This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/w9o_zsQL-b4SQfaTAhWoIRM44P4.roa
File:                     w9o_zsQL-b4SQfaTAhWoIRM44P4.roa (raw, json)
Hash identifier:          x9jvStMnhTIrENW+AjTcUigXkiIVK0Dog4rDWfYtId4=
Subject key identifier:   C3:DA:3F:CE:C4:0B:F9:BE:12:41:F6:93:02:15:A8:21:13:38:E0:FE
Certificate issuer:       /CN=75790c7ecf24d28be2e13fe069118cee27d58002
Certificate serial:       019B7C7EDF371DF204BF08C25B7D2BD3CD2D
Authority key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/w9o_zsQL-b4SQfaTAhWoIRM44P4.roa
Signing time:             Fri 02 Jan 2026 02:17:28 +0000
ROA not before:           Fri 02 Jan 2026 02:17:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204156
IP address blocks:        188.214.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 08:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7e:df:37:1d:f2:04:bf:08:c2:5b:7d:2b:d3:cd:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75790c7ecf24d28be2e13fe069118cee27d58002
        Validity
            Not Before: Jan  2 02:17:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c3da3fcec40bf9be1241f6930215a8211338e0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:d0:ee:f6:83:ab:6f:b7:63:eb:92:58:bd:
                    b6:12:d8:ab:cb:fc:08:cb:3c:4e:41:88:24:33:2d:
                    03:46:d5:23:a5:f4:6a:07:4c:fd:bf:ca:aa:f5:cf:
                    11:11:92:b4:e6:84:d5:e9:d1:16:02:e1:98:1e:1a:
                    39:90:a3:e0:9c:3c:9a:7a:5c:d0:9e:03:ba:09:d1:
                    38:94:ce:93:8e:4b:04:37:71:42:f1:e4:ae:98:95:
                    1f:fb:c1:98:1c:a7:d7:82:0e:30:4a:56:11:06:e9:
                    8b:43:5f:9c:68:df:19:7a:17:9c:89:54:ff:bb:69:
                    5e:35:fc:d0:80:a3:b3:d7:14:fa:57:84:9a:4d:6d:
                    02:95:9c:2f:e8:44:5f:a8:c3:dd:30:12:5c:7e:7b:
                    f1:35:9c:95:b5:91:db:1b:32:94:c9:f3:a6:9e:e7:
                    ab:3a:d3:81:92:71:e0:4e:51:d4:6b:f4:b4:2d:2c:
                    3c:47:46:85:a9:0a:47:49:6c:b8:e0:3e:de:78:63:
                    c9:1b:99:a7:58:03:a0:8f:c6:80:90:5e:5b:c9:01:
                    88:ea:a7:7b:28:62:78:0f:d5:20:7d:02:8c:04:f1:
                    12:81:fd:0c:12:a3:16:7e:c0:2c:c9:90:51:50:3a:
                    45:7b:3b:ae:57:23:5e:b9:d1:33:d6:8d:68:84:45:
                    98:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DA:3F:CE:C4:0B:F9:BE:12:41:F6:93:02:15:A8:21:13:38:E0:FE
            X509v3 Authority Key Identifier:
                keyid:75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/w9o_zsQL-b4SQfaTAhWoIRM44P4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.214.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:16:0c:08:5d:b8:ad:19:d1:4f:dc:20:86:8e:19:e8:d7:e6:
         dd:27:e2:c2:4d:31:b0:73:23:ef:3e:f2:f1:4f:06:06:d3:56:
         8d:c1:41:b0:58:b1:1e:02:dc:65:26:4f:9d:58:00:dd:59:92:
         f9:b6:6c:c8:6f:2b:b8:30:65:51:e2:9d:61:ac:6d:43:a2:96:
         9c:26:6c:d0:9a:46:af:f0:88:73:fc:cb:95:b4:38:47:ce:f6:
         17:f0:b0:f5:bb:80:30:39:24:0f:f3:01:09:6e:1c:41:02:51:
         b4:69:15:b9:db:b9:4c:53:76:06:56:f9:cf:73:9d:80:e9:08:
         2a:18:9e:a7:42:29:ce:08:ca:e5:8b:dd:90:c7:52:e0:ed:ad:
         b5:d9:8b:d4:57:86:67:61:dc:fb:ec:92:79:17:5d:17:f1:0f:
         1f:4f:77:f6:66:e5:a3:9c:90:44:25:27:cb:fc:95:4e:1b:cd:
         15:a9:63:bc:e8:d5:57:26:64:91:69:58:71:3c:39:d9:c5:03:
         7f:34:60:b6:eb:55:9a:4f:b2:96:a2:be:66:09:bb:32:05:03:
         a0:ef:1a:b3:8f:2f:02:6d:f4:20:b5:58:e1:fc:53:fc:de:79:
         5f:54:3a:23:a9:d5:9e:98:c3:13:69:e0:e7:d0:dc:56:dc:5b:
         71:d7:e5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:18:15 2026 by rpki-client