This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/W7nZVgb0zUWTa-CQSc8zglFn-yk.roa
File:                     W7nZVgb0zUWTa-CQSc8zglFn-yk.roa (raw, json)
Hash identifier:          8qZZ+7l1ZHC/t+K4fj+5zc9uGqORgxBHYmAlmab2Xnc=
Subject key identifier:   5B:B9:D9:56:06:F4:CD:45:93:6B:E0:90:49:CF:33:82:51:67:FB:29
Certificate issuer:       /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial:       019B7C1265D79AB928711AAD603FFF996CD7
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/W7nZVgb0zUWTa-CQSc8zglFn-yk.roa
Signing time:             Fri 02 Jan 2026 00:18:59 +0000
ROA not before:           Fri 02 Jan 2026 00:18:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41202
IP address blocks:        176.96.236.0/24 maxlen: 24
                          176.96.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:65:d7:9a:b9:28:71:1a:ad:60:3f:ff:99:6c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
        Validity
            Not Before: Jan  2 00:18:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5bb9d95606f4cd45936be09049cf33825167fb29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:7a:57:89:ae:14:fd:ca:28:ae:3a:86:65:
                    fc:32:5a:bf:86:d9:1c:84:68:b5:bd:a6:f4:28:ea:
                    97:d8:ca:28:14:80:15:90:ab:87:bf:5f:f0:79:bd:
                    75:cb:6f:cb:c8:56:81:62:ce:5d:88:c3:01:21:59:
                    bc:fc:10:79:aa:40:a5:a6:ec:48:ef:b7:90:ed:5e:
                    5e:86:be:2f:22:ff:f0:67:bf:23:e0:b2:54:9c:43:
                    3b:3f:be:66:28:49:bd:f5:e9:dd:03:a6:4d:6f:35:
                    4f:20:ae:e2:ca:f2:a0:54:7c:6c:c6:c8:e4:bd:3a:
                    ab:31:35:18:9a:8b:1e:2f:5a:74:10:67:50:8c:07:
                    1b:f3:a5:b3:69:58:19:59:70:6f:d1:4d:bb:6a:07:
                    25:35:52:8e:d5:36:1c:58:b3:17:f0:bd:15:0b:3b:
                    64:1e:5f:9c:5e:5a:ad:d1:c5:8a:db:f2:7d:91:79:
                    50:ae:5a:e7:2c:9f:b0:75:aa:f1:64:e8:d4:01:2d:
                    ba:2f:cd:2e:47:41:94:bf:76:fc:48:44:e6:df:31:
                    00:e0:ce:ba:75:ae:2a:05:37:f6:e7:35:91:a9:da:
                    93:9b:bb:8c:d7:fb:e2:72:03:fb:b5:ba:37:54:80:
                    15:f1:db:b3:0c:ff:c3:83:6a:43:d9:32:fb:97:6d:
                    e7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B9:D9:56:06:F4:CD:45:93:6B:E0:90:49:CF:33:82:51:67:FB:29
            X509v3 Authority Key Identifier:
                keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/W7nZVgb0zUWTa-CQSc8zglFn-yk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.96.236.0/24
                  176.96.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:35:19:19:64:5e:31:1f:41:78:ab:88:05:87:0f:dc:dc:8e:
         30:07:71:68:c9:38:1a:6a:cf:77:7d:17:38:a5:31:a7:2c:1b:
         4f:d1:ed:e7:44:d8:b3:a6:1d:a9:95:b4:03:84:4c:a0:be:89:
         e7:4e:93:9b:a6:9d:6f:37:c4:37:c5:94:10:79:40:00:69:6b:
         46:c1:fa:2f:4a:46:40:a7:53:d0:76:d7:82:7f:7b:79:d6:28:
         3d:51:8e:0b:c1:ae:74:3d:36:a9:6d:81:d5:93:ef:61:94:ed:
         64:98:db:c7:5f:8a:03:12:04:29:7c:85:1e:e4:65:84:c0:d3:
         60:9c:cd:c1:4b:97:b4:d1:78:91:47:79:9c:5f:f9:b8:e7:c7:
         87:49:cc:de:6e:d6:e0:21:ee:1c:16:d5:52:c6:93:38:a4:df:
         7a:83:9e:3b:4e:9f:6b:3b:51:9f:13:d7:6f:c0:e1:82:74:90:
         cd:86:89:db:11:be:6b:db:a2:d1:fa:1f:54:0d:04:17:04:77:
         05:c5:6c:cb:6c:36:cf:e0:da:fc:ae:20:27:d0:0e:ca:69:fd:
         eb:a1:c4:ba:63:83:0b:96:84:08:13:05:e1:6e:44:a4:4e:e0:
         ab:e2:1b:b6:4a:bc:f6:cc:1a:2f:e7:81:10:73:d8:1a:94:83:
         75:61:d5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:15:36 2026 by rpki-client