This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/w5yC-7_BeEAUv5kdABElqtcahiw.roa
File:                     w5yC-7_BeEAUv5kdABElqtcahiw.roa (raw, json)
Hash identifier:          MnBkOa0BegcXHiC5KD30/CFPwuYklVK8Uh3ekT7IGzk=
Subject key identifier:   C3:9C:82:FB:BF:C1:78:40:14:BF:99:1D:00:11:25:AA:D7:1A:86:2C
Certificate issuer:       /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Certificate serial:       019B79EC3187EBBED9028E8E9DF29AACEDD9
Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/w5yC-7_BeEAUv5kdABElqtcahiw.roa
Signing time:             Thu 01 Jan 2026 14:18:00 +0000
ROA not before:           Thu 01 Jan 2026 14:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60893
IP address blocks:        195.80.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:31:87:eb:be:d9:02:8e:8e:9d:f2:9a:ac:ed:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
        Validity
            Not Before: Jan  1 14:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c39c82fbbfc1784014bf991d001125aad71a862c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3c:fd:2c:d6:27:d3:75:dc:80:56:b7:de:88:
                    45:f1:6f:5d:b7:a6:c4:0e:e9:0a:8e:a4:0e:f7:16:
                    cb:79:82:39:46:50:45:3a:3f:ee:d3:00:23:37:b7:
                    b5:f3:7b:32:9c:29:2c:16:b6:46:55:53:d9:57:c6:
                    b9:54:13:e5:72:f7:56:43:d7:ce:bd:64:7f:8e:8c:
                    c4:4b:27:7a:ce:4e:f9:1f:12:34:c8:cd:fc:76:71:
                    15:c8:5a:49:2a:ac:2b:5a:cc:c2:f3:6c:3e:d6:78:
                    5d:61:6c:d1:93:bc:28:bf:65:49:01:af:02:1f:b2:
                    ca:89:24:e4:75:25:38:53:40:6d:f4:43:41:5d:94:
                    10:46:2d:dc:f6:fb:2f:30:c9:b8:87:57:25:e6:98:
                    a0:25:06:06:9c:da:6b:96:32:19:7e:ce:96:df:c7:
                    21:1c:fa:e2:ef:fc:e1:d1:77:cd:00:9a:c0:76:22:
                    4e:1e:92:56:8d:a1:dd:20:c0:ea:b6:24:d7:27:35:
                    ac:6a:e8:9a:c7:6b:81:ac:2f:15:63:32:a2:a2:ee:
                    80:22:be:a6:7f:91:59:13:e2:1c:b0:87:cf:31:5f:
                    54:13:40:31:17:31:e2:9c:19:f8:51:62:ee:e5:75:
                    b2:c5:f5:02:b2:36:c8:24:27:4b:02:fd:2b:fa:78:
                    ae:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9C:82:FB:BF:C1:78:40:14:BF:99:1D:00:11:25:AA:D7:1A:86:2C
            X509v3 Authority Key Identifier:
                keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/w5yC-7_BeEAUv5kdABElqtcahiw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.80.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:e6:5d:a8:d8:22:bc:a2:6a:7f:2e:5d:a0:60:d7:80:4f:9a:
         c9:e5:60:e4:82:ce:97:99:df:5f:cf:9f:43:91:23:fb:99:1f:
         0f:bd:cb:96:40:3c:c5:c2:56:52:94:64:95:69:a9:13:c1:66:
         14:49:0c:90:75:be:a0:6e:ce:5c:69:8f:76:90:21:76:db:15:
         45:ce:e1:30:eb:f0:ba:2e:33:f9:4f:77:f7:8b:fb:b5:ba:8e:
         e6:e8:18:ce:8b:c9:5b:48:9c:6f:7e:e1:c1:a6:37:57:9e:9c:
         eb:94:b7:e3:6f:87:e5:f9:26:1b:80:f2:07:cb:05:6e:04:e2:
         98:2d:b1:05:48:04:23:52:4f:6e:60:6d:b7:4b:ee:c0:02:7c:
         a1:39:7b:e5:be:fb:a4:ae:24:54:54:b8:06:7d:9c:e1:dc:bb:
         ee:37:65:23:ae:06:ff:81:9e:e2:0e:c4:e8:35:fc:59:f4:db:
         c5:8e:42:8e:3f:4a:e9:92:2e:0a:37:c3:c0:40:d6:df:1f:30:
         3b:5c:f9:43:e1:5b:52:fe:b5:0a:16:87:4c:f9:b2:0e:50:43:
         98:2b:f7:74:c6:12:c1:25:04:f6:30:57:21:f8:b0:31:54:0b:
         7a:c2:df:a6:03:06:fc:d4:c9:dd:75:a7:74:ee:e7:17:be:c5:
         c1:47:cc:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt57DGH677ZAo6OnfKarO3ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjJjMDg0OGQzMDU5ZTVhZTU1ZjY4YzA3MDc5Y2I5YTky
YzI3OWUwHhcNMjYwMTAxMTQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzljODJmYmJmYzE3ODQwMTRiZjk5MWQwMDExMjVhYWQ3MWE4NjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jz9LNYn03XcgFa33ohF8W9dt6bE
DukKjqQO9xbLeYI5RlBFOj/u0wAjN7e183synCksFrZGVVPZV8a5VBPlcvdWQ9fO
vWR/jozESyd6zk75HxI0yM38dnEVyFpJKqwrWszC82w+1nhdYWzRk7wov2VJAa8C
H7LKiSTkdSU4U0Bt9ENBXZQQRi3c9vsvMMm4h1cl5pigJQYGnNprljIZfs6W38ch
HPri7/zh0XfNAJrAdiJOHpJWjaHdIMDqtiTXJzWsauiax2uBrC8VYzKiou6AIr6m
f5FZE+IcsIfPMV9UE0AxFzHinBn4UWLu5XWyxfUCsjbIJCdLAv0r+niufQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMOcgvu/wXhAFL+ZHQARJarXGoYsMB8GA1UdIwQY
MBaAFB8iwISNMFnlrlX2jAcHnLmpLCeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jMTA5MTEtNDAyMi00NmZiLTkyMTQt
N2M2ODU3NjQ4NjY2LzEvdzV5Qy03X0JlRUFVdjVrZEFCRWxxdGNhaGl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jMTA5MTEtNDAyMi00NmZiLTkyMTQtN2M2ODU3NjQ4NjY2
LzEvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw1AoMA0G
CSqGSIb3DQEBCwUAA4IBAQB45l2o2CK8omp/Ll2gYNeAT5rJ5WDkgs6Xmd9fz59D
kSP7mR8PvcuWQDzFwlZSlGSVaakTwWYUSQyQdb6gbs5caY92kCF22xVFzuEw6/C6
LjP5T3f3i/u1uo7m6BjOi8lbSJxvfuHBpjdXnpzrlLfjb4fl+SYbgPIHywVuBOKY
LbEFSAQjUk9uYG23S+7AAnyhOXvlvvukriRUVLgGfZzh3LvuN2Ujrgb/gZ7iDsTo
NfxZ9NvFjkKOP0rpki4KN8PAQNbfHzA7XPlD4VtS/rUKFodM+bIOUEOYK/d0xhLB
JQT2MFch+LAxVAt6wt+mAwb81Mnddad07ucXvsXBR8zU
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:58:07 2026 by rpki-client