This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa
File:                     Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa (raw, json)
Hash identifier:          kiedoz3ErnGMUTlwmvNgwCKeQntAzy8i6UBh3qNDF0Q=
Subject key identifier:   5A:C9:25:FF:7B:8F:1D:E9:14:17:7C:F1:DD:06:76:C4:45:15:B8:BD
Certificate issuer:       /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial:       019B7F1375F08573DDDBC32C55074A5251CF
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa
Signing time:             Fri 02 Jan 2026 14:19:00 +0000
ROA not before:           Fri 02 Jan 2026 14:19:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214893
IP address blocks:        188.72.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:13:75:f0:85:73:dd:db:c3:2c:55:07:4a:52:51:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
        Validity
            Not Before: Jan  2 14:19:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5ac925ff7b8f1de914177cf1dd0676c44515b8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:d2:a3:f6:70:31:02:b9:1b:24:f2:47:4f:
                    8e:89:b3:72:af:f8:c1:4f:2c:ac:ba:b9:00:de:79:
                    70:8c:4b:2e:53:4d:38:b0:2f:c3:8e:be:5a:32:0c:
                    fc:5f:e7:c4:39:51:11:9d:85:1d:69:60:75:19:c1:
                    18:d7:95:05:f7:97:57:ab:87:17:be:19:00:a9:14:
                    01:e8:d8:dd:3e:61:41:85:61:53:44:24:25:f7:5b:
                    1b:99:cb:46:d2:8e:49:fe:5a:12:10:59:e3:78:96:
                    a5:9e:4e:ab:1b:47:2f:ca:5c:84:a2:97:80:12:61:
                    2d:e1:24:c2:1b:ef:73:cd:88:3a:00:5b:10:56:06:
                    e7:9e:c8:ca:44:37:59:3f:97:b7:10:bb:4a:0f:40:
                    9d:4e:00:82:df:c1:ec:0c:e9:f4:f5:c3:14:5e:93:
                    d9:3e:92:cb:c4:5c:55:10:57:51:65:2b:bb:90:71:
                    78:48:86:0c:1a:ae:0f:0d:a4:1a:a9:5e:c2:46:44:
                    b2:de:31:17:26:36:8f:96:e0:14:24:2d:3b:43:44:
                    ad:77:79:e1:e8:20:50:fb:f0:32:b7:09:b4:f3:16:
                    35:1b:62:f8:71:d9:1a:5d:33:d0:b8:43:e3:79:34:
                    64:84:cd:70:1b:99:50:66:fa:e9:00:20:74:8f:e6:
                    73:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C9:25:FF:7B:8F:1D:E9:14:17:7C:F1:DD:06:76:C4:45:15:B8:BD
            X509v3 Authority Key Identifier:
                keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.72.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:0d:10:b2:d1:3f:17:0a:29:dd:39:5a:d5:b3:a6:a8:a2:c5:
         f0:2a:26:c0:30:a2:01:bb:7f:c8:92:42:18:60:c2:9a:3e:a7:
         ce:91:ae:0c:4a:01:cb:e9:ba:0a:22:08:78:b1:26:bd:08:ec:
         55:bf:0d:e6:78:16:bb:5b:3d:bb:a8:c8:e2:59:70:47:fd:19:
         9c:de:28:d7:92:42:57:41:43:7b:4c:9d:b1:2a:bb:82:8c:5e:
         4a:a9:d3:f7:7a:49:b6:cd:72:8f:0a:c9:e0:a5:48:2c:ef:55:
         58:e8:59:79:2c:13:ea:49:6e:a1:07:6c:03:c6:f4:73:f2:14:
         32:9d:a0:d6:dc:b9:06:b6:79:c1:cc:b3:bf:d9:60:e3:52:7d:
         46:d4:f5:74:d7:a2:18:8d:7f:f2:7f:8c:6e:49:65:fd:6b:5e:
         c7:03:1a:bc:48:4a:1b:2c:ab:f0:ee:83:fb:c5:70:77:77:dc:
         cb:42:52:a7:95:4a:93:77:e6:e9:cc:4c:0d:16:27:58:4b:6e:
         86:94:89:63:94:a7:28:42:55:fc:05:e8:cf:6d:db:95:ad:1b:
         3b:55:b8:34:6d:d4:87:7e:38:56:c2:d9:2b:e2:6f:48:c6:47:
         ce:46:73:3e:f0:37:5d:0f:99:3c:76:c4:e1:02:32:97:8b:e4:
         ae:11:fb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:10:37 2026 by rpki-client