This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/WO53TAvChGXXDpLngdjuE9kLPCg.roa
File:                     WO53TAvChGXXDpLngdjuE9kLPCg.roa (raw, json)
Hash identifier:          t9C7935SqoAWtIKVzerLbCGooEBtDnGcFQNhviM2cFg=
Subject key identifier:   58:EE:77:4C:0B:C2:84:65:D7:0E:92:E7:81:D8:EE:13:D9:0B:3C:28
Certificate issuer:       /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial:       019B78A32ED0C9F4120F7E877F0F696C22FB
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/WO53TAvChGXXDpLngdjuE9kLPCg.roa
Signing time:             Thu 01 Jan 2026 08:18:38 +0000
ROA not before:           Thu 01 Jan 2026 08:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     36352
IP address blocks:        45.95.186.0/24 maxlen: 24
                          2a0e:3840:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:2e:d0:c9:f4:12:0f:7e:87:7f:0f:69:6c:22:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
        Validity
            Not Before: Jan  1 08:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=58ee774c0bc28465d70e92e781d8ee13d90b3c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:92:86:eb:e2:69:c1:61:7c:8d:74:35:8c:e2:
                    f7:0b:ba:03:49:6d:81:b6:05:c1:58:c7:7f:ff:f3:
                    fa:68:53:dc:eb:f4:7f:c0:b6:1a:5a:64:a5:8e:74:
                    36:9e:4c:af:7c:ef:92:bf:35:71:af:91:2c:28:2d:
                    94:25:8e:bf:a1:98:5d:f6:0d:cb:5e:08:7a:b1:80:
                    71:76:4f:19:35:59:de:d7:43:ec:61:d8:db:de:dc:
                    48:1a:0e:f7:11:63:88:8a:d0:2b:9b:ec:19:09:fb:
                    12:2d:e3:aa:71:e0:16:95:71:08:a8:86:7c:d0:6b:
                    8d:59:5d:07:9d:d3:f6:ee:9e:65:ff:da:96:c0:52:
                    91:3c:a2:81:01:87:e6:48:a5:55:fd:31:f1:4c:c6:
                    3a:a3:db:14:1c:89:53:c0:3a:e3:6b:1d:7d:3c:14:
                    87:21:be:51:29:48:7e:c7:27:83:e2:75:44:66:15:
                    d2:77:8c:03:b3:f3:a6:eb:26:24:e1:99:49:2e:cb:
                    76:7d:e5:8b:cb:52:89:13:3c:0c:75:9e:d0:01:bb:
                    72:fb:94:cd:6b:30:a2:dc:49:a5:7a:97:0c:bd:94:
                    f9:ee:46:cd:c2:47:bb:22:ae:93:48:33:e4:4c:42:
                    67:67:eb:03:60:02:51:eb:e7:8d:1a:ef:89:93:12:
                    ff:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EE:77:4C:0B:C2:84:65:D7:0E:92:E7:81:D8:EE:13:D9:0B:3C:28
            X509v3 Authority Key Identifier:
                keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/WO53TAvChGXXDpLngdjuE9kLPCg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.186.0/24
                IPv6:
                  2a0e:3840:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:12:00:b8:ac:00:b1:34:4e:2b:06:54:1a:96:9d:e0:f3:6d:
         cd:76:e0:00:7b:f3:e0:b0:a8:46:3f:09:03:8d:6c:8a:b2:0f:
         31:d9:0f:fd:08:aa:e7:92:b0:7d:3e:40:a9:6a:99:92:34:0a:
         62:bd:09:e4:f4:ec:7e:c7:c8:c0:75:81:5e:a5:b8:1e:27:51:
         26:60:88:72:3a:c2:fc:6a:c1:87:bd:08:69:4c:f3:5a:61:b3:
         90:a4:01:ad:d5:80:26:d6:aa:bd:0b:2c:85:b8:1e:38:ac:b2:
         ee:20:31:3d:71:b8:b9:d1:2d:e0:19:8a:c2:6c:e3:eb:32:fc:
         73:b2:8b:13:a0:c7:05:69:1a:1a:8b:24:cd:0c:41:01:5c:8f:
         c6:3c:c4:eb:c6:53:bf:89:d1:91:3c:e6:d0:cd:c2:e4:72:f1:
         87:8d:88:98:05:aa:6f:fa:2b:c2:93:f3:9d:f4:06:36:94:b5:
         e6:ba:51:b6:bb:fa:0f:8f:52:ac:ca:04:c9:ca:7a:b9:67:45:
         10:e2:b5:91:c8:75:63:38:4b:63:87:df:c9:f2:73:32:73:3d:
         49:72:08:7e:0e:c6:f1:f7:5b:cc:fe:38:b0:5a:b3:66:ae:be:
         92:55:dd:0e:a8:44:cf:8e:76:50:f7:b8:d0:a5:07:1a:48:89:
         42:d4:af:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:46 2026 by rpki-client