This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WpNauZz37Za-gbTkhgnBZqcJiUA.roa
File:                     WpNauZz37Za-gbTkhgnBZqcJiUA.roa (raw, json)
Hash identifier:          s0aaaKm/CsTlR9YIMuK8iO5dgFddwXItMaIc3qYWOTo=
Subject key identifier:   5A:93:5A:B9:9C:F7:ED:96:BE:81:B4:E4:86:09:C1:66:A7:09:89:40
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       019B7F851ADF39A59F8673AD77D172568090
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WpNauZz37Za-gbTkhgnBZqcJiUA.roa
Signing time:             Fri 02 Jan 2026 16:23:08 +0000
ROA not before:           Fri 02 Jan 2026 16:23:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215001
IP address blocks:        93.171.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:1a:df:39:a5:9f:86:73:ad:77:d1:72:56:80:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 16:23:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a935ab99cf7ed96be81b4e48609c166a7098940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6f:b8:36:59:41:ff:4d:1e:f4:9a:fb:fc:ed:
                    c1:ac:8d:05:01:9b:a1:06:05:34:fc:47:c8:f0:8c:
                    f5:5e:2f:d0:8a:37:6a:84:b4:1d:93:34:32:85:9d:
                    d9:74:d6:93:a8:98:30:bc:d7:87:ef:5f:2a:c5:8e:
                    e0:f2:c4:06:3d:80:86:f5:59:bf:9a:fa:9a:55:a1:
                    87:33:bc:4d:6a:17:dc:c1:71:bc:f2:7a:4b:c1:38:
                    1a:b9:fd:94:cc:7e:d7:63:aa:78:06:4c:2e:0a:c8:
                    c2:20:4a:71:52:4e:53:55:c9:c5:36:f6:4b:c2:8d:
                    0a:2f:5e:32:06:cd:6a:42:b3:1d:3d:fc:ee:bc:79:
                    77:73:15:3d:a7:be:a5:87:c7:d6:93:df:4f:c5:09:
                    ec:8a:3f:a7:0e:07:d2:29:26:25:97:e4:92:58:64:
                    ee:5d:e4:34:f2:dd:be:ae:b0:4f:7e:68:aa:75:a8:
                    c4:fe:fe:2b:f4:cc:18:f3:21:c6:ec:88:7d:79:f5:
                    bc:80:59:2b:55:8f:16:a9:e0:49:e9:aa:f4:fe:6a:
                    cd:7f:45:18:21:9b:e2:c9:19:a2:80:ec:ad:c1:18:
                    f4:91:59:fb:e0:4a:86:bc:74:b8:80:a0:2c:08:77:
                    2b:b1:b4:ca:3d:ed:29:10:68:04:ae:ca:05:f7:7d:
                    27:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:93:5A:B9:9C:F7:ED:96:BE:81:B4:E4:86:09:C1:66:A7:09:89:40
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WpNauZz37Za-gbTkhgnBZqcJiUA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:a4:53:9c:9d:0b:b8:86:66:57:61:b1:3c:9c:d0:bf:76:81:
         66:20:21:d4:66:89:6a:ba:31:d8:de:cd:01:2b:57:0f:a8:9c:
         4a:50:c5:24:8e:a8:d2:77:34:bf:89:7b:86:d9:f5:87:d2:67:
         16:b0:2f:72:94:87:27:ff:ff:6e:15:5d:b9:67:1c:a2:1e:23:
         7f:de:f1:76:04:50:9b:87:f2:ab:31:c1:a1:9b:fb:34:07:a9:
         fa:62:19:f9:ee:87:5f:0c:c0:9d:06:15:24:af:88:32:5f:c5:
         cb:90:01:e6:51:1d:11:3e:5c:09:e5:b1:68:f4:6d:79:d2:eb:
         71:d3:7d:d9:0d:80:cf:a1:40:b5:7a:cb:70:8a:ab:79:29:8c:
         0b:aa:32:16:10:3a:30:a7:b8:ec:03:da:73:a6:d6:4d:53:74:
         1d:9a:ef:6c:cb:ae:a8:f8:43:94:71:78:25:69:e6:2b:ee:0c:
         92:8a:9e:23:83:e8:0e:73:57:56:ca:9d:2a:09:2b:22:09:23:
         4a:a4:31:9a:e3:51:c5:ac:73:92:37:80:42:8f:11:9b:a7:1d:
         fb:af:a8:99:45:1f:ad:b2:89:3a:1c:f4:a3:6d:58:29:ce:2e:
         0b:c0:74:45:f5:ae:0d:df:fa:d8:1e:a3:be:3d:d1:50:9b:37:
         9d:c1:84:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/hRrfOaWfhnOtd9FyVoCQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjYwMTAyMTYyMzA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTkzNWFiOTljZjdlZDk2YmU4MWI0ZTQ4NjA5YzE2NmE3MDk4OTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG+4NllB/00e9Jr7/O3BrI0FAZuh
BgU0/EfI8Iz1Xi/QijdqhLQdkzQyhZ3ZdNaTqJgwvNeH718qxY7g8sQGPYCG9Vm/
mvqaVaGHM7xNahfcwXG88npLwTgauf2UzH7XY6p4BkwuCsjCIEpxUk5TVcnFNvZL
wo0KL14yBs1qQrMdPfzuvHl3cxU9p76lh8fWk99PxQnsij+nDgfSKSYll+SSWGTu
XeQ08t2+rrBPfmiqdajE/v4r9MwY8yHG7Ih9efW8gFkrVY8WqeBJ6ar0/mrNf0UY
IZviyRmigOytwRj0kVn74EqGvHS4gKAsCHcrsbTKPe0pEGgErsoF930nswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFqTWrmc9+2WvoG05IYJwWanCYlAMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvV3BOYXVaejM3WmEtZ2JUa2hnbkJacWNKaVVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXauKMA0G
CSqGSIb3DQEBCwUAA4IBAQB0pFOcnQu4hmZXYbE8nNC/doFmICHUZolqujHY3s0B
K1cPqJxKUMUkjqjSdzS/iXuG2fWH0mcWsC9ylIcn//9uFV25ZxyiHiN/3vF2BFCb
h/KrMcGhm/s0B6n6Yhn57odfDMCdBhUkr4gyX8XLkAHmUR0RPlwJ5bFo9G150utx
033ZDYDPoUC1estwiqt5KYwLqjIWEDowp7jsA9pzptZNU3Qdmu9sy66o+EOUcXgl
aeYr7gySip4jg+gOc1dWyp0qCSsiCSNKpDGa41HFrHOSN4BCjxGbpx37r6iZRR+t
sok6HPSjbVgpzi4LwHRF9a4N3/rYHqO+PdFQmzedwYS3
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:48:49 2026 by rpki-client