This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wjgWkO7afFcZNaSB08Visy7N8Vs.roa
File:                     wjgWkO7afFcZNaSB08Visy7N8Vs.roa (raw, json)
Hash identifier:          Q1A2H0gViON6J3emoYwVB+jxtOXtCxqMhP3x1crlMxg=
Subject key identifier:   C2:38:16:90:EE:DA:7C:57:19:35:A4:81:D3:C5:62:B3:2E:CD:F1:5B
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       019B7AC8611D6C96B42F2176185F264FE5EE
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wjgWkO7afFcZNaSB08Visy7N8Vs.roa
Signing time:             Thu 01 Jan 2026 18:18:31 +0000
ROA not before:           Thu 01 Jan 2026 18:18:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211091
IP address blocks:        14.102.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:61:1d:6c:96:b4:2f:21:76:18:5f:26:4f:e5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Jan  1 18:18:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2381690eeda7c571935a481d3c562b32ecdf15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9e:b6:f2:0a:38:02:09:d9:3d:82:4f:51:4b:
                    bf:18:38:ed:20:28:3f:fd:79:ea:87:6f:cc:d9:2d:
                    bd:b1:3e:de:d5:fe:85:d7:7e:dd:19:44:f1:ef:d1:
                    f8:c8:98:11:b0:eb:7c:eb:17:4e:df:0b:56:c2:04:
                    ef:e7:9a:5a:f4:00:9e:55:e6:f9:a6:e3:0f:99:f9:
                    0e:45:d1:97:d1:f6:8a:0e:34:57:a3:c6:9d:25:0f:
                    00:20:89:6e:d3:83:01:e3:3d:2b:79:a8:19:83:49:
                    87:73:45:c7:ba:ba:2c:2d:0a:7e:15:ae:18:5e:65:
                    3c:c8:21:02:62:58:27:1c:4b:b7:4b:8d:f0:da:96:
                    3c:c1:17:fd:da:ef:55:be:d0:8e:1f:19:55:1d:41:
                    45:2d:37:2a:1a:74:20:a7:a9:de:f2:19:a3:48:a4:
                    3e:c1:ef:8b:2c:9d:2a:52:fd:b9:be:c6:af:ed:4f:
                    a6:0e:92:1d:61:94:9d:24:2d:0c:6e:76:b4:8e:42:
                    8b:f7:84:16:2b:56:f0:f5:1f:3c:ac:ba:29:1e:f0:
                    b5:e2:1e:7f:61:1d:00:5d:b6:a4:96:97:bb:5d:58:
                    d7:56:68:c6:88:ce:43:dc:7f:e2:bf:04:f1:44:08:
                    87:e2:45:de:d3:29:c9:e3:85:17:cb:2f:02:f2:17:
                    09:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:38:16:90:EE:DA:7C:57:19:35:A4:81:D3:C5:62:B3:2E:CD:F1:5B
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wjgWkO7afFcZNaSB08Visy7N8Vs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:71:4a:55:bd:fc:40:b0:bb:d7:57:08:d2:ea:a0:cc:de:35:
         54:52:f4:fb:c2:36:a9:1c:7e:11:73:0e:8c:56:79:3c:4e:97:
         ee:d5:27:5c:d3:8b:2d:66:1b:d6:48:fc:4b:1c:5b:27:ca:ae:
         4d:30:a9:33:f0:7f:3b:44:96:4a:58:f4:ae:55:53:44:5d:cb:
         22:93:1e:f0:6a:c3:59:8e:de:f4:1a:32:07:f3:f3:dc:b6:64:
         39:4e:86:0c:99:10:d6:0f:46:0a:1c:13:a5:66:16:f0:7e:bb:
         4d:3b:88:e3:2b:19:a8:8e:78:fa:66:26:19:94:e9:ea:70:7d:
         bd:e5:e0:d5:5c:41:b8:99:05:d8:4e:e4:fc:5c:28:af:5f:b9:
         74:0f:ba:c8:0e:5b:3b:da:7c:95:00:2d:d7:91:4d:d5:e9:a7:
         43:c1:ed:0a:77:8d:11:d0:26:16:20:18:55:b1:1c:74:96:11:
         ab:4c:60:d3:ec:bf:67:ed:72:a3:fb:cc:a3:50:56:40:fa:5b:
         cb:5a:6c:74:05:f0:17:0a:6d:94:6a:40:f3:6a:72:a7:74:6a:
         0c:c9:52:ec:64:54:c8:5a:76:09:55:bc:c7:5d:9f:1c:f9:93:
         dc:93:15:a6:bf:b8:4f:72:c5:66:0f:23:4f:2a:7b:bd:d1:16:
         6c:5e:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:12:10 2026 by rpki-client