This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/aw-WNjpmhXowt4HLmn9oWTfYk6A.roa
File:                     aw-WNjpmhXowt4HLmn9oWTfYk6A.roa (raw, json)
Hash identifier:          /fTiwwaRSLZvsQsUTep5wCR0cEXV9emopBx2DPmAxcM=
Subject key identifier:   6B:0F:96:36:3A:66:85:7A:30:B7:81:CB:9A:7F:68:59:37:D8:93:A0
Certificate issuer:       /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial:       019B7D5C6D475EAAAD6D5B48CD98CCC12AA7
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/aw-WNjpmhXowt4HLmn9oWTfYk6A.roa
Signing time:             Fri 02 Jan 2026 06:19:27 +0000
ROA not before:           Fri 02 Jan 2026 06:19:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42926
IP address blocks:        193.84.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:6d:47:5e:aa:ad:6d:5b:48:cd:98:cc:c1:2a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
        Validity
            Not Before: Jan  2 06:19:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6b0f96363a66857a30b781cb9a7f685937d893a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:c2:c4:5d:b0:e1:2c:71:4d:85:c5:34:74:
                    b0:cc:84:e0:f5:b5:31:68:93:cc:cc:01:d6:7c:be:
                    c4:6c:ec:1d:92:6e:31:fa:7b:63:7f:a4:9a:d0:a9:
                    ce:24:4f:68:63:db:f5:bb:95:3d:11:4b:13:10:24:
                    62:24:13:9b:c1:06:2b:e0:cb:97:75:6d:f2:16:cf:
                    a7:e2:91:a3:88:18:e7:60:3e:5b:04:af:5d:43:cf:
                    5e:a7:b9:2f:0a:8b:9f:e1:d6:ca:89:43:38:97:44:
                    a3:51:2b:8a:8d:ad:64:90:b9:9d:4f:1b:6f:b3:cc:
                    3d:b2:6e:60:72:37:95:fe:06:d9:ab:21:7f:1f:e3:
                    5d:ef:84:6f:97:23:31:57:ae:70:f8:36:b9:4f:7e:
                    55:f6:c2:f0:28:90:cc:a2:e1:61:14:6e:2f:a7:8c:
                    63:82:1e:4b:36:b3:ea:21:46:9e:85:66:96:32:3f:
                    21:74:d7:bb:5d:a3:cc:8f:d7:cc:09:c2:e9:a0:79:
                    ff:b0:ad:2d:47:44:d0:a2:a4:fb:07:47:18:ea:0d:
                    00:2c:16:96:5b:60:0f:82:e3:b0:0a:b0:42:8d:63:
                    9d:60:fb:ed:ad:70:ce:51:3d:4b:c5:46:41:fa:7e:
                    c0:40:b8:43:fa:47:04:68:96:9c:eb:a3:48:c2:9d:
                    b8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0F:96:36:3A:66:85:7A:30:B7:81:CB:9A:7F:68:59:37:D8:93:A0
            X509v3 Authority Key Identifier:
                keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/aw-WNjpmhXowt4HLmn9oWTfYk6A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:60:04:8d:4c:59:7c:14:6b:e5:00:0b:fb:40:57:f9:57:71:
         55:62:01:21:52:5b:af:6c:09:b0:2b:04:a8:fd:e3:e6:11:c7:
         db:ac:18:b1:d5:d6:88:d7:53:ba:3e:6c:78:fd:22:7c:78:59:
         b1:5b:7f:6f:b4:03:c3:e5:df:b7:1d:8f:1e:e6:5d:19:72:16:
         c9:6f:0a:85:d2:10:99:91:9b:08:04:9b:de:d0:4f:ba:d8:9d:
         50:b7:c7:e7:fc:14:e3:03:f8:85:b3:56:25:58:f9:29:24:4e:
         40:4f:58:be:0e:4e:61:0f:09:4a:e8:b0:b7:81:81:18:0c:2b:
         73:5d:8d:bb:69:59:9b:a0:6a:21:40:ab:c3:e5:76:b5:84:e7:
         94:cc:76:f7:b4:cd:8e:52:b0:90:e8:0e:f7:16:2d:c9:59:bc:
         4d:1f:84:18:2a:b4:c7:26:d2:d3:60:13:f2:92:53:00:15:b4:
         e4:14:42:3e:70:28:a9:06:cb:26:19:26:9b:a6:d5:6e:08:30:
         cf:89:8a:2f:77:19:9e:7f:9b:b1:b1:d5:af:a9:da:a4:87:03:
         63:60:69:75:17:84:a4:7b:7c:02:ab:42:6e:4c:f7:d6:2e:0f:
         ed:18:09:00:67:de:80:3b:c2:91:2e:ff:9f:8b:e9:a6:ea:98:
         18:48:72:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9XG1HXqqtbVtIzZjMwSqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjEyNTg5NzRlZThlMDU0NTYwYzcxNzZmODM0N2Q0MzU1
YjlhODcwHhcNMjYwMTAyMDYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjBmOTYzNjNhNjY4NTdhMzBiNzgxY2I5YTdmNjg1OTM3ZDg5M2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNzCxF2w4SxxTYXFNHSwzITg9bUx
aJPMzAHWfL7EbOwdkm4x+ntjf6Sa0KnOJE9oY9v1u5U9EUsTECRiJBObwQYr4MuX
dW3yFs+n4pGjiBjnYD5bBK9dQ89ep7kvCouf4dbKiUM4l0SjUSuKja1kkLmdTxtv
s8w9sm5gcjeV/gbZqyF/H+Nd74RvlyMxV65w+Da5T35V9sLwKJDMouFhFG4vp4xj
gh5LNrPqIUaehWaWMj8hdNe7XaPMj9fMCcLpoHn/sK0tR0TQoqT7B0cY6g0ALBaW
W2APguOwCrBCjWOdYPvtrXDOUT1LxUZB+n7AQLhD+kcEaJac66NIwp248wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGsPljY6ZoV6MLeBy5p/aFk32JOgMB8GA1UdIwQY
MBaAFMIhJYl07o4FRWDHF2+DR9Q1W5qHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wODQ4MmYtYTdjNS00NjI3LWEwNjgt
MjVmNzlkMmQ4YzE3LzEvYXctV05qcG1oWG93dDRITG1uOW9XVGZZazZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wODQ4MmYtYTdjNS00NjI3LWEwNjgtMjVmNzlkMmQ4YzE3
LzEvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwVRmMA0G
CSqGSIb3DQEBCwUAA4IBAQAGYASNTFl8FGvlAAv7QFf5V3FVYgEhUluvbAmwKwSo
/ePmEcfbrBix1daI11O6Pmx4/SJ8eFmxW39vtAPD5d+3HY8e5l0ZchbJbwqF0hCZ
kZsIBJve0E+62J1Qt8fn/BTjA/iFs1YlWPkpJE5AT1i+Dk5hDwlK6LC3gYEYDCtz
XY27aVmboGohQKvD5Xa1hOeUzHb3tM2OUrCQ6A73Fi3JWbxNH4QYKrTHJtLTYBPy
klMAFbTkFEI+cCipBssmGSabptVuCDDPiYovdxmef5uxsdWvqdqkhwNjYGl1F4Sk
e3wCq0JuTPfWLg/tGAkAZ96AO8KRLv+fi+mm6pgYSHLB
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:23:48 2026 by rpki-client