This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-WaPAHC18xDLPBoraUr2iJf5kEA.roa
File:                     1-WaPAHC18xDLPBoraUr2iJf5kEA.roa (raw, json)
Hash identifier:          mu4nLm64x5EsJ7WITYKI3MZK/zL1T3T9KFSh5qG8Ud4=
Subject key identifier:   F9:66:8F:00:70:B5:F3:10:CB:3C:1A:2B:69:4A:F6:88:97:F9:90:40
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       019B7F848E73BF01EC754CA45B1461E966C9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-WaPAHC18xDLPBoraUr2iJf5kEA.roa
Signing time:             Fri 02 Jan 2026 16:22:32 +0000
ROA not before:           Fri 02 Jan 2026 16:22:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9058
IP address blocks:        93.170.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:8e:73:bf:01:ec:75:4c:a4:5b:14:61:e9:66:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 16:22:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f9668f0070b5f310cb3c1a2b694af68897f99040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:f2:6e:a8:5a:1d:c1:b5:c2:9c:77:26:86:
                    a2:d4:4b:81:cc:5f:0e:19:b1:d6:73:39:4b:69:74:
                    7e:f2:9c:b4:cc:9e:55:70:1b:c5:d8:3c:79:74:b7:
                    5e:13:eb:7c:3c:c4:c8:2a:9a:fd:61:2b:6c:2f:03:
                    f0:c3:cf:15:ce:c6:0a:04:83:6b:ab:30:37:80:76:
                    89:2d:5d:f4:f1:f6:85:c3:36:02:9a:87:2b:e5:e7:
                    07:8e:1f:46:52:af:0c:c9:25:53:a7:9a:cc:29:27:
                    13:7e:ef:9a:d4:22:71:25:49:87:7f:81:de:bc:85:
                    37:cc:7d:a8:95:3b:ff:88:82:06:12:1a:72:0c:c6:
                    d9:be:51:a0:ae:b9:3c:de:46:6d:da:19:9e:2b:12:
                    f9:61:89:33:0a:60:11:a9:15:50:1a:eb:27:22:b5:
                    0b:76:e2:62:34:31:fa:27:5f:03:05:0b:f1:ce:55:
                    1e:09:8d:f2:0b:fe:ae:d6:23:90:2a:10:5a:a2:01:
                    2f:4e:4e:b9:15:23:9d:f6:da:59:01:6c:15:0e:42:
                    77:85:29:3d:53:e6:de:48:a0:f7:37:6f:52:f6:d2:
                    98:ba:e7:09:8a:64:68:f2:9d:fd:55:55:dc:ed:ca:
                    71:82:d3:fb:2b:94:9b:48:b7:84:9b:0b:11:87:45:
                    56:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:66:8F:00:70:B5:F3:10:CB:3C:1A:2B:69:4A:F6:88:97:F9:90:40
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-WaPAHC18xDLPBoraUr2iJf5kEA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:97:1b:5a:7e:20:f9:6e:a5:a5:25:60:7d:0c:20:3f:4d:c5:
         3d:ca:af:fe:6d:49:d2:af:71:e2:03:34:bd:ef:9b:07:9a:67:
         62:96:0a:e2:01:db:9c:78:a3:56:5d:77:e1:88:01:62:7f:3f:
         ec:e0:0c:e7:c0:1c:95:08:b2:7a:75:77:f2:35:a5:71:25:71:
         84:33:42:f3:66:17:e1:9c:3f:87:69:fa:96:b4:97:ab:06:6d:
         d4:88:da:b7:52:4f:23:2a:3f:4e:e8:84:11:a4:fa:ee:67:63:
         38:26:f6:0d:20:68:b0:6f:40:7d:6b:94:fe:8b:36:64:0f:1b:
         e0:1f:37:c0:5c:e1:c0:05:6f:9c:6a:9c:6c:38:90:df:99:6c:
         09:25:ec:dd:fd:e3:b2:df:a8:39:81:88:68:1e:44:b1:2e:6b:
         ab:c3:9f:1c:67:72:f5:d7:45:56:e9:c2:54:29:78:42:91:1e:
         70:83:6f:74:08:26:6c:ec:b6:f3:d6:23:bd:28:42:d7:32:41:
         3b:6b:b7:91:9f:0b:e4:29:75:ee:5b:2f:43:22:1b:05:41:c5:
         26:eb:3d:48:2b:db:68:b5:e3:1f:f4:47:e0:d9:32:93:f4:b0:
         1b:04:16:a5:a5:29:86:fa:5f:c2:4a:c1:90:f8:69:f3:2a:0e:
         01:f6:e9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:48:58 2026 by rpki-client