This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/wEPe2-IU5si5E4dI5okDjRdm6aQ.roa
File:                     wEPe2-IU5si5E4dI5okDjRdm6aQ.roa (raw, json)
Hash identifier:          loq4xgfhON1Tk8HEm4w/II1VC6Cp9wojKbfEE5I8A4A=
Subject key identifier:   C0:43:DE:DB:E2:14:E6:C8:B9:13:87:48:E6:89:03:8D:17:66:E9:A4
Certificate issuer:       /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial:       019B7DCA6D7122C6E0CC258F694DEA966523
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/wEPe2-IU5si5E4dI5okDjRdm6aQ.roa
Signing time:             Fri 02 Jan 2026 08:19:36 +0000
ROA not before:           Fri 02 Jan 2026 08:19:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31537
IP address blocks:        185.169.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 06:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:6d:71:22:c6:e0:cc:25:8f:69:4d:ea:96:65:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
        Validity
            Not Before: Jan  2 08:19:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c043dedbe214e6c8b9138748e689038d1766e9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:06:d6:d0:1c:e3:29:8f:10:f4:c4:d5:3c:
                    94:bd:86:90:f3:de:57:9e:76:e0:27:fb:f7:b8:4b:
                    16:8c:fd:0f:f9:d4:3b:36:c4:95:df:b7:ad:da:b6:
                    1c:7f:e2:53:a0:f4:dc:c2:7b:37:02:55:3b:f4:4f:
                    5f:12:a7:32:45:c9:4f:2b:95:05:99:f9:01:42:ad:
                    ce:9a:34:43:17:69:f6:7c:a2:54:50:c9:f2:96:d3:
                    aa:b1:25:a6:7b:69:58:ec:ef:2d:f2:99:c7:10:c4:
                    7d:ea:69:1a:e0:ed:e5:39:7a:3f:bb:59:86:a0:e1:
                    e4:15:d4:b9:52:ba:02:34:c0:6c:5a:55:b5:7c:7e:
                    8a:e2:28:bf:1f:58:e7:ef:f6:63:b3:e2:49:2c:70:
                    b7:b6:d0:65:5a:f1:b4:01:48:fd:3d:11:2a:86:70:
                    d3:f1:0c:f1:7d:d1:3f:42:ef:f7:1f:9c:c4:c2:a7:
                    ec:9a:dd:35:ba:db:1d:06:17:84:63:32:85:c4:1a:
                    94:cd:45:ac:bb:a7:48:fb:e4:b3:ab:89:75:60:21:
                    86:0f:88:58:0f:b5:76:df:4a:a1:8a:24:15:77:07:
                    bd:9f:e1:6c:c4:7f:89:a8:8e:5d:da:d8:bd:0e:63:
                    9e:63:2a:d0:07:46:d0:f0:48:a3:d5:33:f0:45:f2:
                    fb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:43:DE:DB:E2:14:E6:C8:B9:13:87:48:E6:89:03:8D:17:66:E9:A4
            X509v3 Authority Key Identifier:
                keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/wEPe2-IU5si5E4dI5okDjRdm6aQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:e4:2a:b9:3c:58:90:32:fd:90:a4:c8:b2:b3:4d:62:c4:a2:
         0b:e2:c3:59:e8:ea:ee:29:85:71:72:b1:23:34:5f:a1:44:6a:
         c2:94:5d:8c:52:17:fe:0c:67:17:e3:34:d2:53:a9:e6:18:14:
         c3:c6:81:e1:80:ae:d5:3d:c5:be:00:6d:62:5b:df:fe:96:d6:
         00:4e:83:8a:83:18:8f:20:53:8d:50:c3:5f:d1:c3:f3:3a:fe:
         47:1f:c2:b6:8e:c1:0d:0a:37:59:c2:17:31:28:ef:a5:5f:0e:
         5d:b0:7a:23:7f:3c:1e:3e:3e:48:e1:5b:8f:c8:af:36:ed:d3:
         1d:6a:72:fc:86:b4:b7:b9:14:34:9d:80:05:39:fd:a0:fc:b7:
         e2:ec:cb:d0:31:be:7a:2e:c1:47:22:7b:26:80:71:ac:88:23:
         55:15:11:3d:06:56:ae:c8:01:dd:23:9b:40:a8:8a:10:3f:ea:
         4d:a7:1e:8a:ae:c2:6a:23:54:71:bc:67:a8:ec:e0:de:40:55:
         b5:af:09:dd:a7:d9:ff:e8:51:73:32:a4:f5:77:18:b4:c9:b8:
         ff:5c:52:24:06:ba:06:ba:f8:3a:1f:4d:77:cc:c7:e3:02:23:
         a5:29:7d:e5:ed:0a:16:15:3f:4c:89:39:c6:ec:95:11:70:9a:
         60:f1:db:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 12:17:00 2026 by rpki-client