This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/wss7zMwe7PbIUt44ISQdw5NRA-o.roa
File:                     wss7zMwe7PbIUt44ISQdw5NRA-o.roa (raw, json)
Hash identifier:          hY/bHx558olj4wZ8AeI9REogrHwn5IbR1IKhgej6jig=
Subject key identifier:   C2:CB:3B:CC:CC:1E:EC:F6:C8:52:DE:38:21:24:1D:C3:93:51:03:EA
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       019B7E3724A563EE4B696E0E2D5D4E6DA385
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/wss7zMwe7PbIUt44ISQdw5NRA-o.roa
Signing time:             Fri 02 Jan 2026 10:18:21 +0000
ROA not before:           Fri 02 Jan 2026 10:18:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211716
IP address blocks:        79.133.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:24:a5:63:ee:4b:69:6e:0e:2d:5d:4e:6d:a3:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Jan  2 10:18:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2cb3bcccc1eecf6c852de3821241dc3935103ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:5e:06:f2:4e:f9:85:44:b6:69:2c:4e:58:
                    de:da:ef:a8:77:dd:53:85:bf:67:bb:e2:6b:5d:eb:
                    5f:fb:8d:0a:a5:35:23:a8:0a:16:16:84:54:a5:ff:
                    85:e4:e5:f6:6d:21:3d:55:dc:9d:07:1d:fb:8d:f2:
                    5b:e4:b2:e8:29:6e:8e:6c:45:01:7c:6a:8b:22:4e:
                    37:84:43:ee:fc:8b:cc:47:ec:fd:e9:d1:a5:45:dc:
                    3e:23:87:12:a0:96:66:37:d9:3c:46:f1:39:1d:a3:
                    1b:a1:02:b7:49:49:0c:9c:85:bd:b1:e4:e3:09:ab:
                    56:31:25:bd:60:e8:4b:31:30:31:c8:8e:b3:72:f4:
                    63:6f:ba:cf:eb:8f:50:e7:46:e1:44:42:51:dd:88:
                    63:b0:af:ca:eb:ea:89:73:76:c3:dc:62:b2:56:83:
                    c5:80:1a:e4:a6:a7:49:c8:3a:7e:21:75:0b:96:95:
                    8c:94:fb:13:2a:7b:52:19:4c:dd:c5:ec:38:80:bb:
                    b1:86:a8:36:fb:42:0a:eb:e0:8d:25:f0:ac:9f:39:
                    56:99:57:01:0d:21:e4:e3:98:9b:30:b0:4d:0b:67:
                    f9:e0:8d:57:b1:65:f8:24:84:dd:dd:c2:ed:2c:3a:
                    20:a9:b8:d9:04:2b:1f:bf:05:fd:06:f4:5d:66:7f:
                    21:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CB:3B:CC:CC:1E:EC:F6:C8:52:DE:38:21:24:1D:C3:93:51:03:EA
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/wss7zMwe7PbIUt44ISQdw5NRA-o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.133.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:7a:eb:17:16:73:6d:d4:2e:66:1d:2f:33:3a:ca:ff:39:fb:
         19:c8:f4:00:13:fe:00:dc:52:c9:1e:23:f9:52:de:93:13:8b:
         c2:6e:73:52:74:90:31:2c:a8:1c:8c:c6:d5:74:bb:10:0b:1c:
         2f:87:e6:af:25:64:b4:3c:40:b5:8b:9b:ae:a0:f9:04:cf:7d:
         5e:5d:f9:b4:f0:54:5b:9c:af:08:d9:67:d8:bf:16:e5:df:da:
         48:fb:35:ab:54:ee:b6:84:7f:f4:65:92:cd:32:b4:3f:da:d4:
         ce:4d:1e:7c:6f:32:a4:0f:53:c0:fa:b2:17:22:34:ce:e2:51:
         c0:ae:74:3a:56:c8:9b:b2:97:05:b2:e1:cc:c3:d4:0f:22:a1:
         35:24:e3:38:e2:3f:a0:e5:cb:34:dc:5d:64:48:f0:6e:d9:1f:
         50:9d:e9:8f:17:9e:40:21:4a:40:48:a0:33:a2:4f:37:de:27:
         d8:84:54:49:4d:b6:88:71:2f:41:86:a0:8c:a4:2a:41:fb:ff:
         3d:29:e6:a1:47:fb:57:9d:e7:2c:eb:e9:7d:46:f4:01:4b:d7:
         96:b9:52:6f:5c:00:2c:4f:42:3a:c3:3e:66:16:45:d2:58:5f:
         c2:7c:c2:38:1f:99:38:7c:b9:70:b4:4a:9a:76:79:3e:a3:e6:
         29:0e:c5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:31:34 2026 by rpki-client