This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/WC6EBIjiAER5lgIGGhXpUnsJaMY.roa
File:                     WC6EBIjiAER5lgIGGhXpUnsJaMY.roa (raw, json)
Hash identifier:          fIsVrWQoNzwMR1jG4hms/me3nMp9f7WFOVArNQIs1TQ=
Subject key identifier:   58:2E:84:04:88:E2:00:44:79:96:02:06:1A:15:E9:52:7B:09:68:C6
Certificate issuer:       /CN=815887f45abbc081aa469a65c1798de6110d9c89
Certificate serial:       019B7AC90924F4120A446F50C7D140006146
Authority key identifier: 81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/WC6EBIjiAER5lgIGGhXpUnsJaMY.roa
Signing time:             Thu 01 Jan 2026 18:19:14 +0000
ROA not before:           Thu 01 Jan 2026 18:19:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3303
IP address blocks:        194.48.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:09:24:f4:12:0a:44:6f:50:c7:d1:40:00:61:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815887f45abbc081aa469a65c1798de6110d9c89
        Validity
            Not Before: Jan  1 18:19:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=582e840488e20044799602061a15e9527b0968c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:7b:4a:62:6a:fd:3a:7c:c1:a7:36:07:67:
                    e2:4d:24:ce:ff:ee:f2:98:f3:de:4d:ae:bc:fe:3c:
                    e2:7e:ba:ec:6b:8d:20:08:da:94:39:fe:53:5b:67:
                    97:f8:5c:98:cc:8c:26:6c:d2:72:16:b9:90:01:b5:
                    53:fe:90:0e:63:62:af:d2:5d:69:e6:a5:78:08:e1:
                    4b:9c:3f:d4:2a:d6:42:d2:11:bb:0d:2e:da:a5:35:
                    fd:3f:9c:6e:06:6d:7c:c6:56:15:42:84:9a:8e:a5:
                    91:ad:c9:1a:b5:70:76:41:df:c7:a1:71:4b:84:a4:
                    e8:8e:b9:4f:d0:76:e3:cc:eb:81:99:d7:84:ba:1e:
                    6e:ec:02:1c:ef:ed:32:7f:57:25:18:1d:6f:c2:bb:
                    56:4b:88:3e:24:06:9b:0a:e0:74:ba:bb:e6:a4:7e:
                    de:7f:a4:bf:b2:1b:e8:1d:ea:cd:2a:5a:bd:25:7c:
                    4a:19:54:ed:52:b2:e5:7b:f2:d2:82:bb:11:64:ca:
                    e5:88:e0:50:53:59:95:1c:5d:45:ef:15:04:51:73:
                    9b:91:78:4a:11:68:66:6c:34:40:ca:c9:7b:5c:3d:
                    5f:a9:19:2b:f9:38:df:38:71:8a:b7:09:37:3d:50:
                    4f:8a:92:f3:71:47:92:02:d0:7d:05:6b:cf:d2:0d:
                    6f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2E:84:04:88:E2:00:44:79:96:02:06:1A:15:E9:52:7B:09:68:C6
            X509v3 Authority Key Identifier:
                keyid:81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/WC6EBIjiAER5lgIGGhXpUnsJaMY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.48.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:73:17:84:6c:a2:8a:87:47:f4:ab:93:57:f7:f5:72:a8:97:
         62:7f:cf:e4:f8:c5:48:0b:23:31:aa:a2:6e:40:95:94:33:a0:
         53:e8:09:8f:65:4b:18:88:55:82:b2:8a:b0:5e:41:2c:8f:14:
         c5:97:42:a1:18:90:95:56:ff:c9:e3:f6:62:ce:1e:2a:d2:4b:
         f0:ee:ef:bd:a4:1b:da:e9:7c:0e:33:65:cc:1f:3c:0f:b1:f7:
         11:3c:02:a4:ee:d5:0a:ac:90:b7:ed:2d:4c:d7:dd:e4:c8:c8:
         89:66:43:11:50:76:d1:1b:2f:fb:47:ee:8c:d6:d1:31:8a:34:
         24:e4:4e:fa:8a:e9:09:2e:6c:2d:ca:c3:e2:47:4e:a3:f2:0b:
         66:51:fb:7a:aa:05:e5:56:44:f8:1a:e5:62:30:94:41:31:99:
         27:13:fb:04:b3:54:4b:1a:33:66:e0:bf:61:d2:82:50:b6:c1:
         64:7f:8b:6c:4c:5a:c4:de:c5:d2:5d:d1:d6:eb:e1:c1:f2:e0:
         46:2e:d7:4a:d6:b1:08:23:3e:c6:e2:24:31:fc:de:b4:3c:87:
         43:c0:50:5b:40:ac:51:5a:66:05:95:16:76:68:60:4c:a9:44:
         41:4b:4c:53:7a:cc:3b:4c:93:96:e5:5e:45:aa:a3:a0:96:f7:
         43:1d:ad:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:22:21 2026 by rpki-client