This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/w-oyu6Dt2pR1vO2yb74Z1MeDHhc.roa
File:                     w-oyu6Dt2pR1vO2yb74Z1MeDHhc.roa (raw, json)
Hash identifier:          3NZ9tfleTSDXUKf2CN0AIsezDYvSZLjibOtJobFnX+M=
Subject key identifier:   C3:EA:32:BB:A0:ED:DA:94:75:BC:ED:B2:6F:BE:19:D4:C7:83:1E:17
Certificate issuer:       /CN=c7cba981ce58a10edd2c99801e043ad804a85f9a
Certificate serial:       019B77C6E0B55EADE86B0F14CA92A598E3D7
Authority key identifier: C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/w-oyu6Dt2pR1vO2yb74Z1MeDHhc.roa
Signing time:             Thu 01 Jan 2026 04:18:00 +0000
ROA not before:           Thu 01 Jan 2026 04:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202909
IP address blocks:        2001:678:1180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:e0:b5:5e:ad:e8:6b:0f:14:ca:92:a5:98:e3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7cba981ce58a10edd2c99801e043ad804a85f9a
        Validity
            Not Before: Jan  1 04:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c3ea32bba0edda9475bcedb26fbe19d4c7831e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:f6:21:fc:69:41:a4:d6:9e:a0:2e:ce:c4:
                    27:1d:40:06:66:7d:41:12:3b:08:a8:6f:95:88:b8:
                    47:b0:71:e9:c8:c6:17:f3:30:40:33:96:1c:aa:56:
                    46:c8:8c:c7:0a:6f:d2:1b:03:04:57:15:3c:3f:92:
                    eb:a1:c2:cb:d6:c7:89:25:65:b2:53:59:c4:27:82:
                    dc:28:1c:87:e3:ef:a8:7c:2c:44:f7:bf:43:9c:9e:
                    2b:6f:58:bf:89:ac:00:ab:8f:9b:68:ba:0c:2d:06:
                    66:7f:3c:a8:e4:bd:25:52:51:c1:0d:d8:98:5c:ae:
                    db:65:5d:7e:c0:03:1d:93:46:69:fc:78:a3:35:26:
                    96:c8:9e:93:64:6f:20:81:92:aa:d9:0a:53:42:38:
                    39:86:8b:14:02:d8:e0:ac:91:41:11:4a:27:bc:e8:
                    22:5d:d9:7c:15:e5:2d:63:f8:ec:0b:86:c9:74:dd:
                    56:8c:4d:72:d9:4d:78:82:64:c7:fc:ff:16:24:80:
                    1f:53:aa:38:61:21:db:10:3d:d9:d5:cc:92:07:b7:
                    0a:49:c3:58:ab:d9:fd:1a:f9:22:5d:36:8e:4a:26:
                    97:61:db:7f:09:f4:a9:0e:3f:00:4e:f7:82:79:ba:
                    3c:cf:ff:45:9e:e3:bb:17:c8:91:9d:99:a3:e9:6f:
                    38:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EA:32:BB:A0:ED:DA:94:75:BC:ED:B2:6F:BE:19:D4:C7:83:1E:17
            X509v3 Authority Key Identifier:
                keyid:C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/w-oyu6Dt2pR1vO2yb74Z1MeDHhc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:1180::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:60:11:0e:9a:2a:a3:59:73:76:17:70:c7:6e:d9:16:08:50:
