This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/WP15_IkzJpNZosRW20NkMhFJGGo.roa
File:                     WP15_IkzJpNZosRW20NkMhFJGGo.roa (raw, json)
Hash identifier:          kBh49s4i+AJ1plkfRHBsH8aUUSr8vJTfZgfko/MzEr4=
Subject key identifier:   58:FD:79:FC:89:33:26:93:59:A2:C4:56:DB:43:64:32:11:49:18:6A
Certificate issuer:       /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Certificate serial:       019B7A5AFD11B618EEB2A4A4504344FC0245
Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/WP15_IkzJpNZosRW20NkMhFJGGo.roa
Signing time:             Thu 01 Jan 2026 16:19:01 +0000
ROA not before:           Thu 01 Jan 2026 16:19:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204385
IP address blocks:        31.202.15.0/24 maxlen: 24
                          185.147.99.0/24 maxlen: 24
                          2a00:1210:fffc::/48 maxlen: 48
                          2a00:1210:fffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:fd:11:b6:18:ee:b2:a4:a4:50:43:44:fc:02:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
        Validity
            Not Before: Jan  1 16:19:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=58fd79fc8933269359a2c456db4364321149186a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:b4:58:94:26:71:e3:d0:f6:48:76:ac:6a:
                    bc:42:03:e4:b4:7e:03:57:d2:f3:74:48:29:32:c8:
                    d2:4e:b8:8f:7e:bb:10:63:4e:73:b2:5a:cb:9c:ee:
                    0a:8d:21:b6:f9:5f:40:89:f5:21:2c:ab:9c:47:ea:
                    d8:45:02:3f:a8:ba:c3:d4:f9:d9:3f:c9:d2:d8:94:
                    44:e0:ef:14:b4:69:e7:19:70:8b:42:f2:b7:ba:6f:
                    6d:e0:0c:0e:2b:8b:65:32:b3:fe:d5:7c:88:70:b2:
                    ca:1b:92:26:ec:49:24:40:ff:aa:d8:71:89:65:02:
                    57:5a:14:32:78:a1:08:ad:73:b9:68:bd:70:fb:d8:
                    2d:60:62:a6:18:04:ff:fd:88:67:e6:48:64:b8:d1:
                    56:cf:95:78:4a:fa:26:49:f9:37:fe:2b:d0:d2:22:
                    e2:0e:d7:7d:0c:29:54:d8:81:c6:a7:37:bc:c4:88:
                    7c:6b:a7:0f:b8:32:a8:5d:6b:cc:06:90:67:a3:40:
                    24:0a:fc:7b:e7:ba:ac:11:e8:86:bb:1a:b8:33:12:
                    77:50:36:9b:a0:73:22:61:11:85:4d:35:e6:2b:7e:
                    22:e8:a8:b8:80:01:db:0e:e1:53:44:9a:d1:50:cf:
                    9b:29:be:7f:c0:30:fb:bb:52:6f:2c:86:10:82:49:
                    e2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FD:79:FC:89:33:26:93:59:A2:C4:56:DB:43:64:32:11:49:18:6A
            X509v3 Authority Key Identifier:
                keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/WP15_IkzJpNZosRW20NkMhFJGGo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.202.15.0/24
                  185.147.99.0/24
                IPv6:
                  2a00:1210:fffc::/48
                  2a00:1210:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:2d:88:47:d2:7b:f2:c0:59:49:33:dd:87:7c:a8:8d:3c:88:
         8e:b3:4a:9c:2c:00:8f:89:0b:87:f9:c1:1d:b3:24:98:2c:ab:
         33:f3:a6:fc:a8:21:3e:57:fb:64:2d:9e:cd:29:54:a7:5b:a4:
         fc:4d:c6:76:a2:bb:bd:1d:a0:ec:11:f3:8d:83:4c:32:ea:7d:
         14:52:36:c5:8c:6d:fd:12:a0:fb:d0:fa:01:52:66:ac:8a:72:
         d0:a0:82:c3:0a:a5:4f:42:8e:ad:7a:b0:38:62:fc:6e:89:66:
         42:f4:12:0c:74:47:14:77:9f:82:89:8e:30:cb:f5:30:aa:3a:
         bc:2c:60:66:ce:5d:76:a2:85:bd:4e:d5:c2:52:09:24:e5:31:
         c2:20:fc:65:80:cd:eb:ab:77:c9:35:44:d1:0d:35:ed:13:d7:
         2c:af:9e:4d:94:90:a6:eb:02:21:bd:bc:2f:cd:15:84:56:d3:
         bb:13:ef:f4:e8:91:84:0e:0c:a9:72:c7:46:19:ba:d3:44:3a:
         4b:5b:26:b7:d3:ae:d1:67:6e:04:46:68:00:98:0c:0a:bb:2b:
         be:b4:1c:ec:30:cd:06:9d:c8:3b:50:3c:91:f5:e0:07:d9:89:
         16:45:0e:8e:d3:a6:f8:7d:e9:d8:a7:d7:f0:22:75:82:21:37:
         97:8e:e1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:39:51 2026 by rpki-client