This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WQsGILUrdOkjujpfknh222flBW4.roa
File:                     WQsGILUrdOkjujpfknh222flBW4.roa (raw, json)
Hash identifier:          jS8RNtty157ZsNJwgLNNODG9khw4HKZD+Tohhjb9lA4=
Subject key identifier:   59:0B:06:20:B5:2B:74:E9:23:BA:3A:5F:92:78:76:DB:67:E5:05:6E
Certificate issuer:       /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial:       019B7F151702592A675C88710C1DFD603C35
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WQsGILUrdOkjujpfknh222flBW4.roa
Signing time:             Fri 02 Jan 2026 14:20:47 +0000
ROA not before:           Fri 02 Jan 2026 14:20:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213725
IP address blocks:        2a14:c380:280::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:17:02:59:2a:67:5c:88:71:0c:1d:fd:60:3c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
        Validity
            Not Before: Jan  2 14:20:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=590b0620b52b74e923ba3a5f927876db67e5056e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8c:45:1e:74:cb:99:62:50:df:34:76:bd:82:
                    29:71:35:ee:4d:54:4a:3b:32:0f:2b:94:49:ba:eb:
                    63:ed:eb:3a:e4:4c:ab:01:98:5e:5e:d1:50:ae:9b:
                    e2:58:98:14:a9:0f:32:4f:70:36:bf:8d:86:44:cd:
                    4e:0e:bc:81:1d:8c:a5:b8:fc:cf:42:f2:7a:af:76:
                    89:f6:15:f9:53:8c:64:55:56:76:b3:77:90:25:7c:
                    fd:0d:18:a2:0f:67:c7:3c:c0:51:d2:e0:62:d2:f4:
                    20:7a:be:20:6f:db:e9:d3:7b:6b:ac:86:fd:42:cc:
                    06:7b:ef:da:3c:48:04:79:56:79:4c:e5:eb:1e:c3:
                    9f:ef:c0:2a:93:4e:30:bb:00:e8:33:62:61:fa:d8:
                    8e:51:23:43:a3:38:93:83:9b:22:9c:9f:55:27:14:
                    ca:83:68:c1:fd:1e:35:20:7a:e6:ab:cd:78:be:19:
                    d2:4c:3e:14:81:c1:8f:26:a5:8d:78:c7:e5:74:18:
                    cf:5e:9c:cc:dd:a6:21:aa:1a:85:2e:7f:fe:bf:8b:
                    fb:7e:b6:cf:a9:0a:80:e8:1c:a0:03:48:6b:d6:c1:
                    76:24:e8:ce:2f:5d:5e:8a:3b:0e:be:cc:73:db:85:
                    93:a7:31:4d:89:41:46:41:c0:c9:3f:5e:ac:66:e4:
                    d8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0B:06:20:B5:2B:74:E9:23:BA:3A:5F:92:78:76:DB:67:E5:05:6E
            X509v3 Authority Key Identifier:
                keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WQsGILUrdOkjujpfknh222flBW4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:c380:280::/44

    Signature Algorithm: sha256WithRSAEncryption
         3e:a8:67:f8:3a:88:8a:66:d0:8b:ff:f4:c1:08:a3:1e:8e:52:
         61:7c:47:6a:71:31:a7:83:a7:d6:91:f3:06:94:aa:79:9b:a3:
         c3:bc:74:3c:fc:e2:ae:af:48:4c:0c:91:a4:10:35:58:2f:da:
         47:3e:e0:14:8a:41:41:65:7a:83:c8:a2:ca:26:94:89:67:6c:
         09:1e:7c:56:d2:91:22:8d:0a:78:59:f8:70:06:4b:46:90:31:
         8b:57:d0:cc:bd:6f:2e:1b:da:e1:aa:82:65:61:16:3d:67:20:
         ea:f3:77:6d:bc:63:07:e2:e8:45:a2:d3:f1:61:fc:ca:93:eb:
         45:e7:76:00:ee:ce:b1:76:1a:d0:b3:60:3f:f3:0a:12:ae:59:
         ce:34:41:50:43:1f:5a:96:8e:d5:f0:24:bd:15:04:03:8d:61:
         d3:e1:1f:20:6f:a1:f8:d0:a3:6f:70:80:ae:e2:47:ec:7a:0e:
         9d:b2:47:67:41:8d:d5:89:b8:77:8c:70:cd:eb:bf:19:1b:4d:
         96:ce:b2:e6:2c:eb:3b:dd:a5:f6:6b:f0:be:e7:ab:38:55:23:
         46:66:3c:99:d2:50:b7:75:ae:6c:ab:d3:1d:f5:5b:78:d0:ef:
         4b:1e:30:39:8e:c8:01:fc:71:bc:fc:7f:3f:16:25:33:a7:87:
         fb:19:2a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:17:47 2026 by rpki-client