This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/WpG-HECBoKzNEGH7SZCr2uB_62w.roa
File:                     WpG-HECBoKzNEGH7SZCr2uB_62w.roa (raw, json)
Hash identifier:          QHsaGRcXtfYHvO3WG+U0BRusuvkiVd+XVkbhpqWYJNE=
Subject key identifier:   5A:91:BE:1C:40:81:A0:AC:CD:10:61:FB:49:90:AB:DA:E0:7F:EB:6C
Certificate issuer:       /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial:       019B77C773E1004E6FC53B1FF26892F1987B
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/WpG-HECBoKzNEGH7SZCr2uB_62w.roa
Signing time:             Thu 01 Jan 2026 04:18:38 +0000
ROA not before:           Thu 01 Jan 2026 04:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210271
IP address blocks:        194.92.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:73:e1:00:4e:6f:c5:3b:1f:f2:68:92:f1:98:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
        Validity
            Not Before: Jan  1 04:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a91be1c4081a0accd1061fb4990abdae07feb6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b5:3e:7d:a7:99:05:fa:46:e3:b9:9b:e8:2f:
                    65:17:13:86:72:f5:04:5e:d9:6d:6d:e2:8b:f9:36:
                    71:29:08:d8:6f:5d:26:00:ec:8b:37:31:ae:64:0f:
                    20:96:01:40:1f:96:1b:73:39:84:68:c7:25:f4:c5:
                    d6:83:81:95:15:ce:fd:79:2d:f2:1b:25:48:b3:b3:
                    43:33:92:8f:ad:6b:b4:ac:78:55:69:34:f9:30:c5:
                    2b:29:da:32:36:5e:ad:72:c5:e9:75:90:58:fb:9c:
                    b2:06:f3:de:1a:0a:9e:68:87:e9:d4:90:51:1a:28:
                    60:fe:9c:34:eb:7d:1b:18:fe:b1:fc:11:bc:1e:cd:
                    e8:6c:bc:d4:ad:0f:bc:57:ea:ea:cb:cc:1d:91:4b:
                    1f:b5:8a:ca:4a:4d:78:0a:fb:ab:36:99:30:aa:ec:
                    6a:77:46:9c:0f:64:10:42:d2:c7:fe:01:63:f0:5e:
                    a0:b7:74:45:02:a2:c1:90:ff:d3:e3:87:9f:11:14:
                    8d:98:18:27:70:78:27:10:6d:22:3b:a1:e0:c5:03:
                    b9:65:c3:b7:a3:ff:13:d4:f9:b4:45:6e:d7:68:13:
                    db:f2:47:54:30:9b:40:13:ec:36:86:fd:f1:d0:7f:
                    08:c8:8d:80:3a:83:38:7f:c0:62:32:48:aa:d9:83:
                    1d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:91:BE:1C:40:81:A0:AC:CD:10:61:FB:49:90:AB:DA:E0:7F:EB:6C
            X509v3 Authority Key Identifier:
                keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/WpG-HECBoKzNEGH7SZCr2uB_62w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.92.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:cc:9f:9a:48:46:a6:9e:70:36:34:7c:4b:3f:16:b4:20:dc:
         76:85:d1:e5:a4:fc:66:23:d6:ce:ea:13:77:5c:d1:c7:a4:cf:
         1b:71:1f:19:49:27:0d:c4:24:b4:2a:bb:a7:1a:dd:6f:aa:db:
         95:0d:ce:74:db:7d:ec:5a:75:af:ed:df:44:7b:aa:a4:09:bb:
         88:c4:50:75:46:56:67:1e:a3:78:f3:89:16:d7:07:17:aa:4b:
         b3:7d:e7:bb:cc:84:2f:95:15:ea:76:e3:10:85:8a:92:c8:32:
         a9:50:94:0a:e9:76:ae:94:79:d0:cd:77:86:a3:14:f4:ac:83:
         57:b4:07:8b:27:d7:c6:0b:e4:81:fc:f5:ec:53:13:f5:27:04:
         b2:7c:2b:ae:03:91:68:80:57:56:66:e9:14:96:44:1f:33:4a:
         68:73:8e:79:4f:da:a9:1f:8a:d4:15:81:3a:4b:21:81:1f:21:
         db:75:ac:55:f7:b3:14:e2:2b:37:d5:da:39:21:bc:8f:06:b7:
         a2:5a:7b:6c:10:c2:ef:c3:77:b1:a1:cb:00:7b:aa:48:d8:c2:
         ec:71:65:82:39:ad:f2:64:f5:4e:f9:67:82:ea:00:4c:94:0d:
         1a:1e:14:29:9f:5d:fa:81:36:ad:30:68:ec:ce:98:2e:5c:cc:
         ce:67:57:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:39:58 2026 by rpki-client