This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/wFIC1mkSpA0e2UovbVVh_Scnn38.roa
File:                     wFIC1mkSpA0e2UovbVVh_Scnn38.roa (raw, json)
Hash identifier:          gvnZu9oBw0R11C5ZwnQeTQrVmEIlj6ltv4xIOtBZ5cQ=
Subject key identifier:   C0:52:02:D6:69:12:A4:0D:1E:D9:4A:2F:6D:55:61:FD:27:27:9F:7F
Certificate issuer:       /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial:       019B76EB0F467B45E62183127B4EA812F44D
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/wFIC1mkSpA0e2UovbVVh_Scnn38.roa
Signing time:             Thu 01 Jan 2026 00:17:54 +0000
ROA not before:           Thu 01 Jan 2026 00:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212794
IP address blocks:        194.11.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:0f:46:7b:45:e6:21:83:12:7b:4e:a8:12:f4:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
        Validity
            Not Before: Jan  1 00:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c05202d66912a40d1ed94a2f6d5561fd27279f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:da:64:b9:66:df:48:c8:2e:07:58:71:67:a4:
                    e6:68:b7:c3:78:10:1a:6a:33:81:c0:57:42:5e:9e:
                    30:ef:ae:ff:ad:df:38:a4:9f:26:32:2e:e4:7f:75:
                    55:e0:ce:3a:ce:b7:a7:34:74:dd:26:d8:ce:69:75:
                    0f:67:80:3c:ef:b5:7f:4a:35:57:7d:3e:20:59:96:
                    a3:66:cb:b0:09:f1:3a:e1:f1:f4:8c:ac:e8:27:d3:
                    02:03:0e:6d:e9:0e:76:75:97:65:30:30:7d:30:3d:
                    22:7c:23:f6:be:71:b1:92:82:95:c7:16:8b:e0:76:
                    b6:69:72:bf:d8:db:d5:18:e4:d1:5b:34:f6:bb:6a:
                    e0:ed:27:7e:ae:4e:a8:1b:da:05:45:e6:3b:f1:ea:
                    ec:da:8c:26:09:de:32:c3:1e:72:ac:8f:fa:e1:c4:
                    19:1e:f1:c2:13:81:5d:e5:70:08:3c:45:cd:03:0f:
                    8b:d3:5f:c8:6c:34:53:f4:0d:b6:69:43:d0:85:47:
                    53:29:c4:99:53:72:bc:6c:4a:69:e9:96:53:b6:40:
                    08:37:8d:1f:83:b9:7d:71:10:57:ca:15:62:b6:a3:
                    b9:f2:e6:11:2c:fa:17:c5:a4:eb:c6:15:68:b0:bd:
                    27:b4:df:10:90:82:9e:b3:45:5e:05:ec:77:54:db:
                    f8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:52:02:D6:69:12:A4:0D:1E:D9:4A:2F:6D:55:61:FD:27:27:9F:7F
            X509v3 Authority Key Identifier:
                keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/wFIC1mkSpA0e2UovbVVh_Scnn38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.11.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:8c:d1:de:70:fb:6b:1c:eb:da:ef:06:b6:1c:a1:70:88:c5:
         c4:10:a0:88:ab:6f:f5:3b:33:cf:78:e7:5f:77:cc:b7:b1:e3:
         2a:9f:cf:3e:57:4a:f8:82:ca:dd:12:52:44:b8:e6:84:7f:0f:
         30:f5:3e:1e:14:b2:4d:99:4a:cc:b5:04:9f:44:49:64:e8:f6:
         9a:0d:96:16:7d:47:58:0e:11:87:87:64:46:e0:d9:0a:ed:bb:
         e7:ab:ec:39:94:83:d4:79:f9:d7:d7:1c:4b:73:0d:af:c4:06:
         ce:76:a5:d0:d0:4d:af:ce:96:cd:41:c1:a2:9f:1f:4b:8b:21:
         92:1f:b6:9e:a3:b5:3d:b0:37:bd:59:2d:ea:96:d5:38:74:12:
         bc:d6:7a:04:79:3c:28:79:9b:1f:7e:16:93:ce:9c:c4:83:0a:
         e2:34:14:5c:a9:55:3e:9a:96:d5:79:ab:d0:98:ce:d6:a5:18:
         ef:84:25:da:58:70:43:f1:26:a4:b6:a7:0a:f5:84:2d:c5:7b:
         73:c7:b9:2f:01:12:fd:bf:7b:d1:2f:2b:c5:47:d0:a5:cc:b1:
         0f:ee:61:45:40:70:f0:6f:51:d7:d9:54:d6:5f:00:18:73:f3:
         55:6d:b5:ac:c7:80:28:cd:80:91:a3:4f:92:e0:fb:00:5f:3d:
         b4:66:a5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:56:46 2026 by rpki-client