This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/3wUGAUyz1DeLwdPPyYEFDfRHGKE.roa
File:                     3wUGAUyz1DeLwdPPyYEFDfRHGKE.roa (raw, json)
Hash identifier:          Ps7kDJqtUtMVk+txzusu+REbzqUZZVNNkH7s/aWePGw=
Subject key identifier:   DF:05:06:01:4C:B3:D4:37:8B:C1:D3:CF:C9:81:05:0D:F4:47:18:A1
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       019B76EB2B03254E15CC51688F5A398099F2
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/3wUGAUyz1DeLwdPPyYEFDfRHGKE.roa
Signing time:             Thu 01 Jan 2026 00:18:02 +0000
ROA not before:           Thu 01 Jan 2026 00:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212560
IP address blocks:        31.193.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:2b:03:25:4e:15:cc:51:68:8f:5a:39:80:99:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: Jan  1 00:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=df0506014cb3d4378bc1d3cfc981050df44718a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:17:1c:5f:85:56:7b:11:10:72:58:3c:8b:72:
                    86:14:ef:13:eb:59:b8:14:51:ca:1c:da:25:aa:ab:
                    d2:32:ca:e7:b1:37:67:7b:92:c8:39:c2:d9:4b:19:
                    7d:04:94:a2:64:8a:31:6c:46:59:cc:98:73:35:f2:
                    c8:d6:7f:81:42:2c:52:27:52:cc:d2:cc:e0:ec:a0:
                    f8:22:c8:94:2b:36:44:66:ad:25:04:4c:7e:3d:ab:
                    5c:fd:42:72:8b:22:38:50:fc:93:01:b4:3b:e2:fe:
                    7a:d9:c7:79:2b:fb:cd:81:ed:91:5f:fd:d0:18:b8:
                    a1:c9:a9:af:3b:53:4a:48:b7:82:7d:62:d8:68:6b:
                    14:3f:29:22:d4:68:db:ea:ad:a7:15:4a:a2:9b:ec:
                    8e:e3:0c:6c:f5:eb:23:9f:b9:36:da:8f:9c:19:77:
                    c7:0b:b8:d9:cd:ee:6c:3d:c4:05:ad:b7:b7:61:19:
                    11:cb:b4:9f:8e:a6:57:3d:11:94:0a:f7:e3:e7:11:
                    a1:6d:96:d8:fd:ed:6f:83:51:ca:16:11:c3:7b:e7:
                    5c:c0:50:53:9e:5f:12:cf:c3:a5:e4:95:33:8d:40:
                    d9:0f:51:80:49:d8:49:c9:80:06:98:99:80:4b:8a:
                    8b:5c:42:90:b9:95:bf:45:4e:0d:dc:e0:d8:91:e1:
                    f6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:05:06:01:4C:B3:D4:37:8B:C1:D3:CF:C9:81:05:0D:F4:47:18:A1
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/3wUGAUyz1DeLwdPPyYEFDfRHGKE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.193.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:42:d3:89:bb:0a:6f:97:57:70:22:17:8b:a8:5a:84:3a:7e:
         5a:ea:9c:4b:3e:99:53:b1:eb:79:24:32:70:83:8f:f2:fe:e8:
         60:43:69:e8:60:6f:6f:ec:c3:0a:ea:66:ee:3b:de:32:9b:df:
         32:db:d4:0f:0f:a1:13:9b:92:95:38:51:58:f2:47:2c:1d:87:
         68:7c:32:8d:7f:a4:77:46:ce:05:04:b6:4a:fc:6e:78:c0:17:
         32:62:5c:d8:a8:e5:d7:d7:c2:e0:32:9b:16:8a:ac:68:23:da:
         e8:4d:c1:14:01:f0:fb:f7:0c:e6:5b:8c:19:c2:36:83:3f:4a:
         a8:81:e4:51:53:d8:0f:cf:ed:25:c6:8c:fb:9f:2e:3a:65:54:
         1e:f8:c1:04:4a:f8:08:42:7b:a6:d7:54:ef:a4:e3:3c:60:af:
         c8:47:8f:6a:cf:e9:67:08:e3:01:e0:4b:1b:91:69:1a:db:70:
         4b:db:c0:2c:80:8c:2e:03:3b:0c:18:fe:90:c8:c7:26:40:44:
         3a:1b:fa:d0:b6:7e:3f:b2:1e:56:ff:87:b7:7e:34:d0:45:47:
         d1:be:96:4a:f2:6d:03:10:18:b0:57:47:8c:58:db:5e:29:45:
         ae:f4:23:7f:29:f2:cf:fb:a7:12:73:ef:83:8a:c2:5e:07:f2:
         28:07:72:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:38:58 2026 by rpki-client