This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/W6r1Xf359EvERdszO03c0jG6MG4.roa
File:                     W6r1Xf359EvERdszO03c0jG6MG4.roa (raw, json)
Hash identifier:          +gys/EXvyZnuR65b/K3TLTZ+N9R8n7uQdreEwOqoV6Q=
Subject key identifier:   5B:AA:F5:5D:FD:F9:F4:4B:C4:45:DB:33:3B:4D:DC:D2:31:BA:30:6E
Certificate issuer:       /CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
Certificate serial:       019B775957F1A5EB001B9D885B0EACA3FEA7
Authority key identifier: 78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/W6r1Xf359EvERdszO03c0jG6MG4.roa
Signing time:             Thu 01 Jan 2026 02:18:22 +0000
ROA not before:           Thu 01 Jan 2026 02:18:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8412
IP address blocks:        195.182.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:57:f1:a5:eb:00:1b:9d:88:5b:0e:ac:a3:fe:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
        Validity
            Not Before: Jan  1 02:18:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5baaf55dfdf9f44bc445db333b4ddcd231ba306e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:2a:40:a0:b9:cb:c3:f2:09:4e:05:a2:a0:
                    00:22:af:b2:ef:55:3c:1b:76:16:dc:dc:37:59:a1:
                    0c:09:84:2d:93:69:1c:5b:ec:86:04:cd:62:06:a0:
                    c0:88:2e:b5:7a:f2:03:47:d9:36:02:de:49:26:24:
                    58:c7:97:0c:fa:06:88:da:11:47:33:ff:67:14:19:
                    8a:69:89:4e:55:c0:4f:94:81:00:2f:3a:11:41:28:
                    76:3a:c6:4f:03:86:7b:1e:57:6b:ec:38:ea:1e:e9:
                    c3:40:4e:4d:9a:96:e6:59:44:22:cf:7f:59:98:01:
                    5e:d4:d6:3d:67:13:07:c4:74:eb:2d:52:1d:b7:64:
                    43:20:fc:76:06:ac:8c:e5:0f:c4:44:99:03:16:16:
                    73:f0:a1:a5:00:0a:1d:ba:38:4e:19:84:94:f6:17:
                    d1:9f:80:6e:1a:88:29:88:6a:4b:b1:cb:1e:c3:ca:
                    3f:09:8b:d1:79:b1:4d:49:bf:93:e2:83:ab:94:24:
                    9f:40:04:c6:5b:a7:d2:46:ab:a5:53:8c:2d:00:8e:
                    9f:2e:61:47:2e:42:ea:1e:8a:39:92:e1:e0:09:41:
                    ca:ec:54:bd:26:37:ae:b3:26:1c:ac:f0:9c:7c:46:
                    10:ab:98:54:fb:f8:d1:3e:27:4d:fc:fd:0f:d3:e5:
                    75:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AA:F5:5D:FD:F9:F4:4B:C4:45:DB:33:3B:4D:DC:D2:31:BA:30:6E
            X509v3 Authority Key Identifier:
                keyid:78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/W6r1Xf359EvERdszO03c0jG6MG4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.182.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:52:1d:53:00:80:dc:6c:70:4a:90:32:56:25:f0:5d:25:44:
         fc:e5:21:b1:65:8c:fa:1b:4f:48:69:66:ae:79:f8:68:88:d4:
         b1:40:36:54:19:0f:df:84:4e:9f:ad:a8:a4:44:87:45:80:16:
         fd:8f:e1:2e:1b:f6:de:6a:7d:60:c7:59:15:ab:b5:9c:26:87:
         18:79:fb:cc:15:ad:9f:a1:53:3c:a0:02:9a:c6:c2:d9:1f:de:
         80:e8:d9:cf:36:bd:05:6c:b8:23:88:a2:b8:96:f0:15:66:0e:
         2a:32:0d:af:51:ca:29:81:3e:18:ff:03:91:a2:1e:1c:b5:0b:
         f5:cd:cb:01:01:d2:69:81:d3:55:ac:1b:cd:cf:7b:be:66:da:
         28:36:b9:7f:df:9b:40:58:0d:5b:5b:5a:5c:39:95:41:60:96:
         2c:67:2c:d0:8d:4d:43:04:b0:a8:f9:76:cf:ec:04:bb:63:99:
         32:1f:56:e8:30:99:60:38:52:12:34:7f:8c:5a:06:35:e9:d3:
         c2:42:12:91:7d:be:94:a7:1e:95:b2:15:42:24:17:bb:10:20:
         8a:50:40:a1:36:c5:c3:5a:13:46:3c:8f:ad:18:58:d3:c6:1e:
         72:14:4f:f4:8e:8f:4c:e1:71:49:44:0d:04:ae:0e:6f:5d:e6:
         74:b8:2c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:54:40 2026 by rpki-client