This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/deWeFe-V8g-k0HCqRDLP6TgKyho.roa
File:                     deWeFe-V8g-k0HCqRDLP6TgKyho.roa (raw, json)
Hash identifier:          GLkH+BPCZeX8d6ZhTifUuwPPv+51Okkc5dDblqVKsQE=
Subject key identifier:   75:E5:9E:15:EF:95:F2:0F:A4:D0:70:AA:44:32:CF:E9:38:0A:CA:1A
Certificate issuer:       /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial:       019C1BFD996847BBE45C2C83DD8211527506
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/deWeFe-V8g-k0HCqRDLP6TgKyho.roa
Signing time:             Mon 02 Feb 2026 01:35:30 +0000
ROA not before:           Mon 02 Feb 2026 01:35:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     17497
IP address blocks:        144.31.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:fd:99:68:47:bb:e4:5c:2c:83:dd:82:11:52:75:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
        Validity
            Not Before: Feb  2 01:35:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=75e59e15ef95f20fa4d070aa4432cfe9380aca1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:de:5b:2c:92:7c:7f:c7:e3:3f:b6:93:bd:
                    6a:ca:1b:25:40:77:c0:96:70:d5:b1:fb:42:dc:b4:
                    52:90:1d:51:ee:76:c8:96:1d:3a:1e:25:56:b4:5c:
                    6b:c6:28:34:88:8b:1a:3b:7b:c6:22:ed:15:aa:c1:
                    40:44:18:87:ed:3f:e6:f8:1d:9e:9e:99:c6:df:1b:
                    cf:56:10:6b:b3:25:c3:60:c8:0a:8a:16:ed:64:86:
                    17:42:83:09:8a:5f:17:00:53:dd:aa:6b:90:62:c5:
                    46:2c:af:b2:64:71:34:1e:3b:f1:2b:66:77:0c:d0:
                    0d:37:bf:46:30:20:7b:3f:d6:a9:eb:ab:30:57:57:
                    64:f0:ff:66:23:19:1b:a5:41:11:c3:a1:b6:37:99:
                    df:56:02:e1:4d:f4:6f:02:d8:a9:bf:d6:0f:3c:24:
                    61:c3:3d:87:15:2c:95:53:d2:b7:c4:3a:49:22:d5:
                    78:6d:b4:c9:6b:ec:06:ce:6f:9a:00:1f:49:01:53:
                    57:77:74:8f:db:94:ab:5f:c5:2b:e9:79:6e:95:87:
                    03:32:d6:13:14:02:0d:a1:19:d8:d3:a9:15:69:df:
                    9a:c7:11:42:c2:89:bf:0a:65:69:26:8b:06:c6:eb:
                    66:f4:a1:c4:22:d8:6d:d5:84:aa:f4:a3:f9:2d:de:
                    ac:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E5:9E:15:EF:95:F2:0F:A4:D0:70:AA:44:32:CF:E9:38:0A:CA:1A
            X509v3 Authority Key Identifier:
                keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/deWeFe-V8g-k0HCqRDLP6TgKyho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.31.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:c9:6d:6e:d2:37:b5:50:a8:cf:ab:52:ab:dc:5a:76:1b:bc:
         52:56:68:34:6e:c0:fc:83:5a:6f:e7:cf:70:70:8b:aa:07:dc:
         fa:d4:80:30:5a:2b:fe:70:b0:a4:64:5c:95:5c:32:96:c1:df:
         9c:73:1c:44:67:dd:06:34:b7:e1:92:06:08:19:5d:b1:86:ea:
         4e:fd:15:de:e2:dc:d0:87:c4:74:fb:a2:e7:f5:e8:8c:70:49:
         23:e2:fe:d8:1d:70:0f:a4:89:36:08:23:a4:2d:54:f5:1f:f6:
         aa:c4:1d:e1:b2:58:e8:34:08:07:31:c0:1c:b5:2c:9f:7e:7f:
         fc:c1:24:de:85:ac:ea:f0:29:e2:f3:44:3c:d1:64:f0:9f:6e:
         17:e8:d0:59:d9:d1:f6:e6:90:00:f4:0d:17:48:2f:47:91:66:
         4f:18:58:56:28:ed:30:cf:5f:4a:e8:ed:a5:40:02:f7:6c:61:
         f8:cf:3a:b5:f8:3c:08:b1:1b:37:89:e3:06:ba:b9:ac:42:98:
         85:e1:ec:fd:37:f5:69:44:74:57:c8:86:ab:70:a6:aa:74:29:
         5d:73:f7:4c:45:e0:73:94:94:18:b1:89:ae:76:b1:05:3c:c3:
         b9:85:6e:46:4c:7a:24:c6:37:dc:b6:ee:52:15:36:58:f9:21:
         d4:62:0c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 10:06:00 2026 by rpki-client