This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/E9wKeiD_LK90gSuNFJOLzH-dBSw.roa
File:                     E9wKeiD_LK90gSuNFJOLzH-dBSw.roa (raw, json)
Hash identifier:          3ooOx4pHPNscaC848kYWeY32PaNSsSRSaeSUE20QIto=
Subject key identifier:   13:DC:0A:7A:20:FF:2C:AF:74:81:2B:8D:14:93:8B:CC:7F:9D:05:2C
Certificate issuer:       /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial:       019B78A2B1A77455AEACC178A5E0128ECBA2
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/E9wKeiD_LK90gSuNFJOLzH-dBSw.roa
Signing time:             Thu 01 Jan 2026 08:18:06 +0000
ROA not before:           Thu 01 Jan 2026 08:18:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        195.182.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:b1:a7:74:55:ae:ac:c1:78:a5:e0:12:8e:cb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
        Validity
            Not Before: Jan  1 08:18:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13dc0a7a20ff2caf74812b8d14938bcc7f9d052c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:34:53:99:2c:d5:cd:78:24:99:2a:d8:81:7d:
                    fc:eb:a4:f1:15:c6:d3:eb:cb:b0:24:1c:37:13:a0:
                    6e:88:e2:12:42:b9:57:88:07:1f:56:2d:d2:55:0c:
                    33:cb:4e:c7:8b:46:e2:b8:e7:8d:de:87:32:fa:d1:
                    6a:a5:99:9e:6f:05:00:ca:77:dc:a4:70:83:7f:94:
                    f9:fb:2e:8d:17:fa:5d:e1:2f:1f:3b:b2:01:ae:c7:
                    c2:75:a2:43:6c:76:e7:3d:37:b4:c1:08:b8:18:07:
                    86:dc:31:2a:ee:40:ea:ba:fb:92:ee:d7:f6:fd:d9:
                    e5:0b:59:35:0e:f5:ba:08:e7:19:e7:3f:f4:50:db:
                    12:35:7f:3f:a9:94:c5:d1:e5:23:1a:a0:70:12:dd:
                    e7:5e:84:83:34:50:94:9b:f6:28:e3:ee:12:c1:a7:
                    63:86:df:22:a1:d5:b0:4f:3a:8f:d6:46:64:82:2e:
                    31:b8:7a:9a:62:6c:1b:ff:56:f8:a1:f4:72:b0:06:
                    9d:fc:75:e7:10:85:96:0c:8e:32:1e:c8:01:44:42:
                    73:2d:35:5f:25:62:83:a0:28:8c:7e:23:7a:10:03:
                    cf:de:10:05:17:b5:ed:d0:46:94:48:0d:0d:ba:ed:
                    2d:e2:e5:1e:62:6a:a1:13:f0:3f:25:88:2f:a4:58:
                    4f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DC:0A:7A:20:FF:2C:AF:74:81:2B:8D:14:93:8B:CC:7F:9D:05:2C
            X509v3 Authority Key Identifier:
                keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/E9wKeiD_LK90gSuNFJOLzH-dBSw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.182.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:21:80:15:cc:a7:a0:86:d3:8d:cd:d9:cf:b2:14:b3:57:4d:
         cb:e6:2e:33:e0:e7:6f:d7:0f:08:f3:8f:e4:c1:2c:23:3e:0d:
         a3:1b:97:68:0f:71:d7:01:c7:00:61:62:e6:e6:45:49:4b:1b:
         42:87:b8:40:08:26:1c:63:59:8c:33:64:c7:aa:bb:36:ec:dd:
         1d:d6:ce:d3:b7:e5:ac:5a:9d:92:8d:bc:eb:5c:7d:38:7e:b3:
         cc:ac:40:19:7e:ec:d0:71:e7:a6:99:6c:2f:78:ac:26:e4:1e:
         de:c4:91:da:47:be:09:2e:a6:79:98:a2:96:8c:78:65:3f:ac:
         3e:c2:7a:ca:39:73:c8:ac:de:ce:57:67:e6:bb:92:da:11:4c:
         90:71:66:a3:27:00:b8:09:46:25:de:57:19:5f:de:1d:6e:9a:
         37:cd:c8:a0:62:94:27:0f:9f:0f:ae:d4:30:de:92:98:fd:c6:
         ce:bb:c7:08:44:07:1c:06:bd:fa:24:c5:e1:c9:08:a2:70:e2:
         18:bc:06:79:e7:b5:6e:bd:84:f7:da:b9:f0:ef:80:90:ea:09:
         09:bc:b8:a9:a4:59:17:6f:27:56:80:79:e2:7a:24:b4:29:f0:
         26:83:84:82:33:4e:73:35:90:35:93:95:aa:f9:da:63:ae:00:
         76:3b:44:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:47:37 2026 by rpki-client