This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/WCKsTEPcmYM47ti92gYyf7cdcSM.roa
File:                     WCKsTEPcmYM47ti92gYyf7cdcSM.roa (raw, json)
Hash identifier:          y6KiCfOb6lQer9zccfP9H1p4+EYxGx+NfyylSf/gfLQ=
Subject key identifier:   58:22:AC:4C:43:DC:99:83:38:EE:D8:BD:DA:06:32:7F:B7:1D:71:23
Certificate issuer:       /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial:       019BC672ECA7A44ED1C0A7B1C6AA44C52031
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/WCKsTEPcmYM47ti92gYyf7cdcSM.roa
Signing time:             Fri 16 Jan 2026 10:56:18 +0000
ROA not before:           Fri 16 Jan 2026 10:56:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25198
IP address blocks:        62.164.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c6:72:ec:a7:a4:4e:d1:c0:a7:b1:c6:aa:44:c5:20:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
        Validity
            Not Before: Jan 16 10:56:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5822ac4c43dc998338eed8bdda06327fb71d7123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:76:8c:04:86:60:1a:cd:07:2d:f2:b9:e4:7c:
                    37:e0:30:9d:12:0d:93:27:56:1e:ee:d2:ca:fa:e3:
                    b9:c2:38:25:87:2a:0f:4f:50:70:b2:89:05:9d:1b:
                    b5:ca:8d:d3:5e:22:12:ce:7f:43:c7:41:7c:59:75:
                    a7:7b:7e:5b:fb:38:b5:bd:d4:51:2f:61:50:b7:eb:
                    8a:ca:ea:56:3c:75:e1:36:fb:2d:d1:46:ac:a4:1e:
                    9a:c0:78:92:ef:f4:76:2f:40:76:6d:c4:7f:04:2d:
                    15:d3:ff:c3:e4:22:30:cb:59:5f:7a:79:a4:c9:e6:
                    b4:73:49:6f:45:d3:e8:23:9b:3c:e0:24:a1:af:60:
                    07:cd:81:0d:0e:41:50:5d:36:3b:df:28:f4:65:b9:
                    d1:d5:54:cf:bc:e5:98:94:aa:d4:b2:04:76:02:f5:
                    81:dd:da:bd:a4:18:8a:eb:d9:3c:a2:19:9c:cc:1b:
                    3d:4c:48:f4:35:f2:4e:50:3d:c1:e0:7e:02:cb:68:
                    10:40:07:2d:c9:06:99:5f:a4:0c:d3:05:e2:84:c3:
                    fd:3f:1e:5e:0a:f2:b1:8b:f7:aa:23:3a:62:85:85:
                    77:67:78:fe:86:d8:e7:59:a8:2d:ef:50:a1:b8:37:
                    00:13:b3:dc:94:f6:46:2e:b7:c0:5a:18:af:a5:24:
                    5e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:22:AC:4C:43:DC:99:83:38:EE:D8:BD:DA:06:32:7F:B7:1D:71:23
            X509v3 Authority Key Identifier:
                keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/WCKsTEPcmYM47ti92gYyf7cdcSM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.164.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:27:e8:fb:f3:26:3e:b7:58:17:e5:fe:70:0c:c9:7a:5f:85:
         3c:c3:93:81:29:1c:21:8b:dd:be:c8:2a:cd:8a:67:e5:d3:c3:
         53:a6:2e:3f:5f:65:50:2c:1f:a6:94:ca:3c:af:f9:91:bc:cc:
         38:95:fa:8a:8f:8e:f0:11:35:e4:14:fe:0c:ce:53:73:f9:49:
         9f:67:3a:7b:1f:52:58:13:29:0f:10:fc:23:a2:a4:1f:b8:a9:
         f5:e2:30:4c:ec:4f:18:fc:e1:ba:c9:5f:24:81:c5:c1:d0:2a:
         c3:21:9b:b9:7d:45:62:70:c8:d6:10:41:b6:60:3d:40:ab:ff:
         63:01:a5:dd:fa:d5:b8:79:ba:6a:8b:aa:d6:62:a2:cb:7e:7c:
         34:5f:aa:1f:1d:82:70:02:2f:59:c8:ec:10:98:e7:f8:8f:59:
         ac:8b:78:0a:c6:2a:0a:d0:5d:2b:4c:84:34:0e:dc:07:4e:bf:
         2a:66:81:e7:4a:84:4c:0a:4d:43:ee:15:28:21:41:42:c7:c0:
         26:05:6f:fa:cf:0e:e7:71:ab:1a:6b:8a:0a:8b:de:9a:e8:45:
         6c:87:d0:3d:04:b9:7f:e8:53:d7:fa:b1:ee:8d:87:23:44:6f:
         5e:20:56:95:36:21:44:1e:34:26:13:f3:cb:f2:b5:d1:98:10:
         87:86:48:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:51:34 2026 by rpki-client