This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/f-WzYrTcVspbvV27XUH8n69DSig.roa
File:                     f-WzYrTcVspbvV27XUH8n69DSig.roa (raw, json)
Hash identifier:          dPXvzRcp3N5snJFT4/YTmjC8NO5nN1yqw4UaUWODI/0=
Subject key identifier:   7F:E5:B3:62:B4:DC:56:CA:5B:BD:5D:BB:5D:41:FC:9F:AF:43:4A:28
Certificate issuer:       /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial:       019B78A32F19D52028D462CD727B061192F1
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/f-WzYrTcVspbvV27XUH8n69DSig.roa
Signing time:             Thu 01 Jan 2026 08:18:38 +0000
ROA not before:           Thu 01 Jan 2026 08:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197882
IP address blocks:        185.254.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:2f:19:d5:20:28:d4:62:cd:72:7b:06:11:92:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
        Validity
            Not Before: Jan  1 08:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7fe5b362b4dc56ca5bbd5dbb5d41fc9faf434a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:7a:3e:91:a3:b8:f7:03:8f:2b:40:18:4e:
                    1f:eb:15:cb:94:03:63:a9:70:c2:26:28:9e:ab:25:
                    64:bc:89:a6:ef:2f:f1:d6:fa:b7:e6:3a:fb:51:5b:
                    ce:60:cf:3b:6e:5b:12:34:4e:d3:9d:7a:1a:f4:6b:
                    cf:10:22:2b:47:18:8d:ab:3c:3b:42:46:ff:ec:58:
                    a0:d8:f7:32:11:11:06:26:91:69:cc:88:9c:dc:f9:
                    e5:c4:55:43:84:aa:f8:fa:d9:ba:e0:de:1f:ff:3f:
                    a4:0f:82:9a:3b:a7:f6:a0:97:53:0e:b7:92:44:e7:
                    4f:2f:86:ad:46:42:40:ad:89:00:e0:18:e7:de:eb:
                    4e:a9:6e:14:f2:b1:c7:fe:a0:57:68:81:7d:4a:79:
                    21:37:b7:68:c2:95:13:f2:3c:e4:33:44:81:35:b9:
                    9b:5f:dc:1d:a4:59:a8:ff:42:37:db:11:71:30:ad:
                    23:aa:16:c2:b8:b6:d6:24:e3:67:be:65:90:4e:8b:
                    24:14:5f:05:5f:83:c7:80:ca:80:db:4b:49:ee:ab:
                    1f:5c:27:d4:72:83:81:94:c3:3b:69:6c:9e:ea:41:
                    c6:05:a1:62:19:63:61:d4:90:ea:b0:fd:36:c4:95:
                    aa:1f:0a:20:b6:a6:24:d4:11:e5:0f:3e:05:f6:64:
                    18:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E5:B3:62:B4:DC:56:CA:5B:BD:5D:BB:5D:41:FC:9F:AF:43:4A:28
            X509v3 Authority Key Identifier:
                keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/f-WzYrTcVspbvV27XUH8n69DSig.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:15:4e:48:5d:69:c5:3b:ca:85:2f:63:b0:71:32:95:f2:ad:
         f7:93:3f:b7:88:41:99:35:1f:35:c5:dc:dc:d9:31:73:df:77:
         d7:23:b7:a6:d6:04:34:17:99:64:7b:fe:8d:2e:86:8b:e0:60:
         a7:cf:ee:bd:d8:41:65:35:6f:5a:33:76:41:25:26:58:e3:17:
         fc:5c:c6:1f:a8:92:dc:72:2f:fc:7c:0c:fa:1c:1b:4b:b1:e1:
         b9:a3:c3:a2:d3:df:1e:b8:14:5e:d2:fe:f7:8c:f0:b6:b1:31:
         bd:78:cb:f8:1d:86:e7:45:b4:51:1a:f7:f9:17:3b:e3:b0:86:
         2c:60:c9:28:9c:db:76:ac:a7:34:a7:9d:ee:3e:1f:b4:8c:c5:
         f6:39:53:2c:02:70:10:18:26:bf:b4:69:fd:22:a2:82:74:bc:
         80:bd:a6:20:f6:10:e4:c3:5a:07:d5:34:f3:84:8e:8f:5c:ec:
         c1:70:09:01:f5:0b:db:81:e4:c2:76:59:f9:7e:78:45:f9:d4:
         6f:72:b1:18:48:fd:10:b1:2c:fc:2b:66:44:8e:c4:52:fe:92:
         e4:8c:8c:f7:2c:58:88:79:9c:d4:16:f1:dc:34:b1:14:d2:3b:
         1b:af:db:0b:4f:c3:a8:67:bc:c2:9c:fc:27:f4:2d:60:60:6e:
         ae:9c:e7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:05:58 2026 by rpki-client