This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/wTx66_ZrAUtnUb1haIiLM4fL3Cc.roa
File:                     wTx66_ZrAUtnUb1haIiLM4fL3Cc.roa (raw, json)
Hash identifier:          uyecQTO1gvRg0VQn7PGhpDSFigdWaWP+Ttm02UEjKE8=
Subject key identifier:   C1:3C:7A:EB:F6:6B:01:4B:67:51:BD:61:68:88:8B:33:87:CB:DC:27
Certificate issuer:       /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial:       019B7759606A7239769BE94F839CF142276C
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/wTx66_ZrAUtnUb1haIiLM4fL3Cc.roa
Signing time:             Thu 01 Jan 2026 02:18:24 +0000
ROA not before:           Thu 01 Jan 2026 02:18:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15830
IP address blocks:        194.55.2.0/23 maxlen: 23
                          194.55.2.0/24 maxlen: 24
                          194.55.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:60:6a:72:39:76:9b:e9:4f:83:9c:f1:42:27:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
        Validity
            Not Before: Jan  1 02:18:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c13c7aebf66b014b6751bd6168888b3387cbdc27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4c:6d:d8:ad:36:f3:6c:19:fa:d2:e5:ff:0b:
                    e2:df:64:6a:ed:45:71:c2:61:14:da:7a:34:11:77:
                    f8:71:8c:e1:28:a9:13:c2:88:39:a1:b7:86:d9:d0:
                    22:5a:50:c6:da:81:f7:b2:0e:28:fe:b3:c7:ad:05:
                    36:58:c2:f9:09:a5:bd:a1:42:64:3e:d1:bd:65:89:
                    48:d4:2f:40:3b:cc:b5:bb:3d:d3:ec:5c:4f:59:75:
                    d2:1e:60:58:51:2c:c8:3d:0f:5a:23:8c:1b:3d:8b:
                    61:8c:da:c4:ac:82:4e:47:f3:c4:08:75:b0:c3:cd:
                    12:a3:32:94:ca:e4:67:ca:16:30:31:05:9d:31:c9:
                    da:81:48:66:3c:76:4f:91:30:a7:1f:a3:70:2d:ca:
                    76:a0:c5:00:6e:96:dd:54:a6:c3:54:c0:3b:be:a9:
                    e8:ab:9b:49:1a:9c:4e:78:ae:46:47:f1:bc:60:3e:
                    1a:2e:3c:d4:f3:fb:2e:74:e3:fd:0c:c8:21:4d:65:
                    e1:95:d1:92:18:08:27:8a:1f:d4:8a:9f:52:01:55:
                    47:b9:78:a6:0a:17:58:86:e6:d3:e8:71:83:07:1b:
                    bd:c1:27:fe:44:95:90:ce:11:26:39:89:4d:25:67:
                    c9:e6:10:78:8c:c7:16:6d:3b:67:04:7c:54:9f:8e:
                    8c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3C:7A:EB:F6:6B:01:4B:67:51:BD:61:68:88:8B:33:87:CB:DC:27
            X509v3 Authority Key Identifier:
                keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/wTx66_ZrAUtnUb1haIiLM4fL3Cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.55.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:1f:e4:30:92:f7:cd:17:6f:0d:fa:30:d7:a8:50:28:2a:e4:
         48:b3:9a:a1:bb:5c:65:19:39:bd:ef:bf:48:95:72:fa:79:15:
         ba:28:6e:0f:28:4e:d9:6d:6e:1f:f2:f2:0c:0c:c4:9c:c2:85:
         9a:2a:3b:fb:35:ef:a8:14:de:d7:1e:9d:dc:eb:8f:2f:71:ab:
         8f:7f:ce:1b:e1:a2:c1:59:14:cc:fb:ce:a4:c1:a1:5f:2d:5a:
         b9:a6:2e:49:11:18:36:5d:45:cd:0d:f1:5b:37:4f:52:6d:95:
         45:bc:f0:a8:e8:02:2e:c5:99:76:cf:35:30:5c:33:4b:9b:c9:
         25:7d:9a:3a:3b:b9:f6:c9:64:77:eb:2d:50:d3:b1:c0:27:bf:
         17:85:85:31:c6:cd:42:af:91:57:98:65:4a:47:25:be:28:d1:
         ef:a4:27:5f:69:4f:1c:43:aa:54:9c:cb:3c:f5:a9:fc:da:52:
         fe:75:d0:ce:18:f0:c6:f1:ac:6c:91:67:c9:0a:9e:1a:68:0f:
         cd:a7:7e:d0:36:a3:21:b7:a6:ba:43:5b:76:4e:26:37:c5:d9:
         ab:5d:db:63:8d:8f:99:44:bf:df:a9:94:e3:43:f0:82:bb:4e:
         45:0a:3b:97:b1:1b:14:be:fb:3e:7a:0b:29:9f:cf:9c:81:85:
         9a:94:14:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 04:53:30 2026 by rpki-client