This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/E582u3b_wirr6G_w4u9uogz74z8.roa
File:                     E582u3b_wirr6G_w4u9uogz74z8.roa (raw, json)
Hash identifier:          81B6PrtCWAN/tZ4dAD4doQginsu0czWU20EU6ygqMqw=
Subject key identifier:   13:9F:36:BB:76:FF:C2:2A:EB:E8:6F:F0:E2:EF:6E:A2:0C:FB:E3:3F
Certificate issuer:       /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial:       019B79ECD081A47DA74BBA337A877AF7061C
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/E582u3b_wirr6G_w4u9uogz74z8.roa
Signing time:             Thu 01 Jan 2026 14:18:41 +0000
ROA not before:           Thu 01 Jan 2026 14:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49237
IP address blocks:        2a02:de0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:d0:81:a4:7d:a7:4b:ba:33:7a:87:7a:f7:06:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
        Validity
            Not Before: Jan  1 14:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=139f36bb76ffc22aebe86ff0e2ef6ea20cfbe33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1c:e3:0f:45:7f:5e:27:41:fc:69:3b:29:03:
                    c2:77:a0:a8:83:2f:52:4c:e5:c0:59:7e:89:17:a5:
                    2f:0e:91:a9:d5:31:88:66:3c:02:f1:c7:29:95:cd:
                    8d:62:6a:9a:26:14:12:a1:51:78:ae:ae:52:59:44:
                    b6:4e:a8:72:a6:02:ef:72:5e:79:0d:70:c9:d4:c3:
                    db:1f:f1:54:cc:e4:ed:b6:3d:14:4f:81:d9:e5:67:
                    c9:2d:f9:8c:04:ac:c6:3d:51:3f:16:70:85:36:35:
                    e7:bb:87:1d:e1:d4:b6:62:48:9e:4f:b6:d7:e2:d8:
                    05:07:98:71:1c:77:2a:b2:fa:6e:15:5c:98:3c:76:
                    48:d1:e6:5e:a8:ff:06:e2:b3:c3:54:2f:aa:40:c8:
                    01:30:b8:40:4c:e2:ae:bf:6c:9e:5f:c9:f4:b3:3d:
                    aa:32:0d:d2:77:e5:40:d9:d8:11:d4:61:bd:82:df:
                    9e:8d:56:b3:84:3e:38:2c:41:d1:0e:d7:60:5e:7d:
                    a9:c2:f6:1d:84:77:12:aa:11:05:4b:6b:ce:28:6d:
                    34:20:46:8e:19:cf:b3:68:c1:ea:78:4d:50:2c:d5:
                    ca:f5:4f:78:95:fc:b7:69:8a:d6:b7:87:bd:79:11:
                    48:67:1a:50:8a:c0:f4:8f:5c:f2:dd:bf:a3:47:65:
                    9b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9F:36:BB:76:FF:C2:2A:EB:E8:6F:F0:E2:EF:6E:A2:0C:FB:E3:3F
            X509v3 Authority Key Identifier:
                keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/E582u3b_wirr6G_w4u9uogz74z8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:1c:6f:a8:f7:5e:d5:c8:e3:8f:5f:ad:61:f5:78:67:b6:51:
         60:0c:f3:12:a8:cf:23:6b:97:0e:3b:2a:38:63:e7:70:23:08:
         d5:fc:21:11:14:44:80:8b:cb:10:57:81:85:c6:48:d3:9f:06:
         ca:5d:cd:52:e7:c1:67:51:09:00:d1:4d:40:02:f4:52:76:5f:
         a1:d8:86:62:59:50:32:3c:90:3e:7c:d4:7a:2c:0a:87:d6:f9:
         2a:b1:53:32:7d:00:99:85:2a:8e:31:fb:38:8f:ef:b6:3d:3e:
         c8:7a:ed:c1:14:1f:dc:26:7d:f6:5f:f5:15:7a:28:1e:86:bf:
         b1:93:4a:e9:cb:2f:6b:db:69:d4:99:c5:3c:6d:c0:bd:68:23:
         1a:61:96:6a:34:bd:7b:fd:69:ed:2a:0b:59:ca:78:45:95:21:
         2f:45:ab:c3:11:7e:f9:b6:dd:bd:ba:d7:29:9b:7e:7f:82:d7:
         17:44:b9:63:97:bb:fc:94:68:33:45:eb:9b:ba:ff:6a:21:f5:
         2d:93:ee:31:cf:3d:f2:46:ff:c2:b0:c2:a3:a3:0d:fa:14:54:
         fb:77:6d:e3:4b:ae:44:8e:55:98:38:24:14:33:d5:c3:98:3e:
         86:ad:fa:af:6c:ac:e5:ac:b5:31:22:54:bd:9b:2c:9a:9a:8b:
         71:5f:74:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:24:32 2026 by rpki-client