This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/_WfVRuscLnYYCEteyctZE_mRNGA.roa
File:                     _WfVRuscLnYYCEteyctZE_mRNGA.roa (raw, json)
Hash identifier:          OwIxeyz2i/PN3Q/yKcsy594HSMnZiCVH224Ea6c2hAs=
Subject key identifier:   FD:67:D5:46:EB:1C:2E:76:18:08:4B:5E:C9:CB:59:13:F9:91:34:60
Certificate issuer:       /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial:       019B7DCAAB0B30589397B7CA252CF0A49FFD
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/_WfVRuscLnYYCEteyctZE_mRNGA.roa
Signing time:             Fri 02 Jan 2026 08:19:52 +0000
ROA not before:           Fri 02 Jan 2026 08:19:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        212.4.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 08:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:ab:0b:30:58:93:97:b7:ca:25:2c:f0:a4:9f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
        Validity
            Not Before: Jan  2 08:19:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fd67d546eb1c2e7618084b5ec9cb5913f9913460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:d8:37:bb:ba:44:a8:a7:c1:72:70:74:70:
                    31:cb:bf:98:8a:2e:3f:17:e4:5b:23:03:99:c8:f1:
                    04:47:0b:5f:b1:42:ad:84:27:ce:8f:a7:77:03:e7:
                    6e:3a:f7:09:f5:87:99:fb:56:80:e0:e9:f3:a7:b2:
                    9f:26:bc:ba:c2:96:2f:1b:45:94:35:ff:cd:7f:89:
                    c7:d8:79:36:8b:be:79:fd:32:2d:cd:21:52:ce:dc:
                    e2:b0:7a:51:2f:bb:e7:c9:73:78:24:e4:5e:0a:0f:
                    d6:ec:95:18:d5:01:e4:9f:fd:ac:8d:8c:07:2a:a1:
                    ef:ee:a9:56:01:4a:8c:59:9a:d9:a7:7f:b2:17:b9:
                    de:4c:e3:ea:ef:18:28:c3:74:1a:34:8a:e2:41:da:
                    4f:9a:05:ff:52:3a:09:a0:b4:b3:d8:1f:f1:27:d1:
                    07:16:5c:92:43:08:90:4d:96:0f:11:b3:9e:de:bc:
                    11:42:cf:18:47:ca:d6:43:09:b5:45:87:2e:02:f5:
                    e7:be:ed:79:3a:98:34:2a:55:38:e6:fe:73:91:2b:
                    a1:76:a0:d7:b9:97:83:7c:68:04:a0:c0:94:0e:45:
                    bb:bd:4c:2e:db:af:51:08:da:19:b9:13:17:ae:e2:
                    65:49:58:57:b8:98:07:35:77:c8:d8:44:c0:a7:2c:
                    ac:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:67:D5:46:EB:1C:2E:76:18:08:4B:5E:C9:CB:59:13:F9:91:34:60
            X509v3 Authority Key Identifier:
                keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/_WfVRuscLnYYCEteyctZE_mRNGA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.4.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:2b:1f:15:6d:1a:fd:02:d6:ba:74:ab:48:aa:c7:ca:75:36:
         4a:3e:aa:b4:b8:d1:0e:bb:f2:c9:2e:aa:ed:52:63:45:a2:ca:
         a8:44:0f:36:7d:17:ff:01:d5:51:6f:94:a3:f6:55:fb:1b:e5:
         19:f2:52:31:ca:cb:76:1a:b5:ae:00:93:61:b3:96:08:1e:d0:
         89:2e:af:92:ae:bd:77:13:5f:9d:4a:ba:f9:18:93:e1:6b:b4:
         ae:9a:a4:ee:00:d1:29:7f:4d:c1:1b:a5:8a:46:00:a5:81:27:
         d8:5e:e7:57:c9:ce:14:20:18:1e:3f:a8:a2:ff:91:6d:c5:eb:
         4d:6f:88:0e:09:22:fb:f7:13:0f:f1:ab:97:f7:4f:c6:35:3d:
         b8:ed:54:48:d7:99:87:9d:cb:0b:16:1b:bb:47:94:98:cf:b9:
         cb:e7:5d:c9:8a:4c:75:23:b4:72:4e:6f:ff:81:56:e1:3e:dc:
         5d:f8:e7:3e:86:82:4c:a5:6b:1e:4d:78:09:18:d2:50:e0:bb:
         d6:9e:a1:c2:f7:cc:a1:4b:25:57:82:ff:20:1b:87:60:2d:6b:
         22:33:b8:cf:eb:3a:a2:22:c6:07:66:4a:45:c7:73:df:e0:55:
         de:5e:c7:6e:03:ed:bf:27:23:5c:4a:fc:eb:d5:59:72:2d:6f:
         17:d7:8a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 16:22:39 2026 by rpki-client