This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/LSAWyXC6RZ92YikRbbKLWVep44w.roa
File:                     LSAWyXC6RZ92YikRbbKLWVep44w.roa (raw, json)
Hash identifier:          x6W54UY6MC95QZSpMFBBV/mvBodVJg9mR0Wf7ufCCX4=
Subject key identifier:   2D:20:16:C9:70:BA:45:9F:76:62:29:11:6D:B2:8B:59:57:A9:E3:8C
Certificate issuer:       /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial:       019B7F150E99D92D2A9D24D3547136A8D1E5
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/LSAWyXC6RZ92YikRbbKLWVep44w.roa
Signing time:             Fri 02 Jan 2026 14:20:44 +0000
ROA not before:           Fri 02 Jan 2026 14:20:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204069
IP address blocks:        2a14:c380:c50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:0e:99:d9:2d:2a:9d:24:d3:54:71:36:a8:d1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
        Validity
            Not Before: Jan  2 14:20:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2d2016c970ba459f766229116db28b5957a9e38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:57:55:ef:7c:fb:30:2d:2a:e8:20:ce:a7:c1:
                    ca:6a:78:da:1d:bf:29:ff:0b:c7:66:af:76:cc:4f:
                    a0:f4:34:2f:86:36:b7:e3:8b:78:12:6a:1a:b1:ab:
                    3b:71:22:29:ea:63:7a:9c:cc:a9:80:cf:1f:30:c5:
                    1b:ae:ca:29:97:9e:d8:f0:6b:1b:3f:dc:c6:7c:04:
                    99:b4:3d:fe:53:4e:a6:1e:73:5f:f3:f5:04:fb:e1:
                    6c:9c:a6:90:76:34:30:e0:71:77:de:d6:35:45:bd:
                    2e:38:e2:02:4b:b5:68:55:88:7b:4a:06:41:7e:d0:
                    02:8f:4b:2d:a9:e1:d0:8f:47:3e:00:d1:77:26:99:
                    49:ab:43:53:7b:4f:bd:e0:27:a2:25:8d:a1:f3:a2:
                    75:a8:6e:8b:a3:36:28:a9:0c:70:e1:1f:b7:7e:84:
                    c0:07:63:c3:be:ff:8a:7d:01:e4:2f:e1:06:71:28:
                    0c:62:75:c6:11:31:c3:a1:1b:40:80:3e:42:7b:49:
                    88:8b:ce:b2:e2:6c:ca:d1:a1:fb:2d:62:6e:40:13:
                    a9:9e:d6:20:26:52:19:b9:f0:1a:7e:5b:19:26:2d:
                    79:4c:b4:ee:12:53:cf:19:5c:07:ea:cc:7c:a9:e8:
                    11:74:55:d9:e3:8e:4f:3f:97:86:93:08:a9:19:06:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:20:16:C9:70:BA:45:9F:76:62:29:11:6D:B2:8B:59:57:A9:E3:8C
            X509v3 Authority Key Identifier:
                keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/LSAWyXC6RZ92YikRbbKLWVep44w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:c380:c50::/44

    Signature Algorithm: sha256WithRSAEncryption
         7a:c6:5a:1a:8c:5e:ec:12:42:cf:3f:77:98:e0:de:53:16:e6:
         6c:ef:9e:79:8c:e2:29:3e:73:84:e4:28:0f:23:90:62:72:64:
         08:88:66:24:8a:2c:78:df:ef:4a:ae:78:b8:d0:c0:3b:8e:71:
         35:d1:8c:a0:81:96:85:17:ae:c2:0b:16:41:c2:25:60:ec:e8:
         57:e2:21:75:1b:d2:e4:9d:69:a6:78:d6:48:3b:f1:c4:82:d6:
         22:8e:1c:66:f6:c7:d1:1b:fa:ec:5b:b0:40:2b:d1:e4:a4:8a:
         ae:02:dd:83:ee:32:ba:ec:4a:18:2f:1b:06:87:b0:5a:6c:e1:
         cd:b5:47:ce:df:ee:02:d0:18:f7:f2:38:65:1e:58:24:d8:41:
         eb:9b:dc:9c:ac:42:1b:34:cf:9f:86:cb:15:87:04:22:7b:b9:
         2a:26:bc:ce:0e:a1:90:c4:55:96:b6:2c:7d:53:c8:67:04:b2:
         df:b9:77:6f:0b:33:4e:16:54:40:b7:b0:17:bf:c5:04:18:57:
         15:85:8f:3a:db:b5:ad:9c:83:65:68:58:19:bb:d4:52:ed:03:
         7a:f5:29:65:53:85:58:92:69:50:df:89:15:09:1e:6d:f2:60:
         12:5a:f4:d7:d0:ab:ae:af:0c:4f:14:3f:de:f9:65:d6:13:8d:
         2d:08:70:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:17:49 2026 by rpki-client