This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/wOPk17nv5KIiudN64aSMjj945cw.roa
File:                     wOPk17nv5KIiudN64aSMjj945cw.roa (raw, json)
Hash identifier:          PusivWzV1D+Sz5sW5Ck+szJ+lL1X1qExgZ8AO7cPnS8=
Subject key identifier:   C0:E3:E4:D7:B9:EF:E4:A2:22:B9:D3:7A:E1:A4:8C:8E:3F:78:E5:CC
Certificate issuer:       /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial:       019B7A5B2655185FDFE5A8A4F6DDC16FE74A
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/wOPk17nv5KIiudN64aSMjj945cw.roa
Signing time:             Thu 01 Jan 2026 16:19:12 +0000
ROA not before:           Thu 01 Jan 2026 16:19:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201021
IP address blocks:        185.84.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:26:55:18:5f:df:e5:a8:a4:f6:dd:c1:6f:e7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
        Validity
            Not Before: Jan  1 16:19:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c0e3e4d7b9efe4a222b9d37ae1a48c8e3f78e5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3a:08:57:48:0d:e0:67:f8:ec:9f:83:db:61:
                    c5:a6:53:61:c2:7d:82:a8:75:a9:dc:6d:03:1a:44:
                    de:0d:98:23:c6:24:15:d3:74:b0:3c:fa:71:85:0a:
                    07:70:48:5f:0f:c0:fe:f4:cf:c3:0f:b2:7a:c7:ca:
                    9d:4f:a1:65:e5:89:0f:83:fd:63:00:7a:5c:20:24:
                    8c:cb:d4:84:5d:e4:ec:9b:8c:11:34:b4:c9:62:1a:
                    75:b1:96:9e:91:90:80:9f:00:cd:5a:a0:3f:9f:9c:
                    0f:b5:71:9c:ab:f9:38:25:8c:74:74:61:16:c8:04:
                    3b:39:af:4b:74:38:8d:71:d6:6a:1a:3f:e9:c1:2d:
                    0b:ac:98:69:cc:60:3b:bc:d1:b6:a5:7b:26:f4:2a:
                    3e:8a:79:02:df:93:fa:4b:3f:18:dc:68:9e:d6:63:
                    d8:7b:0a:38:05:82:ee:13:ee:fd:d5:26:a7:26:9a:
                    22:46:5b:87:53:63:a8:d9:ad:83:1e:20:c6:89:b9:
                    70:57:cf:8a:d3:e3:2f:15:2f:4c:9b:f6:f3:94:f1:
                    4d:82:98:99:06:7b:a6:46:03:cc:c7:28:11:a0:6b:
                    ef:58:5b:dc:be:b5:72:61:70:90:0a:11:eb:d8:2f:
                    86:57:4c:0b:19:89:be:11:05:f5:0d:6b:0c:2c:53:
                    35:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E3:E4:D7:B9:EF:E4:A2:22:B9:D3:7A:E1:A4:8C:8E:3F:78:E5:CC
            X509v3 Authority Key Identifier:
                keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/wOPk17nv5KIiudN64aSMjj945cw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.84.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:a0:ac:27:74:88:43:83:0c:02:75:95:fe:09:b9:36:2f:07:
         a7:fd:b7:a4:e8:50:fe:58:64:2d:fa:30:ff:fe:fc:ad:71:cd:
         a0:60:60:bb:6d:6c:3f:73:59:77:bf:10:e9:24:af:5c:97:f5:
         bb:9c:43:4a:7e:91:e6:cf:15:fc:44:f7:fe:ab:5e:5d:b6:1c:
         1b:b1:68:93:29:5d:b7:34:af:20:a9:f2:9d:1f:de:3c:41:33:
         6f:1c:7c:75:d5:d8:20:c2:31:95:55:69:c2:44:3f:af:d2:84:
         ca:51:4d:e0:63:0b:99:0f:07:33:8c:a1:0e:98:c0:89:64:0c:
         f7:b9:28:22:92:37:96:c1:f9:4e:a6:05:f2:cf:30:9a:a1:84:
         bf:b6:28:fe:ae:c3:53:89:26:5e:bf:1f:57:23:6f:a5:8f:5a:
         d9:b0:46:e6:21:14:e0:18:e7:c5:1a:da:32:02:eb:c6:5b:29:
         a5:84:60:49:b7:4b:c2:76:5f:b8:b5:3e:4f:b9:0e:14:d2:66:
         ea:38:ed:97:93:21:64:fa:70:c0:df:00:82:7f:c8:53:de:c9:
         26:99:ea:fd:4d:9e:5f:25:62:2b:99:44:c4:ba:37:64:67:6f:
         fa:fd:f5:fb:94:ae:c6:a7:16:f9:8c:bd:ed:cd:f2:77:22:2d:
         b4:59:ba:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6WyZVGF/f5aik9t3Bb+dKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MjUzODg2YTAyNTBhMDRlYzY5YmUwMGJiZjg0MzNjMmYw
MTRiN2MwHhcNMjYwMTAxMTYxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGUzZTRkN2I5ZWZlNGEyMjJiOWQzN2FlMWE0OGM4ZTNmNzhlNWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjoIV0gN4Gf47J+D22HFplNhwn2C
qHWp3G0DGkTeDZgjxiQV03SwPPpxhQoHcEhfD8D+9M/DD7J6x8qdT6Fl5YkPg/1j
AHpcICSMy9SEXeTsm4wRNLTJYhp1sZaekZCAnwDNWqA/n5wPtXGcq/k4JYx0dGEW
yAQ7Oa9LdDiNcdZqGj/pwS0LrJhpzGA7vNG2pXsm9Co+inkC35P6Sz8Y3Gie1mPY
ewo4BYLuE+791SanJpoiRluHU2Oo2a2DHiDGiblwV8+K0+MvFS9Mm/bzlPFNgpiZ
BnumRgPMxygRoGvvWFvcvrVyYXCQChHr2C+GV0wLGYm+EQX1DWsMLFM1KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMDj5Ne57+SiIrnTeuGkjI4/eOXMMB8GA1UdIwQY
MBaAFAklOIagJQoE7Gm+ALv4QzwvAUt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAt
MTE0YWQ0MWNmMzMxLzEvd09QazE3bnY1S0lpdWRONjRhU01qajk0NWN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAtMTE0YWQ0MWNmMzMx
LzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVS3MA0G
CSqGSIb3DQEBCwUAA4IBAQA+oKwndIhDgwwCdZX+Cbk2Lwen/bek6FD+WGQt+jD/
/vytcc2gYGC7bWw/c1l3vxDpJK9cl/W7nENKfpHmzxX8RPf+q15dthwbsWiTKV23
NK8gqfKdH948QTNvHHx11dggwjGVVWnCRD+v0oTKUU3gYwuZDwczjKEOmMCJZAz3
uSgikjeWwflOpgXyzzCaoYS/tij+rsNTiSZevx9XI2+lj1rZsEbmIRTgGOfFGtoy
AuvGWymlhGBJt0vCdl+4tT5PuQ4U0mbqOO2XkyFk+nDA3wCCf8hT3skmmer9TZ5f
JWIrmUTEujdkZ2/6/fX7lK7Gpxb5jL3tzfJ3Ii20Wboj
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:40:18 2026 by rpki-client