This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/WeTbf8dcRo8G21LDVVtXbo03soA.roa
File:                     WeTbf8dcRo8G21LDVVtXbo03soA.roa (raw, json)
Hash identifier:          QqajL4kQWlIWW2N7/aHVs0UE2naN1GLmSLf6lsBMEjs=
Subject key identifier:   59:E4:DB:7F:C7:5C:46:8F:06:DB:52:C3:55:5B:57:6E:8D:37:B2:80
Certificate issuer:       /CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Certificate serial:       019B78A26AE2D06DCB68D224CFDBF5EB8970
Authority key identifier: A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/WeTbf8dcRo8G21LDVVtXbo03soA.roa
Signing time:             Thu 01 Jan 2026 08:17:48 +0000
ROA not before:           Thu 01 Jan 2026 08:17:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216017
IP address blocks:        185.169.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:6a:e2:d0:6d:cb:68:d2:24:cf:db:f5:eb:89:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
        Validity
            Not Before: Jan  1 08:17:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=59e4db7fc75c468f06db52c3555b576e8d37b280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:94:21:61:8e:81:bf:f1:ed:28:8c:e3:17:
                    2b:0d:44:9d:60:2e:a2:7d:df:b1:6b:71:0c:42:8e:
                    0f:61:d1:b6:67:e6:0f:2b:48:81:c5:0c:28:7f:b5:
                    30:ef:b6:39:b8:31:b9:a0:64:51:4f:70:72:33:ba:
                    98:86:b6:2d:25:31:68:40:82:fd:cd:04:55:c7:89:
                    96:25:8d:68:34:ff:e9:ca:d4:e6:14:bc:6d:3f:e8:
                    ec:56:7f:f0:2c:7c:4a:44:21:51:14:55:31:7d:f2:
                    02:60:4c:39:b2:aa:e2:46:84:c2:ac:cb:7c:86:3c:
                    36:3f:ae:9c:e3:d7:39:c7:12:9c:07:0f:fb:6c:a0:
                    37:43:09:be:12:0c:a3:04:07:69:99:3a:02:aa:fb:
                    70:61:e9:e0:95:37:e6:7f:ce:8b:43:b4:5d:d8:6c:
                    bc:6e:52:93:63:c6:1f:12:bd:a2:67:52:20:5e:52:
                    f2:80:a4:7a:97:78:68:e3:61:0f:e3:3d:5d:da:fc:
                    3a:4d:88:bf:1f:e3:1c:0e:2d:8b:79:d9:e6:b6:cd:
                    f4:8d:42:b1:24:49:84:5d:ca:c3:dc:6c:31:0f:4a:
                    dd:b9:54:8d:e9:4b:9b:e3:a6:8f:b8:2f:c3:6f:47:
                    92:e6:6c:eb:76:65:7e:8b:9a:56:1e:77:ef:f7:e9:
                    7c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E4:DB:7F:C7:5C:46:8F:06:DB:52:C3:55:5B:57:6E:8D:37:B2:80
            X509v3 Authority Key Identifier:
                keyid:A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/WeTbf8dcRo8G21LDVVtXbo03soA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:35:9c:73:ca:71:6d:4f:1e:ed:10:d4:24:71:e5:27:a0:5e:
         fd:39:fd:25:5b:bd:8a:e7:6c:ba:de:ae:9e:59:35:81:6a:46:
         d8:c8:82:8d:f0:4c:cb:4f:bb:04:2e:64:06:2d:da:cf:9b:ac:
         a1:f1:ac:c6:79:7e:2d:4d:be:d9:ff:db:2a:98:60:34:99:76:
         da:0b:25:3f:67:27:a4:57:86:96:58:82:8b:8c:98:6a:20:2b:
         14:3f:72:96:ef:27:d3:bb:1c:28:c1:67:06:d2:d7:5b:eb:55:
         51:24:e7:ac:fe:4c:7d:41:70:9a:2c:e3:3d:a6:06:41:9d:41:
         e9:a3:16:09:bc:63:39:74:ba:3a:49:3f:be:d4:43:5f:9c:5a:
         5d:a5:71:b0:51:30:7a:b0:de:82:71:21:90:d1:8c:0c:07:92:
         95:21:fd:8a:a2:7b:b6:f1:11:30:91:8a:e1:73:ed:be:74:cf:
         89:5c:9b:6e:65:94:63:ff:fc:16:4d:79:44:b5:73:e2:73:6f:
         dd:a6:6d:13:96:60:ef:92:3c:ff:99:90:8b:61:20:bd:16:30:
         0f:eb:b8:a7:4e:bf:1e:d6:33:83:94:7d:e2:7f:7c:54:a0:12:
         cf:0a:4b:e0:13:dc:0a:66:c6:2c:47:29:fd:82:8c:ca:49:99:
         bc:b8:3d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:54:36 2026 by rpki-client