This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/Wol6fw44OugIpyfwtURH8iAfI-E.roa
File:                     Wol6fw44OugIpyfwtURH8iAfI-E.roa (raw, json)
Hash identifier:          gGDOi1vglKxk1aYaUA2in8OVjOdtb3M/Bet9OhLskOo=
Subject key identifier:   5A:89:7A:7F:0E:38:3A:E8:08:A7:27:F0:B5:44:47:F2:20:1F:23:E1
Certificate issuer:       /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial:       019B7AC89C4B15C7D36E5475A47657C85871
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/Wol6fw44OugIpyfwtURH8iAfI-E.roa
Signing time:             Thu 01 Jan 2026 18:18:46 +0000
ROA not before:           Thu 01 Jan 2026 18:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3561
IP address blocks:        130.193.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:9c:4b:15:c7:d3:6e:54:75:a4:76:57:c8:58:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
        Validity
            Not Before: Jan  1 18:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a897a7f0e383ae808a727f0b54447f2201f23e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:37:74:99:9a:33:ef:d4:29:1b:dd:b5:e1:
                    08:2d:26:36:d9:a3:25:02:50:9d:04:3e:fb:ab:1f:
                    fa:46:45:92:61:4e:2b:fb:a8:e9:b7:25:b5:3c:ce:
                    42:56:29:fe:a8:05:8b:b1:88:2e:47:b4:2a:43:b2:
                    76:f9:b6:62:25:12:e1:12:bb:4d:93:bc:18:57:93:
                    dc:a9:6f:ef:78:07:8a:15:ed:2f:92:8c:c2:b4:7e:
                    70:91:e5:fa:e0:26:8f:5d:8f:c2:d2:fc:47:19:de:
                    57:1a:98:7e:6b:56:ba:eb:46:51:28:82:10:1e:0b:
                    16:84:9a:e0:90:af:18:7c:69:c7:30:13:d4:7e:c9:
                    88:0f:02:d4:25:c8:9c:e3:6d:f5:38:70:5a:de:c9:
                    24:52:4e:d2:35:ec:1f:35:cd:31:57:f4:c1:26:c9:
                    8c:40:e0:84:6c:c7:57:5b:83:8e:64:3e:f5:44:96:
                    8e:06:3b:3e:1c:db:b5:be:6e:74:be:97:dc:b1:db:
                    a3:b9:8c:ff:17:60:75:65:8f:de:4c:44:5f:da:bf:
                    e6:30:9d:54:26:97:29:44:2b:40:71:c9:76:73:aa:
                    bf:37:a2:3e:79:b6:33:b8:7c:4b:99:f0:c6:bc:9d:
                    72:e3:54:01:3a:b7:fe:76:f6:a5:02:3e:ad:2a:3e:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:89:7A:7F:0E:38:3A:E8:08:A7:27:F0:B5:44:47:F2:20:1F:23:E1
            X509v3 Authority Key Identifier:
                keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/Wol6fw44OugIpyfwtURH8iAfI-E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.193.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:98:b2:17:52:90:33:64:bd:be:be:9f:f2:10:c7:0c:23:16:
         c4:0b:c5:01:a5:3e:b1:76:1d:61:86:83:43:12:bd:99:6e:68:
         30:bd:63:49:70:a8:f1:03:4a:98:00:cf:95:5c:a2:7d:35:a1:
         91:75:91:92:38:72:aa:0c:95:cc:d2:c0:72:d9:3a:f2:e4:17:
         93:75:b9:c7:bd:b0:ff:37:7d:ee:af:84:f1:4e:19:79:2a:33:
         c8:cc:22:67:f6:1f:ef:83:57:9c:b6:f2:42:14:89:e6:4a:4f:
         73:b6:c0:0f:48:a4:ad:c9:c1:fa:28:4d:b8:56:f9:bb:0b:7d:
         b9:34:b7:b7:27:69:7e:39:0c:4f:8f:d4:fa:bf:14:3c:50:3a:
         a1:06:02:4a:46:3a:e9:06:a2:e0:c5:f3:6b:5e:e2:37:12:62:
         f5:59:df:b1:4e:60:74:e4:4c:56:37:96:10:fa:d5:71:43:9b:
         28:1d:8d:9c:61:54:9e:bf:63:cc:ba:9f:c1:a5:e9:7a:82:e7:
         9e:bf:10:cd:d9:f6:37:a4:b4:12:c7:54:5a:10:5e:21:a6:a9:
         ca:52:0b:7f:7e:41:41:76:18:7d:1e:d5:57:56:82:d8:65:cf:
         3f:3e:e5:66:75:df:52:b1:ce:c0:22:e9:32:33:6f:ee:65:93:
         a4:7d:84:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:43:36 2026 by rpki-client