This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/Wwk325SN1Dr-hmbxjFq8uNHcOyo.roa
File:                     Wwk325SN1Dr-hmbxjFq8uNHcOyo.roa (raw, json)
Hash identifier:          7U3vqi/fr/x9T5oXLoF5tZC73nYigGo0Lh9WQ9j33Bo=
Subject key identifier:   5B:09:37:DB:94:8D:D4:3A:FE:86:66:F1:8C:5A:BC:B8:D1:DC:3B:2A
Certificate issuer:       /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial:       019B7DCB00134876B8613F69C799551FF7A2
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/Wwk325SN1Dr-hmbxjFq8uNHcOyo.roa
Signing time:             Fri 02 Jan 2026 08:20:14 +0000
ROA not before:           Fri 02 Jan 2026 08:20:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62343
IP address blocks:        94.139.36.0/23 maxlen: 24
                          2a13:ac40::/29 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:00:13:48:76:b8:61:3f:69:c7:99:55:1f:f7:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
        Validity
            Not Before: Jan  2 08:20:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5b0937db948dd43afe8666f18c5abcb8d1dc3b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:64:f5:28:90:6a:e6:8c:60:0a:82:76:42:
                    e8:d7:e4:2b:64:53:86:b0:a5:51:eb:29:f4:8f:55:
                    8b:65:50:74:50:4d:d2:54:c0:bc:19:eb:0e:3f:1a:
                    6d:83:d6:23:1d:4b:dc:9d:08:17:95:c1:d5:59:f4:
                    40:b9:2a:cc:86:af:82:1f:3b:f2:42:03:87:fa:df:
                    37:e5:3d:56:26:6f:65:b0:94:e1:5f:86:c0:5e:e7:
                    60:97:6a:c9:3f:00:37:55:bd:9c:2b:d6:6c:3e:cf:
                    01:39:cf:33:bd:06:7c:17:70:fd:5f:17:1c:53:c0:
                    db:7c:d7:05:ff:dd:24:f8:2a:70:ec:a3:e6:db:42:
                    da:ca:b6:10:7e:35:f1:01:cf:8a:78:80:5d:7b:88:
                    a8:f4:d1:02:c3:bb:3c:c0:25:8a:9a:81:bf:bc:40:
                    fd:07:fe:5d:f2:4c:49:f8:02:b9:13:4c:44:51:f4:
                    6c:fd:8f:d5:ea:8e:a2:f2:38:cf:a2:dd:c0:a0:31:
                    0a:a2:2a:d5:f3:41:14:e2:27:4d:1f:da:a1:cb:32:
                    56:6a:87:96:f2:42:d8:d6:0e:be:28:68:16:a5:17:
                    c3:34:45:f3:36:a3:ea:18:c2:67:b3:de:34:05:70:
                    d4:6d:49:6d:8b:8c:77:8a:bf:f8:5b:0d:7e:6d:d2:
                    f5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:09:37:DB:94:8D:D4:3A:FE:86:66:F1:8C:5A:BC:B8:D1:DC:3B:2A
            X509v3 Authority Key Identifier:
                keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/Wwk325SN1Dr-hmbxjFq8uNHcOyo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.139.36.0/23
                IPv6:
                  2a13:ac40::/29

    Signature Algorithm: sha256WithRSAEncryption
         70:0a:b7:66:7f:1c:7b:80:6b:a0:37:92:9b:d5:07:18:20:6e:
         7c:2a:69:08:2b:4f:d7:35:48:1a:55:e9:16:8d:86:42:19:cf:
         b2:89:a7:31:bd:79:94:e4:25:49:fd:44:a7:ff:9f:19:5e:76:
         20:aa:20:4a:10:66:51:e7:2f:3b:c4:dc:bd:5e:0d:6c:8e:dc:
         5b:d2:cb:5d:70:94:37:d8:87:25:3a:3e:f0:76:53:e6:3f:01:
         3b:71:44:56:6a:31:f0:3c:d5:c4:1e:80:c9:4b:23:7b:b7:c2:
         9c:09:15:f7:80:5a:a7:93:65:1a:8c:b0:a6:4d:94:50:58:48:
         09:8c:b5:30:49:64:87:a6:61:02:d6:69:ae:e6:ce:64:20:e5:
         c8:1c:d9:ae:a1:85:86:00:80:9f:0c:34:ac:53:e7:4e:18:b9:
         27:6b:4e:ec:6e:ae:85:45:03:32:04:f0:e3:57:10:60:5a:6d:
         76:82:d7:2f:c2:14:79:91:cd:73:62:cd:3b:e8:e4:ec:28:7a:
         0f:12:f2:59:c7:03:b8:d8:53:16:13:44:0b:ac:25:b3:04:22:
         32:32:5d:f4:dc:52:25:2f:75:07:09:3d:a8:d3:d4:46:3f:94:
         56:b2:b5:e2:93:ec:42:b8:0d:08:05:9b:90:b9:78:04:d9:a4:
         6a:b7:3d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:37:16 2026 by rpki-client