12:a8:a7:fe:10:92:82:f5:08:37:45:27:
         0f:58:98:fe:d4:65:7b:4f:f5:06:cf:79:a5:bd:65:03:2f:2f:
         5c:96:b4:0a:33:fa:ec:5c:e4:ae:96:0c:5d:05:73:9e:36:20:
         91:45:b0:9e:9f:72:2b:82:1d:b7:68:bf:2d:82:a2:14:99:e2:
         3b:cf:7f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:30:39 2026 by rpki-client