This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W2jeEkJFTO9bACNffoYk-rjSW8Q.roa
File:                     W2jeEkJFTO9bACNffoYk-rjSW8Q.roa (raw, json)
Hash identifier:          m4jSnkSV7Yo4l9lkgzwkyhUhUusXlTKCtLHnJjH21k0=
Subject key identifier:   5B:68:DE:12:42:45:4C:EF:5B:00:23:5F:7E:86:24:FA:B8:D2:5B:C4
Certificate issuer:       /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial:       019B7D5D0226DD525735523CB705162C2422
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W2jeEkJFTO9bACNffoYk-rjSW8Q.roa
Signing time:             Fri 02 Jan 2026 06:20:05 +0000
ROA not before:           Fri 02 Jan 2026 06:20:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214263
IP address blocks:        79.127.73.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5d:02:26:dd:52:57:35:52:3c:b7:05:16:2c:24:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
        Validity
            Not Before: Jan  2 06:20:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5b68de1242454cef5b00235f7e8624fab8d25bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:10:c7:e6:3f:7a:a5:eb:e3:b0:ec:ce:64:65:
                    89:c4:a5:f4:d9:13:20:fb:a6:e2:56:45:a8:a2:90:
                    ad:1c:4d:6c:7e:57:eb:4a:03:13:18:55:2d:00:2b:
                    87:e7:fc:21:34:1c:9b:28:15:ac:46:37:46:46:19:
                    43:8f:52:a9:c2:93:3e:68:36:7d:fa:fb:96:fa:cf:
                    6c:ee:ec:8f:ec:d5:a2:65:f3:3c:f8:fe:f4:d5:6b:
                    35:39:b6:f0:da:ca:3a:50:eb:05:c2:b0:33:e3:de:
                    ce:67:8b:76:cc:14:95:90:d3:81:cf:b7:d2:07:95:
                    5d:39:d8:90:53:aa:b9:a2:cf:dc:70:82:5c:b5:ca:
                    85:34:b3:17:98:9a:4f:23:4e:d1:b6:a9:d8:fa:0b:
                    a3:96:ca:70:26:00:0d:8a:9e:c2:f5:f1:bc:57:de:
                    16:ac:00:65:c7:8c:52:3c:71:d4:c1:80:fd:f5:0c:
                    ea:a6:f7:c2:73:79:b1:1d:2e:02:31:7f:df:84:ca:
                    8a:f7:69:c1:53:a8:50:92:f1:06:14:eb:d8:fb:bc:
                    80:9c:1b:ae:f2:fc:3a:cd:f9:d2:83:3e:1b:19:23:
                    0b:c0:1a:55:c0:e7:bc:ef:6c:fd:49:cd:12:63:ea:
                    34:fe:a9:31:13:69:92:7c:67:f5:fe:89:6e:b1:94:
                    4d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:68:DE:12:42:45:4C:EF:5B:00:23:5F:7E:86:24:FA:B8:D2:5B:C4
            X509v3 Authority Key Identifier:
                keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W2jeEkJFTO9bACNffoYk-rjSW8Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.127.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:3a:b8:f2:db:67:1d:75:b7:09:bd:c9:48:12:2f:b3:52:72:
         21:4c:ad:c7:74:27:d1:ff:4d:9c:57:75:d1:fa:d8:6d:ef:06:
         a0:68:35:68:88:c6:69:c9:b2:e5:6f:b6:db:cc:a6:ec:40:37:
         dc:e8:cb:18:ab:79:30:8e:7e:8a:54:8e:0a:2f:cb:d7:b8:af:
         05:94:e7:bb:d7:18:4e:44:48:93:b0:9f:e5:68:21:97:d1:26:
         5d:bd:34:a9:c7:a5:c4:38:9e:b8:47:a1:11:dd:7e:51:8b:3c:
         35:a8:72:57:b7:64:53:90:aa:7d:36:22:40:3b:9e:da:02:85:
         e7:55:e5:9d:4e:65:fa:50:86:a6:95:32:9c:a3:68:6f:85:bf:
         f5:81:89:cd:f7:52:24:3d:80:11:f1:6d:4b:83:93:e4:7d:a0:
         34:df:02:5f:b0:d8:e0:66:23:18:5f:08:f3:e6:58:ac:69:76:
         30:64:91:f0:0f:37:0b:3e:aa:25:ef:dd:3b:24:52:2f:48:08:
         39:ef:07:d8:e8:ca:44:a8:22:52:5e:44:77:f6:0e:69:28:40:
         fc:07:fa:6b:9c:47:f5:8d:a9:76:e5:e8:95:37:4f:d0:5e:44:
         d3:44:89:9f:5a:db:c1:47:bb:b4:1c:8f:51:8e:e9:bb:08:c0:
         e9:50:ee:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:15:06 2026 by rpki-client