This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/WigjYLiJc8DxIPkzfIDGKwp7BrQ.roa
File:                     WigjYLiJc8DxIPkzfIDGKwp7BrQ.roa (raw, json)
Hash identifier:          2P6nSAZ1sPNq/s5iROpnF+sOeXvgcoADYMvtdAcO7JY=
Subject key identifier:   5A:28:23:60:B8:89:73:C0:F1:20:F9:33:7C:80:C6:2B:0A:7B:06:B4
Certificate issuer:       /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Certificate serial:       019B7A5B57937B59DB7D3A6A4B712357335C
Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/WigjYLiJc8DxIPkzfIDGKwp7BrQ.roa
Signing time:             Thu 01 Jan 2026 16:19:25 +0000
ROA not before:           Thu 01 Jan 2026 16:19:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29241
IP address blocks:        194.30.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:57:93:7b:59:db:7d:3a:6a:4b:71:23:57:33:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
        Validity
            Not Before: Jan  1 16:19:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a282360b88973c0f120f9337c80c62b0a7b06b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3a:06:ba:33:24:bd:d5:1e:85:ab:9d:db:6d:
                    29:d6:eb:00:ae:99:2b:fd:2c:22:08:1d:04:31:54:
                    49:56:4b:3f:d6:fa:f0:e2:d7:29:27:78:d6:ff:b0:
                    38:9c:93:72:de:d1:44:ca:6b:fa:63:be:86:77:16:
                    06:2f:f1:ee:7c:62:e6:5a:c2:2a:25:5a:bc:96:9c:
                    6a:26:7a:2f:b7:0b:11:62:50:3d:06:42:a6:c1:d7:
                    1d:e5:4c:7e:c6:82:37:c5:95:a4:70:d2:16:e3:8a:
                    18:90:3d:0a:bc:d2:16:be:4b:fd:3a:46:28:1d:cb:
                    1e:90:0f:ca:b5:c3:05:29:c1:91:c0:20:58:30:d2:
                    27:00:ee:5f:94:05:e9:fa:3c:fe:f9:9a:e3:1a:7a:
                    a4:25:19:ef:16:a1:97:36:fc:6a:64:d1:43:04:33:
                    66:83:a2:a6:ff:fc:58:1e:9f:4f:b6:94:1f:b2:02:
                    16:8a:99:59:67:b0:dd:a5:87:58:56:23:db:7f:aa:
                    f1:18:01:34:12:91:db:f0:94:f6:42:02:0a:fd:16:
                    5a:22:62:38:76:07:8d:4a:f6:39:51:ca:b7:f2:3b:
                    04:ca:86:1a:c8:e7:40:7a:92:70:2c:95:e6:50:4d:
                    68:f3:3d:0a:f3:5e:51:de:d8:d4:cc:3c:71:96:bd:
                    15:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:28:23:60:B8:89:73:C0:F1:20:F9:33:7C:80:C6:2B:0A:7B:06:B4
            X509v3 Authority Key Identifier:
                keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/WigjYLiJc8DxIPkzfIDGKwp7BrQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.30.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:de:f8:94:63:da:86:68:c9:60:90:eb:03:f5:8a:e4:05:2e:
         7a:07:2c:2f:d7:b0:bd:4d:50:22:ff:5e:88:d3:3d:ce:5a:2b:
         ae:a8:de:58:79:56:6c:d8:cb:dc:c0:48:fe:e7:94:3c:e2:42:
         ce:cb:2b:32:4b:5d:c3:d0:92:47:04:70:24:76:98:dc:18:f4:
         56:13:63:d0:c5:bd:4d:59:63:e8:d8:84:81:ab:d4:90:24:a1:
         9a:98:2a:b2:98:41:7c:39:12:9c:0b:64:c0:04:37:5a:57:6a:
         81:ff:e3:90:b7:60:30:2b:69:d9:cb:10:a8:60:82:2d:77:55:
         08:60:75:9a:f0:39:9c:3a:3a:77:4d:4c:b2:f7:03:14:3e:37:
         06:b3:0b:6d:7c:c2:a7:ba:2f:55:1f:3f:75:e5:ce:78:29:b2:
         7f:5c:52:74:a5:68:fd:c0:59:7a:f7:9c:68:77:01:74:3b:69:
         93:f4:d5:2a:a1:31:77:9c:07:fb:ab:42:4e:e2:01:68:0d:bf:
         93:55:1f:90:39:ad:9a:2f:40:c2:fd:b4:7c:83:e0:57:4a:1f:
         be:eb:e3:64:f9:44:72:c6:0e:b3:bc:e2:0a:db:31:36:35:a4:
         37:26:bb:b5:ae:68:51:d4:d8:83:64:69:a1:77:fd:1f:14:75:
         f1:d8:85:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:51 2026 by rpki-client