This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/WVu0MFUum9kAhDujtPh81S6Gej8.roa
File:                     WVu0MFUum9kAhDujtPh81S6Gej8.roa (raw, json)
Hash identifier:          NzJFiXqiVNf4MDC3ccb25g7foh0VZnNNX6AioPiB5g0=
Subject key identifier:   59:5B:B4:30:55:2E:9B:D9:00:84:3B:A3:B4:F8:7C:D5:2E:86:7A:3F
Certificate issuer:       /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial:       019B7AC956BAE15597E6D14090E690C98B62
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/WVu0MFUum9kAhDujtPh81S6Gej8.roa
Signing time:             Thu 01 Jan 2026 18:19:33 +0000
ROA not before:           Thu 01 Jan 2026 18:19:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212271
IP address blocks:        5.59.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 08:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:56:ba:e1:55:97:e6:d1:40:90:e6:90:c9:8b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
        Validity
            Not Before: Jan  1 18:19:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=595bb430552e9bd900843ba3b4f87cd52e867a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:c9:8e:4f:d5:94:9d:4e:2c:97:c0:92:75:
                    7b:15:14:1f:35:7c:62:68:96:f2:96:f7:1e:5d:67:
                    6b:27:a0:71:64:e6:9c:5c:d7:fb:a3:5a:5e:a4:94:
                    d0:b5:41:79:2e:3c:5b:87:fc:0e:f5:60:d3:81:8c:
                    0d:0d:f0:7c:e6:a8:bd:6d:23:bc:75:ae:55:3e:fd:
                    31:3d:46:47:13:1d:5c:07:c0:cd:12:32:db:34:f4:
                    ff:e7:4c:a7:60:2e:8c:54:45:04:bb:de:00:73:52:
                    74:e3:8d:2d:2d:65:40:d3:e4:fc:fa:80:6c:95:81:
                    08:86:9a:f9:14:02:6f:3e:d7:69:3d:20:64:9e:cc:
                    85:a7:7c:82:23:14:ee:40:78:66:21:16:cd:85:11:
                    4d:3c:7b:72:e1:27:d2:74:a2:2b:62:f7:51:15:0c:
                    32:cb:48:00:59:9e:75:df:c2:6a:38:59:f7:92:b7:
                    5c:10:fb:d5:62:95:61:0a:0a:c7:cc:44:fc:7f:74:
                    16:3b:1f:13:25:1d:4a:65:5c:cb:88:f3:8a:ab:af:
                    35:1d:ff:84:cc:92:53:7a:44:4a:e2:2f:5f:85:d1:
                    79:b5:ac:fa:74:b0:ca:8c:4f:04:41:a2:61:88:0e:
                    5f:84:aa:27:46:e7:b6:18:21:82:05:62:08:e7:34:
                    24:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5B:B4:30:55:2E:9B:D9:00:84:3B:A3:B4:F8:7C:D5:2E:86:7A:3F
            X509v3 Authority Key Identifier:
                keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/WVu0MFUum9kAhDujtPh81S6Gej8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.59.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b9:93:c9:bb:12:82:b3:d3:e2:50:b0:c3:e7:8c:53:af:97:0f:
         d7:8c:8c:d4:e6:81:67:fc:f9:36:f8:37:0e:0b:6b:4f:e9:96:
         5a:8e:da:4e:9e:db:7a:4e:cc:fa:47:ac:4f:da:f8:43:88:6f:
         c5:aa:8c:c5:c1:85:2e:1e:81:1a:5d:67:99:90:0f:f7:1b:2a:
         de:da:fc:4a:b1:32:b7:6d:d2:6b:c3:d4:dd:72:fb:75:62:57:
         4f:4f:38:f4:ad:c2:91:0d:10:67:a3:68:4e:68:a7:90:f4:16:
         43:1e:4e:e2:09:31:ab:b1:fa:e3:83:87:1c:4a:1f:21:ad:2e:
         2a:d5:8d:8e:49:62:4e:81:40:da:48:ab:af:b8:e1:8c:91:0b:
         d4:31:72:5b:12:18:e7:aa:ec:83:bc:84:d2:85:bb:87:51:e7:
         42:c9:0c:03:3c:aa:b0:5c:da:ca:59:1a:52:c8:4f:cd:a1:31:
         a3:d6:ea:14:ea:3d:dd:54:20:1f:ad:60:13:8b:1b:4b:11:ed:
         ec:56:13:db:0f:fd:89:02:7e:ce:13:7e:32:82:b3:ce:50:8d:
         3a:48:da:d5:37:f3:d5:63:63:ba:e2:cb:89:bf:e9:b0:0d:f1:
         45:89:36:c1:d2:14:e1:3d:73:f4:a5:c8:0e:6a:08:46:aa:73:
         65:c2:c6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:16:11 2026 by rpki-client