This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/WhpdbusgONQkGfJUmuHu3hC04fM.roa
File:                     WhpdbusgONQkGfJUmuHu3hC04fM.roa (raw, json)
Hash identifier:          dMwJ/FCdVp8IZAqayVtrT8hk8KNS++zwBXrsEJV7xwo=
Subject key identifier:   5A:1A:5D:6E:EB:20:38:D4:24:19:F2:54:9A:E1:EE:DE:10:B4:E1:F3
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       019B7E38B289DE023461CA11817EAE363506
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/WhpdbusgONQkGfJUmuHu3hC04fM.roa
Signing time:             Fri 02 Jan 2026 10:20:03 +0000
ROA not before:           Fri 02 Jan 2026 10:20:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57043
IP address blocks:        93.89.223.0/24 maxlen: 24
                          141.105.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:b2:89:de:02:34:61:ca:11:81:7e:ae:36:35:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: Jan  2 10:20:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a1a5d6eeb2038d42419f2549ae1eede10b4e1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:18:7c:5b:4f:2d:c8:f8:28:ab:30:b5:63:
                    28:d3:1b:e7:54:fc:d4:6d:b1:c2:76:99:c7:3e:b6:
                    45:7a:cf:ad:a5:78:95:1f:d9:61:0a:b5:b5:0c:1a:
                    06:8f:a4:30:3f:52:aa:2a:80:80:64:6a:ed:1e:8c:
                    18:b7:35:6a:6d:e4:8a:2e:74:a6:95:68:13:2a:44:
                    b6:d0:51:b3:d5:62:36:a4:24:61:2b:34:43:73:03:
                    a5:22:6b:d8:27:34:0f:ee:fd:78:3b:c3:f8:ef:96:
                    c0:3c:e3:e8:c6:18:1b:f7:9f:b2:ab:6b:97:0a:32:
                    c2:03:e1:fb:8f:35:9f:b7:3d:96:6a:52:b7:c1:02:
                    b7:ff:f8:c2:01:6f:9b:d8:d5:f0:2a:0e:b3:0a:a3:
                    c5:b7:f1:f9:c8:54:e8:92:07:f3:3d:a7:c7:55:a5:
                    a3:ef:12:e1:b8:e9:7b:08:b3:a8:cc:96:4c:e7:4c:
                    90:ed:11:8d:6c:23:e9:5c:93:74:bb:e9:72:22:48:
                    2d:84:88:bb:af:71:58:51:b2:19:7f:13:58:15:a0:
                    12:80:19:3c:dc:9f:83:7a:79:99:61:bb:f8:ad:22:
                    5e:38:f9:0e:37:fe:3a:99:01:7c:fb:21:33:52:10:
                    61:a4:03:e7:40:c9:80:32:e5:77:a7:ad:e3:bb:8c:
                    66:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1A:5D:6E:EB:20:38:D4:24:19:F2:54:9A:E1:EE:DE:10:B4:E1:F3
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/WhpdbusgONQkGfJUmuHu3hC04fM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.89.223.0/24
                  141.105.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:ea:05:48:30:85:ec:4c:88:e0:a3:a8:5d:88:da:c3:aa:1c:
         0e:61:e7:d7:bd:78:6d:9d:c5:29:25:b8:ae:b2:99:8d:e7:ce:
         b1:0c:9a:27:78:fe:74:5e:6a:ae:b1:2a:2a:81:f5:bc:2a:df:
         36:38:3e:09:a0:7d:4f:17:e1:cf:7e:c7:6c:80:1b:05:f5:0f:
         2e:f8:73:df:13:06:f6:9b:2e:6c:33:6a:83:16:3e:2d:10:34:
         65:51:0b:34:63:2f:f9:46:a9:d0:09:98:c7:21:df:65:6f:9f:
         dd:19:a8:cc:4b:2f:8f:40:69:f2:b1:07:30:30:f2:fa:71:5c:
         84:a5:15:06:c6:a3:f4:c4:d6:c5:5f:9d:cd:8b:00:41:84:51:
         20:13:87:0f:ea:12:72:9b:3f:bc:0f:96:3c:e9:6e:8a:8f:3c:
         53:cb:94:98:07:ca:e6:4f:db:c5:82:28:33:05:03:a8:fd:30:
         39:50:56:f5:24:3a:f2:30:99:bf:3e:ca:f4:5e:a6:e0:e4:94:
         46:ed:85:4f:f0:40:c9:01:a3:6d:6c:00:94:df:69:30:1a:4a:
         60:db:04:bb:97:4a:c7:d6:e7:bb:41:62:96:15:59:93:c2:83:
         1e:ea:40:ff:a9:60:bd:c5:58:33:37:44:3f:85:97:99:e3:c7:
         21:bc:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:04:57 2026 by rpki-client