This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/oWpY7lVUZc4xkdONXBsk7LY9VzQ.roa
File:                     oWpY7lVUZc4xkdONXBsk7LY9VzQ.roa (raw, json)
Hash identifier:          uJkG/PD9fhtu8O1FWieSoNSOr5gkaN8jlwYl8rtNjFA=
Subject key identifier:   A1:6A:58:EE:55:54:65:CE:31:91:D3:8D:5C:1B:24:EC:B6:3D:57:34
Certificate issuer:       /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial:       019B7C80D481D44818910EBBC4E5EC271CA7
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/oWpY7lVUZc4xkdONXBsk7LY9VzQ.roa
Signing time:             Fri 02 Jan 2026 02:19:36 +0000
ROA not before:           Fri 02 Jan 2026 02:19:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44547
IP address blocks:        185.118.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:d4:81:d4:48:18:91:0e:bb:c4:e5:ec:27:1c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
        Validity
            Not Before: Jan  2 02:19:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a16a58ee555465ce3191d38d5c1b24ecb63d5734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:f0:ce:e2:ef:6a:c8:38:65:23:99:9e:e7:
                    60:11:2e:fc:63:a1:eb:9f:ce:70:32:23:80:29:5e:
                    c5:6a:92:7a:60:6c:ad:07:66:0b:48:22:92:27:d8:
                    ff:43:15:e3:5a:af:fb:8d:95:03:d2:4c:0e:21:59:
                    56:15:a8:b9:e6:04:c2:df:6e:9c:15:9f:5b:3b:e5:
                    23:12:bf:2f:02:70:69:14:a3:45:2d:32:98:2b:6e:
                    60:7b:8d:cd:7c:f8:c1:8f:f4:be:64:f1:20:05:6c:
                    31:22:87:1f:57:15:de:cd:1f:30:b4:0a:da:8d:6e:
                    64:a1:28:ff:35:60:53:f4:61:5a:d7:a9:77:ea:5d:
                    f5:e0:0f:88:b4:ab:db:fb:ef:aa:7a:e3:96:63:1b:
                    8a:8c:c2:aa:92:39:e6:e4:8a:84:80:68:55:6f:8c:
                    48:5e:b2:b2:10:23:5c:c0:e9:b6:99:18:f4:9f:04:
                    a6:ba:7a:c1:5f:65:95:9b:b8:89:58:bc:9a:48:b7:
                    72:de:c7:e9:ad:0d:d6:69:16:29:dc:c4:9c:c0:ec:
                    3a:82:94:56:02:4c:0e:49:0f:cb:e3:de:53:5f:f0:
                    32:28:86:df:8a:53:e7:fb:a0:88:93:7f:81:f5:6b:
                    5b:ed:c3:04:14:8e:ee:98:84:65:97:9b:d9:a0:78:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6A:58:EE:55:54:65:CE:31:91:D3:8D:5C:1B:24:EC:B6:3D:57:34
            X509v3 Authority Key Identifier:
                keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/oWpY7lVUZc4xkdONXBsk7LY9VzQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.118.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:fa:d3:fa:aa:57:e1:6b:38:a2:35:98:05:87:14:a0:e1:5c:
         70:54:47:4b:8c:36:1f:cb:8a:66:d0:a5:29:55:e8:47:f9:78:
         ed:32:61:12:6f:d3:dc:a5:09:38:57:f4:65:e7:60:29:73:e9:
         35:b4:21:6e:0f:6e:69:78:e3:89:38:2c:2e:e4:94:f0:c6:73:
         90:30:a3:fa:51:07:b7:90:f7:c7:c1:4f:76:96:c4:4e:ca:ad:
         8e:b2:be:e9:2b:3c:dd:93:92:34:be:85:0b:d9:c7:d9:3e:b2:
         c0:ca:6c:50:d7:f5:fe:b7:0d:84:46:51:1a:48:60:09:05:0b:
         67:6d:6a:1b:c5:b0:77:40:85:7d:0f:98:66:05:ba:e7:25:db:
         0a:1d:5d:09:e2:72:5b:87:81:0c:14:f4:17:33:cd:2d:b6:35:
         79:b2:89:d1:6c:e6:35:76:5c:ef:e4:b0:f4:45:41:31:d8:b2:
         04:80:ed:1c:7c:fc:20:bf:b5:55:8c:86:c4:15:e4:7d:ed:f9:
         6d:88:b4:6e:84:31:e5:70:59:05:cf:e3:6e:4e:e1:3a:50:36:
         83:3d:e3:0b:71:91:5c:35:a0:ad:01:1e:b4:6f:19:fb:f4:5b:
         a8:f6:09:58:8a:92:a1:d9:50:ff:a2:cb:d0:ad:d9:be:3e:50:
         36:3b:32:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:22:20 2026 by rpki-client