This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/wcvj6z8j-GsvRSAmvgYZyXFvQzg.roa
File:                     wcvj6z8j-GsvRSAmvgYZyXFvQzg.roa (raw, json)
Hash identifier:          0Id+7dudqWfdMTBAZEuq462IV8osCSP9dO/8rVOo630=
Subject key identifier:   C1:CB:E3:EB:3F:23:F8:6B:2F:45:20:26:BE:06:19:C9:71:6F:43:38
Certificate issuer:       /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial:       019B77C698CD217F6ACB51498E9E0E056C4B
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/wcvj6z8j-GsvRSAmvgYZyXFvQzg.roa
Signing time:             Thu 01 Jan 2026 04:17:42 +0000
ROA not before:           Thu 01 Jan 2026 04:17:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39442
IP address blocks:        46.8.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:98:cd:21:7f:6a:cb:51:49:8e:9e:0e:05:6c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
        Validity
            Not Before: Jan  1 04:17:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c1cbe3eb3f23f86b2f452026be0619c9716f4338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:4a:d7:01:d0:c4:4a:5e:ce:73:80:b2:14:
                    6e:a7:85:ad:d9:fe:93:d1:c1:3e:3b:75:57:3f:01:
                    be:fa:09:d1:72:f3:66:64:35:93:e5:4c:02:d6:ce:
                    ea:03:36:c6:48:15:a2:5e:d0:85:8f:b7:34:28:be:
                    31:23:33:30:eb:9d:f3:8f:b5:f9:77:1f:79:92:88:
                    29:70:ce:96:a9:9c:35:b8:9d:62:bc:8c:7f:96:7d:
                    07:e3:bb:ca:e6:92:84:63:36:91:c1:31:08:69:47:
                    88:9a:20:48:e3:70:48:6a:08:3b:73:79:ff:e0:c9:
                    3d:f8:c2:03:a1:8b:66:09:1d:aa:ec:00:2c:b6:0d:
                    a2:8a:c6:61:36:8a:db:7b:c7:f6:db:3c:4f:11:b6:
                    8b:24:c3:31:bc:8a:6e:f3:89:b5:4b:c4:e9:b1:47:
                    d9:0f:f4:8c:71:d4:80:72:4f:bf:05:9d:be:25:0b:
                    66:f7:20:b6:1c:67:e1:56:e1:fc:e9:58:a1:42:09:
                    95:a0:62:02:ca:84:3b:44:87:76:99:3b:da:cb:b3:
                    da:84:b5:c9:99:0f:15:e9:dd:be:77:f0:16:a3:4e:
                    95:9b:fb:8c:11:54:ca:ea:62:b5:64:e1:3d:8a:a2:
                    4f:64:e3:f3:50:e9:f3:f6:dc:20:1e:39:4b:78:26:
                    74:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CB:E3:EB:3F:23:F8:6B:2F:45:20:26:BE:06:19:C9:71:6F:43:38
            X509v3 Authority Key Identifier:
                keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/wcvj6z8j-GsvRSAmvgYZyXFvQzg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.8.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:31:bb:9a:b7:92:4d:5d:e1:c1:2c:eb:cc:fb:a3:99:31:3a:
         b5:22:fb:f0:a3:56:58:62:c9:ea:fe:aa:88:70:44:3b:c8:96:
         3b:52:62:bd:2b:0e:94:8b:7a:89:7c:32:b1:48:60:d9:b6:ce:
         26:35:01:72:ae:14:a4:ef:a9:c9:f1:0a:6a:7a:16:cb:a2:29:
         21:64:b5:af:9d:d7:f8:82:8c:01:b5:8c:d8:ee:4c:e3:e8:c3:
         04:91:11:26:87:53:ed:4c:75:e6:ba:e1:7a:b9:ba:eb:84:3d:
         f4:ca:e3:7b:46:8c:71:fb:8d:df:23:06:30:b8:b5:44:c5:7f:
         83:24:de:b0:14:b2:f5:42:d5:96:2f:59:0d:a3:ad:ab:48:93:
         bc:3c:2c:35:a1:91:a5:88:e6:f0:9c:9b:9d:be:64:60:af:b3:
         76:94:cf:80:db:d5:0c:fa:56:41:01:3b:c6:53:d6:66:7f:1a:
         8e:b5:34:dc:a0:fb:7d:0c:1a:bb:40:42:c5:86:2d:38:04:3b:
         7a:70:29:8e:6f:22:bc:40:71:38:4a:12:fc:71:9d:2c:62:ec:
         ee:c5:9c:81:3a:22:ad:58:74:9c:da:fd:0c:38:04:5d:ea:19:
         30:89:fe:60:f2:41:e6:e1:ae:35:4c:d7:cb:e5:5e:8d:00:0b:
         94:7b:8a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:58 2026 by rpki-client