This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/w-By4YicrBafnG_nw52slsPB7Mo.roa
File:                     w-By4YicrBafnG_nw52slsPB7Mo.roa (raw, json)
Hash identifier:          EbrbjE7k8b3TDf5vDoluKgnOO0qKqQeCgXWBufBzO7A=
Subject key identifier:   C3:E0:72:E1:88:9C:AC:16:9F:9C:6F:E7:C3:9D:AC:96:C3:C1:EC:CA
Certificate issuer:       /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial:       019B77C6E03830EB300BE376B67B2ABF6F3D
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/w-By4YicrBafnG_nw52slsPB7Mo.roa
Signing time:             Thu 01 Jan 2026 04:18:00 +0000
ROA not before:           Thu 01 Jan 2026 04:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39389
IP address blocks:        45.131.88.0/23 maxlen: 23
                          45.131.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:e0:38:30:eb:30:0b:e3:76:b6:7b:2a:bf:6f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
        Validity
            Not Before: Jan  1 04:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c3e072e1889cac169f9c6fe7c39dac96c3c1ecca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:73:25:88:bf:dc:e2:18:db:f1:cd:ad:c3:
                    02:cd:51:78:12:51:5d:98:d6:8d:b7:a6:81:b3:69:
                    94:7e:34:0d:ff:8b:8f:31:cf:d7:c4:d4:07:6f:95:
                    61:fe:61:be:2c:9c:a8:9f:84:83:cc:0d:9c:05:4e:
                    9c:23:3d:a2:09:17:d2:f2:bd:8c:7e:e7:ed:fc:40:
                    2f:52:f8:a2:d2:de:a4:98:28:09:77:b8:cb:bf:3b:
                    d2:33:6f:ee:12:b8:38:a1:76:d6:c4:d4:3a:1e:42:
                    ac:df:51:6b:91:5e:1c:f4:19:d8:3c:a1:41:5a:c2:
                    20:57:70:20:7c:a4:a1:b5:c9:03:26:75:38:13:ce:
                    3b:85:fd:2e:5a:b7:1f:cd:d4:46:7a:13:bc:9c:c2:
                    9a:cb:91:69:4c:52:47:12:3d:1b:f4:34:ab:8f:ca:
                    69:4c:7f:76:00:ef:95:c7:87:82:74:cc:3c:7d:04:
                    2d:e4:50:40:58:7f:8f:00:b8:18:da:30:f4:a9:68:
                    14:88:88:1d:dc:45:dc:c9:5f:cf:11:a3:40:47:e7:
                    3f:26:ff:03:5d:f7:42:00:10:f7:f9:d3:97:e6:90:
                    41:85:b1:d9:42:7a:a0:cd:1d:54:f3:36:46:4f:23:
                    ff:7e:e5:5a:48:ce:e5:22:a3:a1:32:f1:2f:3b:8d:
                    c2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E0:72:E1:88:9C:AC:16:9F:9C:6F:E7:C3:9D:AC:96:C3:C1:EC:CA
            X509v3 Authority Key Identifier:
                keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/w-By4YicrBafnG_nw52slsPB7Mo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.131.88.0-45.131.90.255

    Signature Algorithm: sha256WithRSAEncryption
         4f:c5:00:a4:c9:78:b5:94:66:d4:9e:88:33:c5:e7:5d:e2:9a:
         08:6a:c1:b4:db:c8:bc:9b:7e:3d:8a:bf:a5:93:65:c6:22:d0:
         17:86:3e:81:58:ae:1d:53:d5:fd:14:70:cf:ee:bd:70:27:59:
         9f:03:7b:ec:b6:ba:08:43:40:bd:d1:39:8f:ec:99:5b:67:f3:
         86:a3:a0:99:c1:c8:b4:bf:5e:f2:e5:f3:ff:94:e3:9f:23:67:
         4d:46:2d:5d:77:22:96:e7:e3:21:21:d9:63:3d:87:1d:eb:fb:
         53:9e:b5:ef:dc:79:af:72:ab:1e:bc:b8:e5:9f:98:2e:e0:69:
         22:00:79:a5:fe:31:2b:dc:f6:ac:0c:ef:60:27:c6:37:d5:55:
         93:37:70:e6:97:d7:8a:a1:2c:f7:b2:dd:81:99:da:bf:e5:77:
         bc:37:59:d0:11:cb:b3:75:34:1d:a5:7a:4e:0c:22:9a:ef:a2:
         d8:65:f2:b5:b8:58:e2:8e:d2:fe:02:03:e0:31:da:ea:88:90:
         62:3b:39:ef:e1:8d:77:4b:54:fa:81:de:b1:8b:b7:63:18:f9:
         fb:f2:e5:bc:d1:52:50:ae:e6:06:c1:4e:41:54:25:b5:90:71:
         cd:1d:24:61:26:b1:4b:d3:f6:73:73:b8:a0:b5:39:75:2a:81:
         c5:4d:3d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:05 2026 by rpki-client