This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/WL2FEa958Kjqled1nJg_T9tBeoM.roa
File:                     WL2FEa958Kjqled1nJg_T9tBeoM.roa (raw, json)
Hash identifier:          JqTb5QBDeJhpoV0bTkZHjnWe5k2iGZ6/9FsmESELmIY=
Subject key identifier:   58:BD:85:11:AF:79:F0:A8:EA:95:E7:75:9C:98:3F:4F:DB:41:7A:83
Certificate issuer:       /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial:       019B77C712DA0F6ACDB07816C944671AAF70
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/WL2FEa958Kjqled1nJg_T9tBeoM.roa
Signing time:             Thu 01 Jan 2026 04:18:13 +0000
ROA not before:           Thu 01 Jan 2026 04:18:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41211
IP address blocks:        85.112.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:12:da:0f:6a:cd:b0:78:16:c9:44:67:1a:af:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
        Validity
            Not Before: Jan  1 04:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=58bd8511af79f0a8ea95e7759c983f4fdb417a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:18:27:1b:9e:ca:9d:1f:b8:36:3d:02:5a:ff:
                    6d:b7:45:94:2d:e2:7a:e7:5a:94:5f:41:2b:db:71:
                    81:d7:4e:d1:bb:5e:a8:e7:8e:c7:ac:a0:67:ce:8d:
                    9e:31:33:ee:71:51:e3:2b:b8:19:d9:02:80:3c:61:
                    10:3e:fe:55:46:ad:44:b6:07:b7:b1:2e:5b:4a:64:
                    4f:32:36:ed:a2:d9:1e:ad:09:eb:fd:08:94:8c:0a:
                    b0:fe:b4:b9:77:5c:eb:68:49:23:31:81:0e:bd:81:
                    13:28:27:d2:93:ab:ba:6c:14:36:6b:e9:83:1a:21:
                    c9:a1:79:73:81:e0:02:3d:ee:ef:0d:21:62:09:e0:
                    56:2a:96:06:7c:87:4d:ca:f9:43:46:1f:11:57:aa:
                    7d:79:7c:ee:4f:6c:ad:f2:09:01:85:d8:d2:3a:33:
                    15:cd:a6:af:0a:3a:2c:7c:35:08:97:4c:d3:17:48:
                    84:bc:43:cd:f5:93:16:0e:a0:04:d1:f3:b7:f3:6a:
                    45:c3:8f:33:f7:4a:52:ae:c3:a5:88:17:a6:ac:43:
                    56:dd:98:9f:37:3e:2f:55:fd:22:dc:38:13:ec:3c:
                    f7:24:22:24:14:ed:6f:bd:e3:36:9e:6b:b9:c1:33:
                    1e:15:af:5e:dc:ee:c2:56:6b:9b:2c:4b:04:e1:df:
                    d1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BD:85:11:AF:79:F0:A8:EA:95:E7:75:9C:98:3F:4F:DB:41:7A:83
            X509v3 Authority Key Identifier:
                keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/WL2FEa958Kjqled1nJg_T9tBeoM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.112.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:1c:d8:9d:16:e0:32:c9:08:b0:b7:9f:2b:1e:21:24:cb:db:
         50:41:ab:91:6b:e4:5d:fd:1c:d0:16:a2:d9:f4:c7:ee:33:20:
         c2:24:47:24:55:78:8f:7e:f2:cf:2b:ec:45:13:d7:d0:60:5d:
         b5:3c:1e:a9:1b:e3:c7:15:5f:28:59:04:f8:01:67:bb:9e:fc:
         44:f5:89:9a:36:70:12:b7:b4:62:b6:e8:46:35:5c:30:97:68:
         6c:a1:d1:ef:6b:c5:30:79:3d:53:19:8a:1a:fe:b3:2b:af:8f:
         d7:80:ed:96:a5:ee:a2:ae:57:e2:12:22:01:23:0c:c7:80:d2:
         d8:3b:29:8d:13:f4:78:dd:20:ef:5f:86:72:91:f9:4f:c0:42:
         08:cb:bf:e3:db:1c:e1:7c:47:12:f7:de:ce:b1:b6:71:4e:a3:
         9b:ed:1b:27:ab:17:96:8f:86:96:2f:8f:3a:34:e6:57:f1:a8:
         7b:3b:19:d8:56:62:eb:b6:bc:ae:2e:d6:84:47:7f:2e:36:ca:
         cd:74:30:ec:e4:6a:85:e9:fb:f6:c9:95:20:75:cd:de:6b:eb:
         23:b7:4a:72:c0:12:7f:ac:b4:52:e3:14:a2:b3:3d:5e:c6:16:
         68:93:b0:89:5f:14:3c:4e:22:62:de:78:e1:e1:f1:c7:b2:b8:
         dc:3d:bb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:58:51 2026 by rpki-client