This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/WN-eS_dhlalip931Wl82--H94Og.roa
File:                     WN-eS_dhlalip931Wl82--H94Og.roa (raw, json)
Hash identifier:          rbOvjZx542d8HAJi2Jzi/JJqSYaVayN/xL7SlSV7HvY=
Subject key identifier:   58:DF:9E:4B:F7:61:95:A9:62:A7:DD:F5:5A:5F:36:FB:E1:FD:E0:E8
Certificate issuer:       /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial:       019B9833A04F746032251B17A80FFDF2B091
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/WN-eS_dhlalip931Wl82--H94Og.roa
Signing time:             Wed 07 Jan 2026 11:24:38 +0000
ROA not before:           Wed 07 Jan 2026 11:24:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43754
IP address blocks:        194.36.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:98:33:a0:4f:74:60:32:25:1b:17:a8:0f:fd:f2:b0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
        Validity
            Not Before: Jan  7 11:24:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=58df9e4bf76195a962a7ddf55a5f36fbe1fde0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:09:e6:f5:30:93:8d:4e:a4:53:6e:a3:1f:
                    e9:56:bc:23:25:39:47:49:3b:b2:60:ff:f8:e8:78:
                    e2:59:a4:d6:2f:3d:38:bd:ce:05:98:35:11:fc:5a:
                    99:f2:c4:06:63:c3:6d:ee:29:25:0d:d3:82:f7:65:
                    45:91:2e:4b:fb:21:43:00:3e:bf:42:60:61:df:99:
                    4d:b6:49:97:37:ff:a2:f1:31:f6:aa:37:95:e4:e3:
                    e9:97:0d:92:ca:ac:ab:8a:ca:fd:eb:54:7f:c1:c5:
                    5f:b6:5f:b9:0c:9a:d7:e1:7a:30:58:32:62:49:eb:
                    55:14:f6:62:fd:65:d5:f8:8b:2a:94:3f:de:7f:e8:
                    ac:6b:e2:8f:bd:36:61:26:72:19:4e:05:88:7b:4b:
                    4e:ab:13:ba:b2:57:b0:73:df:38:48:25:47:a7:ed:
                    fc:11:b9:15:1e:8f:b2:25:57:39:c5:c7:1b:06:6b:
                    df:65:68:6a:b4:2c:53:e4:50:15:30:3e:27:a9:d9:
                    10:b5:96:95:19:eb:91:41:9f:20:76:30:5d:49:3c:
                    7b:b5:6f:7b:45:97:58:9d:b0:07:c3:a6:67:d2:bc:
                    ce:6d:de:4b:ef:e2:51:12:48:8c:87:30:5d:92:a3:
                    28:5c:11:8b:ee:64:58:2e:d5:bd:72:ab:78:16:fc:
                    94:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DF:9E:4B:F7:61:95:A9:62:A7:DD:F5:5A:5F:36:FB:E1:FD:E0:E8
            X509v3 Authority Key Identifier:
                keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/WN-eS_dhlalip931Wl82--H94Og.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.36.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:03:c1:a0:a0:5c:7a:0a:63:f2:73:9d:ae:41:3e:32:3c:19:
         a6:5c:7b:5c:ef:cf:ab:8d:1f:ee:84:8c:d3:ea:3c:d0:ae:4f:
         55:ed:4a:d2:95:6e:2e:a6:12:3e:44:03:a8:80:cc:4a:2d:f5:
         18:20:50:e3:5b:f0:ec:9e:5e:1f:5d:5a:1e:f3:6f:d3:20:57:
         04:4f:9f:5b:a9:d9:5b:6f:8d:b7:bc:af:0a:d8:d9:ff:9a:d2:
         61:b5:93:41:27:36:d8:82:78:a7:e2:b1:43:1f:47:3d:6e:6b:
         55:70:67:42:32:75:6c:e2:f5:a3:39:df:bb:ac:98:d6:3d:96:
         87:6a:db:0d:7d:8e:19:ec:d4:0f:b8:f6:13:24:c8:15:2e:d8:
         4d:af:12:2e:c8:2c:30:b9:97:5f:e8:90:a9:63:08:57:4c:e8:
         e1:e7:46:6c:66:b5:60:29:57:39:2e:12:d4:01:ef:c8:ee:0e:
         b1:5e:db:94:b6:cb:61:40:d1:f2:d4:83:52:a7:8f:fa:4e:21:
         e1:33:ab:98:f2:4c:4b:a4:b0:7d:36:fb:89:da:35:af:b3:bc:
         b7:5f:6c:64:4b:63:94:5a:b1:35:13:e5:ce:cb:f0:32:66:53:
         3c:88:52:90:db:1a:3e:f7:c9:3d:a4:23:c4:45:34:27:a4:8f:
         93:c9:40:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:12:52 2026 by rpki-client