This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/W9BSfJR_Mh1sxRdUNbIw0z_Nuio.roa
File:                     W9BSfJR_Mh1sxRdUNbIw0z_Nuio.roa (raw, json)
Hash identifier:          1JlHRLvbAOq6rKIVKlBTqSD7sE9lvV18Y1IWJ6XjyXw=
Subject key identifier:   5B:D0:52:7C:94:7F:32:1D:6C:C5:17:54:35:B2:30:D3:3F:CD:BA:2A
Certificate issuer:       /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial:       019B77589390E2078CF12899B8110BCD29C3
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/W9BSfJR_Mh1sxRdUNbIw0z_Nuio.roa
Signing time:             Thu 01 Jan 2026 02:17:32 +0000
ROA not before:           Thu 01 Jan 2026 02:17:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211336
IP address blocks:        185.184.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:93:90:e2:07:8c:f1:28:99:b8:11:0b:cd:29:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
        Validity
            Not Before: Jan  1 02:17:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5bd0527c947f321d6cc5175435b230d33fcdba2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:eb:0e:67:ff:e4:da:bf:a7:b0:e5:65:1c:
                    0c:54:5a:16:7a:4a:84:aa:52:7c:18:bf:8b:d3:15:
                    b6:44:95:5a:1b:6a:58:a1:ad:ba:19:12:56:62:90:
                    f2:02:a2:3b:7d:46:c9:5b:f7:c4:20:bc:dc:1c:c9:
                    67:c6:a4:f5:12:67:cd:2e:53:ef:50:0d:0d:e7:2f:
                    6b:02:e7:d0:3a:de:db:74:1c:f9:96:e6:ce:36:ac:
                    fd:98:57:c7:af:d1:46:f6:4d:80:e9:5f:5f:a4:42:
                    99:34:34:56:88:6c:3d:87:a2:06:9d:ca:eb:f9:33:
                    cf:64:59:7c:2e:63:4e:24:fe:94:76:ca:21:78:fd:
                    2a:90:11:96:a6:65:74:a7:62:b0:f8:f3:b4:9a:5e:
                    cd:c2:70:4c:d9:a7:c9:3f:55:c8:c3:f5:ae:ba:e0:
                    b9:b4:4b:4b:05:07:45:f8:1f:cf:bc:38:60:3d:0a:
                    b9:f8:10:3a:70:36:38:af:c7:ae:f6:3e:f9:c6:48:
                    02:66:d0:19:4e:ee:2c:db:89:47:eb:ce:3b:bd:d4:
                    e2:0f:92:29:bd:d7:99:a1:76:03:58:a0:b1:68:4b:
                    8b:af:86:fd:36:ae:4e:2a:5b:4f:3e:3c:70:15:7b:
                    a2:3b:65:aa:f0:4e:e8:42:47:48:43:4a:a3:b7:1c:
                    4c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D0:52:7C:94:7F:32:1D:6C:C5:17:54:35:B2:30:D3:3F:CD:BA:2A
            X509v3 Authority Key Identifier:
                keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/W9BSfJR_Mh1sxRdUNbIw0z_Nuio.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.184.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:19:14:89:49:e7:08:5e:66:86:a5:96:36:26:62:9e:fe:69:
         1b:40:6f:94:17:c2:45:77:47:02:8b:f8:53:5a:b9:03:7c:27:
         f8:a0:6b:df:cd:4a:cf:62:dc:b2:3f:4b:aa:9a:67:e8:48:e6:
         89:b1:e7:6d:74:29:84:3d:b4:9f:2c:2c:88:50:be:fa:c1:bd:
         59:65:8e:fa:4a:d8:e8:27:66:40:46:48:a3:c2:f4:26:9d:24:
         67:b2:a1:23:43:28:ac:b4:49:51:f8:1a:0f:44:43:88:4f:4d:
         f8:35:13:ee:73:3e:b3:97:7d:92:c6:48:8b:eb:6c:5c:b5:f1:
         33:79:2a:23:7e:4d:86:4e:18:f5:76:9e:b6:86:4e:16:67:37:
         27:97:bd:d6:6e:f2:8d:38:22:64:9b:66:c8:ca:f3:95:4c:fe:
         5a:43:68:f7:4d:95:b7:fe:e9:5c:ba:c1:0c:af:15:5b:a4:07:
         5c:69:94:f1:c9:e1:7e:71:77:6d:93:79:d2:69:38:67:2d:f5:
         c8:bd:7c:cc:6f:f6:06:1b:2b:54:e7:1b:b7:58:0f:80:eb:90:
         a3:38:da:5a:9e:3d:95:8f:ce:57:ac:8a:ed:38:c1:14:2e:0f:
         b6:24:f4:f4:b6:29:04:f2:8c:58:c8:12:dc:1f:95:f1:49:90:
         47:2d:a1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:06:09 2026 by rpki-client