This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/wbG73mS1cj9OGxG-NRB1JPNjUvg.roa
File:                     wbG73mS1cj9OGxG-NRB1JPNjUvg.roa (raw, json)
Hash identifier:          qW8yIoR/5r3CI7egVQMkyuaO1Dan/9+Olyw8F/005gY=
Subject key identifier:   C1:B1:BB:DE:64:B5:72:3F:4E:1B:11:BE:35:10:75:24:F3:63:52:F8
Certificate issuer:       /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial:       019B7BA4F704EC584621339DDE8D0C9C7EFB
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/wbG73mS1cj9OGxG-NRB1JPNjUvg.roa
Signing time:             Thu 01 Jan 2026 22:19:27 +0000
ROA not before:           Thu 01 Jan 2026 22:19:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199440
IP address blocks:        80.92.228.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Feb 2026 01:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:f7:04:ec:58:46:21:33:9d:de:8d:0c:9c:7e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
        Validity
            Not Before: Jan  1 22:19:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c1b1bbde64b5723f4e1b11be35107524f36352f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2c:5a:d8:6a:c1:cc:2d:f1:2d:ac:cd:ee:d3:
                    f5:b0:9f:8e:e2:35:cd:0f:1a:a2:c7:64:59:3b:ee:
                    94:9e:8f:a6:20:fb:11:e1:1b:53:6e:f8:ca:96:56:
                    99:5d:2f:18:b8:4c:aa:89:9c:a9:06:8b:70:f2:46:
                    e5:fb:1f:f9:e1:c3:c7:c7:b6:13:f9:81:22:4f:d3:
                    32:86:a4:fa:79:2c:c0:e6:97:3f:41:ac:c3:71:31:
                    5b:9b:3d:9c:3e:8e:57:4b:2a:6a:92:f8:89:08:09:
                    04:31:75:c0:26:5a:a6:02:25:b6:91:ad:e0:b2:f0:
                    6f:c9:57:ef:8e:90:cd:67:52:62:9f:2f:b7:5d:c4:
                    e1:94:7c:60:2f:70:b6:0d:7a:04:dd:be:26:d0:c7:
                    f1:f3:99:1a:df:b9:b3:7e:e3:f9:13:ec:59:de:f8:
                    3f:37:b3:06:ce:d9:8e:79:7b:ff:ad:76:25:fe:8c:
                    66:fa:05:14:ba:93:e6:6b:29:15:7e:aa:da:5b:ae:
                    ac:90:b0:d7:30:42:77:69:c9:11:c4:d5:36:06:9c:
                    00:4b:7c:e5:16:e1:88:ba:82:cb:f5:17:96:db:3a:
                    58:52:86:31:b4:a9:9a:9f:aa:b6:ab:44:34:ae:35:
                    92:f6:5f:95:db:2e:07:4b:2f:7e:2c:ee:ee:1d:c9:
                    a9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B1:BB:DE:64:B5:72:3F:4E:1B:11:BE:35:10:75:24:F3:63:52:F8
            X509v3 Authority Key Identifier:
                keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/wbG73mS1cj9OGxG-NRB1JPNjUvg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.92.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:6d:cc:11:a5:aa:5f:15:b9:fc:a3:9e:39:e0:31:10:bc:5f:
         3c:86:c0:bb:cb:16:45:5b:af:af:96:1e:ac:41:92:6e:d4:4c:
         db:77:aa:64:e9:d4:ca:93:9e:2f:9e:d6:9d:57:80:93:41:09:
         26:f0:6c:42:24:75:f1:b1:b5:df:c0:f8:22:b0:d4:53:e2:45:
         81:d9:17:08:b8:19:76:57:cb:81:0e:0c:ff:e1:de:74:30:6b:
         2e:cc:ff:ca:26:30:d1:fd:11:8f:72:ca:d3:bb:48:ab:57:a0:
         27:ef:b0:90:1b:34:c2:dd:33:4f:05:61:45:45:ac:91:68:ed:
         fa:7f:75:1f:9c:35:b2:67:1a:64:38:97:5b:06:da:ae:50:94:
         96:e7:70:4f:2a:3b:24:ba:af:47:94:61:be:f6:1c:57:9d:03:
         a3:5c:80:16:50:69:63:75:86:a0:de:54:96:c4:5a:2f:da:99:
         dd:24:32:55:81:75:a1:29:ed:c1:9e:8e:29:82:f9:20:fa:05:
         4a:23:3b:50:c9:86:05:a3:0f:b7:81:55:31:7b:b6:e0:1e:31:
         74:eb:54:34:6f:0e:98:d0:74:b7:87:77:69:88:f5:b1:62:1f:
         dc:62:36:c5:c9:f5:90:ad:59:03:99:42:2f:ce:57:80:40:17:
         b9:f9:1b:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7pPcE7FhGITOd3o0MnH77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy
MWU3ZDMwHhcNMjYwMTAxMjIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWIxYmJkZTY0YjU3MjNmNGUxYjExYmUzNTEwNzUyNGYzNjM1MmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSxa2GrBzC3xLazN7tP1sJ+O4jXN
Dxqix2RZO+6Uno+mIPsR4RtTbvjKllaZXS8YuEyqiZypBotw8kbl+x/54cPHx7YT
+YEiT9MyhqT6eSzA5pc/QazDcTFbmz2cPo5XSypqkviJCAkEMXXAJlqmAiW2ka3g
svBvyVfvjpDNZ1Jiny+3XcThlHxgL3C2DXoE3b4m0Mfx85ka37mzfuP5E+xZ3vg/
N7MGztmOeXv/rXYl/oxm+gUUupPmaykVfqraW66skLDXMEJ3ackRxNU2BpwAS3zl
FuGIuoLL9ReW2zpYUoYxtKman6q2q0Q0rjWS9l+V2y4HSy9+LO7uHcmpkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMGxu95ktXI/ThsRvjUQdSTzY1L4MB8GA1UdIwQY
MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt
NjI1MjQ1YTAwYWJmLzEvd2JHNzNtUzFjajlPR3hHLU5SQjFKUE5qVXZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm
LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFzkMA0G
CSqGSIb3DQEBCwUAA4IBAQAjbcwRpapfFbn8o5454DEQvF88hsC7yxZFW6+vlh6s
QZJu1Ezbd6pk6dTKk54vntadV4CTQQkm8GxCJHXxsbXfwPgisNRT4kWB2RcIuBl2
V8uBDgz/4d50MGsuzP/KJjDR/RGPcsrTu0irV6An77CQGzTC3TNPBWFFRayRaO36
f3UfnDWyZxpkOJdbBtquUJSW53BPKjskuq9HlGG+9hxXnQOjXIAWUGljdYag3lSW
xFov2pndJDJVgXWhKe3Bno4pgvkg+gVKIztQyYYFow+3gVUxe7bgHjF061Q0bw6Y
0HS3h3dpiPWxYh/cYjbFyfWQrVkDmUIvzleAQBe5+RtK
-----END CERTIFICATE-----
Generated at Sun Feb 8 08:10:00 2026 by rpki-client