This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/W6WA_QiFboVDU8oApGkWqIyXDX4.roa
File:                     W6WA_QiFboVDU8oApGkWqIyXDX4.roa (raw, json)
Hash identifier:          QFSwkU3QeJUaOpnbNms5zXgNpMz8qYPwTgZOaNVFDwI=
Subject key identifier:   5B:A5:80:FD:08:85:6E:85:43:53:CA:00:A4:69:16:A8:8C:97:0D:7E
Certificate issuer:       /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial:       019B79100996E61AF72A4E94F64434F07855
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/W6WA_QiFboVDU8oApGkWqIyXDX4.roa
Signing time:             Thu 01 Jan 2026 10:17:32 +0000
ROA not before:           Thu 01 Jan 2026 10:17:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212962
IP address blocks:        185.78.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:09:96:e6:1a:f7:2a:4e:94:f6:44:34:f0:78:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
        Validity
            Not Before: Jan  1 10:17:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5ba580fd08856e854353ca00a46916a88c970d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b1:c3:8d:55:37:55:5d:e1:98:03:a6:b0:79:
                    b7:d0:69:09:5f:78:ff:32:32:f3:8c:59:c9:4e:42:
                    7d:4d:21:39:c6:5a:47:c3:81:4b:02:ea:c3:3f:9e:
                    f4:d7:be:f9:cb:e1:eb:15:61:83:ac:79:48:db:82:
                    7d:47:33:95:d8:2f:66:fe:0d:26:b5:bf:9d:c6:8b:
                    9f:97:85:28:f9:18:33:76:f8:4b:54:44:13:a2:04:
                    54:22:f8:5d:aa:0c:03:e0:60:1e:21:a1:ce:ff:e8:
                    94:21:17:94:f5:1c:93:e8:84:f1:19:85:5e:ac:a2:
                    2e:8d:f7:16:b5:02:ce:73:2c:a9:e6:88:b4:36:23:
                    44:fc:88:44:b8:83:ef:e9:0c:b2:04:06:95:68:59:
                    60:1d:c8:fa:3d:b7:57:8b:ab:70:92:ce:be:c5:43:
                    93:c2:9d:77:d6:97:1a:3d:88:b5:43:22:58:1d:d6:
                    13:92:91:d8:a5:fc:39:c8:8a:9a:c9:07:76:eb:30:
                    24:63:e1:9d:ed:f8:65:be:4d:6d:5b:39:3d:c4:fa:
                    15:ad:e4:5e:d5:94:dd:e2:56:1d:b9:83:b9:17:fe:
                    e9:df:4d:81:a7:c2:a9:3a:6d:3c:1e:d9:2c:d1:2f:
                    8a:d3:c1:29:83:fa:6b:4c:85:49:eb:19:f2:70:8e:
                    e9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A5:80:FD:08:85:6E:85:43:53:CA:00:A4:69:16:A8:8C:97:0D:7E
            X509v3 Authority Key Identifier:
                keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/W6WA_QiFboVDU8oApGkWqIyXDX4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.78.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:ec:a8:73:82:9f:59:5a:a2:3c:00:c7:03:1d:47:91:ca:86:
         ea:4e:b9:85:b8:ff:61:87:80:87:e0:e7:d5:c9:e3:a5:da:fd:
         53:49:97:e0:a1:a5:58:80:7d:5d:69:37:1b:d5:30:4f:23:31:
         ba:ef:76:ee:ec:4e:2e:78:d0:ec:c6:45:1f:ee:d1:eb:c6:f1:
         fc:1a:ef:ce:9b:ab:2a:d5:fc:30:f4:e5:c2:45:a2:37:c8:f0:
         c0:91:c0:6f:17:2d:f5:34:10:7a:89:72:36:59:be:3a:64:de:
         66:f6:0e:7c:52:ed:e0:d1:56:20:cc:3a:ca:e1:57:ee:6f:77:
         ce:e7:b0:68:cc:2d:f8:c0:be:00:fa:22:1a:47:c1:01:9a:93:
         df:82:8f:8a:9c:ac:38:a6:c8:f1:f4:b1:fe:3b:bc:f8:3b:47:
         ab:29:9e:60:a5:13:70:94:fa:2b:8d:58:1d:76:4b:4d:c2:30:
         14:cd:29:05:61:a6:b0:c9:66:12:11:59:28:f3:fe:0a:fc:0e:
         28:ff:15:a5:35:72:92:b8:bf:42:65:af:cd:0c:ab:5f:87:15:
         b8:b9:b6:8e:ca:4b:50:74:f1:2b:fc:5f:28:02:6d:0b:e6:56:
         09:99:cf:74:a4:ec:5b:f0:9f:93:80:00:b3:33:04:e0:d8:34:
         b4:01:1b:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5EAmW5hr3Kk6U9kQ08HhVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh
ODBlOWUwHhcNMjYwMTAxMTAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmE1ODBmZDA4ODU2ZTg1NDM1M2NhMDBhNDY5MTZhODhjOTcwZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07HDjVU3VV3hmAOmsHm30GkJX3j/
MjLzjFnJTkJ9TSE5xlpHw4FLAurDP5701775y+HrFWGDrHlI24J9RzOV2C9m/g0m
tb+dxoufl4Uo+RgzdvhLVEQTogRUIvhdqgwD4GAeIaHO/+iUIReU9RyT6ITxGYVe
rKIujfcWtQLOcyyp5oi0NiNE/IhEuIPv6QyyBAaVaFlgHcj6PbdXi6twks6+xUOT
wp131pcaPYi1QyJYHdYTkpHYpfw5yIqayQd26zAkY+Gd7fhlvk1tWzk9xPoVreRe
1ZTd4lYduYO5F/7p302Bp8KpOm08Htks0S+K08Epg/prTIVJ6xnycI7psQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFulgP0IhW6FQ1PKAKRpFqiMlw1+MB8GA1UdIwQY
MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt
OWU3MWRjMjRhNjgzLzEvVzZXQV9RaUZib1ZEVThvQXBHa1dxSXlYRFg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz
LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuU7rMA0G
CSqGSIb3DQEBCwUAA4IBAQCO7Khzgp9ZWqI8AMcDHUeRyobqTrmFuP9hh4CH4OfV
yeOl2v1TSZfgoaVYgH1daTcb1TBPIzG673bu7E4ueNDsxkUf7tHrxvH8Gu/Om6sq
1fww9OXCRaI3yPDAkcBvFy31NBB6iXI2Wb46ZN5m9g58Uu3g0VYgzDrK4Vfub3fO
57BozC34wL4A+iIaR8EBmpPfgo+KnKw4psjx9LH+O7z4O0erKZ5gpRNwlPorjVgd
dktNwjAUzSkFYaawyWYSEVko8/4K/A4o/xWlNXKSuL9CZa/NDKtfhxW4ubaOyktQ
dPEr/F8oAm0L5lYJmc90pOxb8J+TgACzMwTg2DS0ARtj
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:33:02 2026 by rpki-client