This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/WyfVVVbupjvPxLzRmrpKaA7AkYw.roa
File:                     WyfVVVbupjvPxLzRmrpKaA7AkYw.roa (raw, json)
Hash identifier:          02QZajpOlAkNu8PwY46zt4fm5XsA4QV5bfhzU3rgZmo=
Subject key identifier:   5B:27:D5:55:56:EE:A6:3B:CF:C4:BC:D1:9A:BA:4A:68:0E:C0:91:8C
Certificate issuer:       /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial:       019B7CEE620F19C0FFB7BCC925B232DE91C8
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/WyfVVVbupjvPxLzRmrpKaA7AkYw.roa
Signing time:             Fri 02 Jan 2026 04:19:15 +0000
ROA not before:           Fri 02 Jan 2026 04:19:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     1897
IP address blocks:        88.157.0.0/16 maxlen: 16
                          88.157.64.0/18 maxlen: 18
                          88.157.128.0/17 maxlen: 17
                          193.126.0.0/16 maxlen: 16
                          194.79.64.0/19 maxlen: 19
                          195.23.0.0/16 maxlen: 16
                          212.0.160.0/19 maxlen: 19
                          213.205.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:62:0f:19:c0:ff:b7:bc:c9:25:b2:32:de:91:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
        Validity
            Not Before: Jan  2 04:19:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5b27d55556eea63bcfc4bcd19aba4a680ec0918c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:47:86:64:c7:36:31:43:05:e3:c3:09:85:08:
                    44:4c:85:ae:28:3d:2e:86:97:26:a4:01:e7:f6:45:
                    ac:25:56:04:eb:83:1a:42:7e:d5:7c:d2:27:75:49:
                    ec:31:ff:66:8d:63:4e:c4:89:a4:89:c1:1a:53:0a:
                    49:ef:e7:4e:af:18:9c:f7:41:d5:9d:40:6e:13:1e:
                    39:13:e3:cd:d1:04:19:f1:0c:08:53:9e:28:43:3a:
                    b6:51:f8:33:6d:c9:39:39:b5:cc:15:3a:e8:f5:79:
                    08:a7:a9:16:31:a3:e9:b5:52:2a:1d:c9:a7:63:c8:
                    bb:9e:18:ae:57:65:0a:8b:f4:15:f6:eb:67:6b:06:
                    5d:5e:af:7c:c9:ef:68:eb:5b:28:0e:78:14:97:6f:
                    1b:8b:bd:c4:fa:3b:52:10:ed:cd:0d:82:d0:75:ea:
                    11:2f:96:37:85:e7:b2:e9:81:97:4f:45:5b:51:0d:
                    46:9e:b9:49:7d:fd:42:1c:c6:61:df:0d:e4:b2:4b:
                    dc:45:5f:3d:3f:9d:87:bd:86:56:25:1d:13:5f:92:
                    ed:62:c1:19:7a:c2:e9:4b:73:10:a6:5c:16:31:d7:
                    5c:4d:11:90:ca:5c:02:00:ab:98:29:31:aa:a5:00:
                    a5:a9:85:c2:d9:ca:41:b2:85:66:ca:ca:bf:72:8b:
                    8d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:27:D5:55:56:EE:A6:3B:CF:C4:BC:D1:9A:BA:4A:68:0E:C0:91:8C
            X509v3 Authority Key Identifier:
                keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/WyfVVVbupjvPxLzRmrpKaA7AkYw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.157.0.0/16
                  193.126.0.0/16
                  194.79.64.0/19
                  195.23.0.0/16
                  212.0.160.0/19
                  213.205.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         62:ef:90:60:ec:5a:9f:8d:a2:67:1e:7e:67:6e:7b:b7:ff:09:
         20:89:b4:33:09:40:83:6c:58:b1:04:70:99:ad:24:5b:84:21:
         ad:09:b7:7a:7c:2a:e4:3b:82:8a:55:20:b0:d9:a4:e0:a4:43:
         4d:83:8a:57:9f:c8:ba:fd:db:19:0e:7b:87:ba:ce:be:df:c5:
         de:7e:40:ac:2f:96:47:65:bf:41:27:e9:03:89:89:80:ad:40:
         6f:a3:4f:53:84:d5:1b:9d:2e:ef:8c:95:46:0e:a0:dd:7d:e1:
         ee:a0:1a:d4:65:bb:a7:7d:19:a2:83:7f:0d:6c:9b:95:f0:6c:
         01:4c:d7:74:4f:2a:ec:cd:33:32:e7:00:4b:42:61:68:9a:d6:
         2c:cb:32:18:ae:7c:54:40:f1:80:df:3e:3a:6b:58:e4:ea:6e:
         d8:50:41:69:45:39:1c:a0:aa:aa:c7:43:35:15:d9:60:9f:dc:
         0c:fe:a8:42:89:a7:94:47:12:0a:a9:dc:0a:c3:7b:7e:68:db:
         7e:a5:c8:e8:e4:cf:76:64:7b:14:80:b4:a9:a6:bb:60:3c:ba:
         29:ec:b3:50:34:91:fa:cd:73:26:6a:12:8d:4a:8f:57:e4:84:
         fa:98:4f:28:c8:0c:68:61:f7:92:5f:87:7f:99:71:b9:2d:2f:
         7b:1a:72:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:43:07 2026 by rpki-client