This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/ws_lvviOWiUn6-n1_mvWXNHp31I.roa
File:                     ws_lvviOWiUn6-n1_mvWXNHp31I.roa (raw, json)
Hash identifier:          3Nbd+pvEno+PaE0bZIzANyUWQU5DEYEW5i11jMtE2XI=
Subject key identifier:   C2:CF:E5:BE:F8:8E:5A:25:27:EB:E9:F5:FE:6B:D6:5C:D1:E9:DF:52
Certificate issuer:       /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial:       019B7F84180F6CEB7E725BA31EB100A48E28
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/ws_lvviOWiUn6-n1_mvWXNHp31I.roa
Signing time:             Fri 02 Jan 2026 16:22:01 +0000
ROA not before:           Fri 02 Jan 2026 16:22:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208410
IP address blocks:        37.32.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:18:0f:6c:eb:7e:72:5b:a3:1e:b1:00:a4:8e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
        Validity
            Not Before: Jan  2 16:22:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2cfe5bef88e5a2527ebe9f5fe6bd65cd1e9df52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ee:be:dd:47:53:b0:b1:8a:86:ec:5c:76:28:
                    28:53:f3:d9:b9:c6:34:ed:33:78:5d:ba:ca:58:10:
                    0a:64:fa:55:e7:fd:7e:e6:fa:9c:ed:f9:c9:67:a0:
                    71:d3:94:ab:80:df:15:bc:3b:74:86:06:b4:b2:a5:
                    27:0d:a4:ca:53:9c:e7:35:d8:b0:c1:c6:87:39:82:
                    df:88:14:94:5d:02:88:75:67:38:b2:35:9d:7d:55:
                    41:ce:91:26:bd:06:ef:c6:51:bf:75:8a:ed:70:f0:
                    4d:99:e7:e3:85:a9:f2:a6:70:89:d9:f3:10:58:f7:
                    2c:d7:d8:fa:e0:fb:3b:66:53:b0:9b:a5:6b:52:f4:
                    53:e3:d7:ca:53:b0:d9:d8:cc:8c:61:38:51:bb:c4:
                    2f:e1:f6:27:5e:b8:be:e2:09:3a:d7:ba:b8:7e:af:
                    0f:f7:eb:ae:8e:6f:0f:47:85:de:63:0c:5c:f9:3b:
                    c2:bc:29:6f:b9:d6:02:9b:a7:07:34:40:3d:7c:9f:
                    6b:46:1a:d2:14:a9:6c:a0:d6:81:78:24:84:5e:cd:
                    0c:74:f8:ee:b2:6c:c8:31:4e:60:ab:bb:05:70:6b:
                    fe:d3:8b:d0:42:5f:28:a9:e6:1e:59:1a:86:2c:46:
                    19:16:95:05:88:86:98:49:75:9e:d4:ab:d6:64:d1:
                    fd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CF:E5:BE:F8:8E:5A:25:27:EB:E9:F5:FE:6B:D6:5C:D1:E9:DF:52
            X509v3 Authority Key Identifier:
                keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/ws_lvviOWiUn6-n1_mvWXNHp31I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.32.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:98:72:4a:44:36:17:65:9b:3f:95:13:96:08:95:ee:2a:b5:
         ab:ac:43:99:f2:91:21:28:96:f4:56:57:1d:43:29:6a:0b:ed:
         bf:52:25:54:d2:30:87:b8:39:59:66:a3:0f:20:61:88:8c:81:
         b4:4a:7a:8d:7f:2f:16:0b:07:8c:0d:04:cb:de:b9:f1:34:a3:
         97:92:8d:66:36:38:09:5a:69:2d:d5:00:f1:fb:e2:9f:60:eb:
         cf:64:a4:46:5e:ea:67:bd:9d:1b:f2:d0:dc:9c:ca:3c:56:78:
         18:f2:71:eb:18:b1:88:26:e3:27:46:67:39:d8:82:04:c7:f7:
         57:cf:08:33:9b:32:54:fb:3e:13:e7:40:2f:1e:19:0a:57:df:
         ab:8c:f1:f8:aa:fa:0d:3f:ac:07:48:ae:ea:97:89:e1:e8:1b:
         d0:cd:a3:eb:c5:9b:6a:63:c2:05:c9:1a:e0:45:9e:f0:b2:91:
         63:44:61:d4:2a:69:fa:e5:cb:9e:04:9c:63:15:41:50:35:82:
         b3:4f:64:e3:54:fc:99:e3:19:fd:84:ff:ae:e1:c0:5e:1d:2f:
         d6:d8:c2:c2:82:c7:c3:f6:87:df:09:88:f4:a1:9e:e8:8c:a3:
         50:91:f9:c6:a8:61:6e:83:df:c8:87:71:07:0b:c7:72:37:53:
         06:65:4c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:07:05 2026 by rpki-client