         f6:78:5f:33:4e:82:c8:d3:82:ff:96:f8:f3:df:ce:97:df:34:
         2d:e0:ef:cd:a5:cf:99:04:8d:10:cb:af:80:26:84:2e:c5:e4:
         3d:fa:aa:6a:a1:4e:f0:8a:4f:09:83:e8:19:fb:a8:8c:58:ae:
         fc:cc:37:bf:68:b0:87:db:54:e0:b2:55:0b:99:21:36:c3:ae:
         ba:ab:74:5c:d4:32:93:6e:34:e2:eb:3f:52:47:9b:5a:6d:dd:
         7a:25:d0:fe:61:36:79:28:bf:95:78:da:2d:36:a3:93:26:a0:
         5e:4d:c3:c0:5d:7d:f2:ee:e0:d4:28:43:50:57:36:57:a0:f6:
         01:a9:8f:66:0f:ca:b3:ad:65:7e:1f:a8:40:a9:d9:36:f6:b7:
         b5:5e:28:c2:cb:9d:aa:3c:8e:ff:e3:3e:a2:2f:06:7e:7f:db:
         c5:98:84:7e:3f:fd:aa:b9:43:2c:1d:97:7a:1c:25:40:b4:a1:
         76:78:2f:50:0c:e3:eb:d1:12:ea:68:20:6b:2b:1b:84:54:fb:
         ed:7c:9c:8b:5a:0b:71:b9:d9:ce:33:80:11:69:9a:2a:92:49:
         6a:c4:7f:59:09:df:c2:0c:08:d7:15:17:10:75:ac:bc:4f:b5:
         5f:e9:ba:7f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt3xuC1Xq3oaw8UypKlmOPXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3Y2JhOTgxY2U1OGExMGVkZDJjOTk4MDFlMDQzYWQ4MDRh
ODVmOWEwHhcNMjYwMTAxMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2VhMzJiYmEwZWRkYTk0NzViY2VkYjI2ZmJlMTlkNGM3ODMxZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcr2IfxpQaTWnqAuzsQnHUAGZn1B
EjsIqG+ViLhHsHHpyMYX8zBAM5YcqlZGyIzHCm/SGwMEVxU8P5LrocLL1seJJWWy
U1nEJ4LcKByH4++ofCxE979DnJ4rb1i/iawAq4+baLoMLQZmfzyo5L0lUlHBDdiY
XK7bZV1+wAMdk0Zp/HijNSaWyJ6TZG8ggZKq2QpTQjg5hosUAtjgrJFBEUonvOgi
Xdl8FeUtY/jsC4bJdN1WjE1y2U14gmTH/P8WJIAfU6o4YSHbED3Z1cySB7cKScNY
q9n9GvkiXTaOSiaXYdt/CfSpDj8ATveCebo8z/9FnuO7F8iRnZmj6W84nQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMPqMrug7dqUdbztsm++GdTHgx4XMB8GA1UdIwQY
MBaAFMfLqYHOWKEO3SyZgB4EOtgEqF+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDh1cGdjNVlvUTdkTEptQUhnUTYyQVNvWDVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80Y2QyODktZDE2ZS00NjA0LWI1NGEt
ZDlhMWJmMTBjNTdmLzEvdy1veXU2RHQycFIxdk8yeWI3NFoxTWVESGhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80Y2QyODktZDE2ZS00NjA0LWI1NGEtZDlhMWJmMTBjNTdm
LzEveDh1cGdjNVlvUTdkTEptQUhnUTYyQVNvWDVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBGA
MA0GCSqGSIb3DQEBCwUAA4IBAQBbYBEOmiqjWXN2F3DHbtkWCFD2eF8zToLI04L/
lvjz386X3zQt4O/Npc+ZBI0Qy6+AJoQuxeQ9+qpqoU7wik8Jg+gZ+6iMWK78zDe/
aLCH21TgslULmSE2w666q3Rc1DKTbjTi6z9SR5tabd16JdD+YTZ5KL+VeNotNqOT
JqBeTcPAXX3y7uDUKENQVzZXoPYBqY9mD8qzrWV+H6hAqdk29re1XijCy52qPI7/
4z6iLwZ+f9vFmIR+P/2quUMsHZd6HCVAtKF2eC9QDOPr0RLqaCBrKxuEVPvtfJyL
WgtxudnOM4ARaZoqkklqxH9ZCd/CDAjXFRcQday8T7Vf6bp/
-----END CERTIFICATE-----
Generated at Mon Jan 26 12:55:19 2026 by rpki-client