This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/uJEaDEpEiCiiI2jnpM6Rsom68OQ.roa
File:                     uJEaDEpEiCiiI2jnpM6Rsom68OQ.roa (raw, json)
Hash identifier:          aCCCss4sR2kOYE37efJSQrx21z5wX5pn6fX7X5clN7w=
Subject key identifier:   B8:91:1A:0C:4A:44:88:28:A2:23:68:E7:A4:CE:91:B2:89:BA:F0:E4
Certificate issuer:       /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial:       019B0CF742E31EE89A8838A20F7BBFF874C0
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/uJEaDEpEiCiiI2jnpM6Rsom68OQ.roa
Signing time:             Thu 11 Dec 2025 10:31:29 +0000
ROA not before:           Thu 11 Dec 2025 10:31:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203410
IP address blocks:        82.119.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0c:f7:42:e3:1e:e8:9a:88:38:a2:0f:7b:bf:f8:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
        Validity
            Not Before: Dec 11 10:31:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b8911a0c4a448828a22368e7a4ce91b289baf0e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:c4:5a:5a:87:f4:b4:ab:c9:14:eb:e9:9f:
                    9e:01:93:e6:51:df:dd:ee:01:3b:42:34:89:00:03:
                    0d:ff:64:91:06:60:04:51:6a:d1:5a:69:28:e9:9b:
                    9b:a4:2f:ea:1a:28:a1:79:17:bd:57:49:29:ef:d5:
                    8e:75:50:50:b7:73:c3:c7:34:b4:7d:4d:7e:3a:72:
                    97:c3:7c:15:4b:f3:af:5e:57:17:0a:a9:c6:77:d1:
                    9f:8a:22:e5:94:cc:f4:4e:7b:c1:87:cf:94:e8:63:
                    18:fe:ff:6c:51:2d:f0:bd:5c:2e:a8:22:99:41:b2:
                    64:25:b2:24:e8:32:d7:68:81:28:f3:5d:0d:d4:3e:
                    78:5d:fe:09:e6:ec:a9:ce:69:5f:f6:c8:9a:34:ca:
                    62:ad:27:99:bf:13:de:21:a6:10:fe:d9:37:b9:b9:
                    4f:ac:1b:dd:21:8c:ec:21:65:da:cb:15:b8:4c:ec:
                    92:3d:28:eb:46:39:e2:9a:2b:9e:32:7b:ea:e0:1a:
                    c4:74:14:8e:b2:17:1e:f2:c2:fc:af:3d:07:37:2b:
                    0f:22:09:64:ef:8d:01:63:f3:94:f8:80:f8:90:d1:
                    1a:ed:b7:c5:04:b9:f1:1e:21:de:15:7d:68:c7:6c:
                    81:c3:4b:14:98:12:f2:f7:16:3f:79:78:e6:73:e5:
                    7e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:91:1A:0C:4A:44:88:28:A2:23:68:E7:A4:CE:91:B2:89:BA:F0:E4
            X509v3 Authority Key Identifier:
                keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/uJEaDEpEiCiiI2jnpM6Rsom68OQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.119.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:d4:74:8b:27:a5:88:40:ac:04:c1:51:7e:9f:09:82:35:e8:
         ba:60:51:a8:61:4f:3c:da:0b:7b:d6:f5:37:db:b8:76:c3:d8:
         ab:f5:85:73:e1:e0:5b:b3:15:a8:e4:ad:ee:34:87:09:11:3d:
         f4:10:93:d9:df:96:48:3a:10:cb:3f:46:dc:10:ff:76:8a:9d:
         bc:69:be:9d:29:40:4f:ac:e1:bf:2b:b7:11:b1:03:0a:38:6a:
         f3:a3:59:18:b5:d9:dc:fe:2a:3d:1e:dc:65:6c:51:cc:ff:81:
         fb:21:32:ac:5b:a6:ff:01:26:d4:f1:c6:d1:b5:6a:7f:cd:60:
         36:0f:3a:89:23:79:69:40:0f:ec:c4:dc:ed:e7:cb:3d:c9:7b:
         2a:5d:c8:77:5f:f0:80:ba:d8:fc:b6:db:d5:46:65:a1:09:04:
         59:b6:c1:13:8e:a8:13:6d:86:7e:59:2f:af:6d:87:86:9e:51:
         9b:db:a4:f9:a9:4a:f4:9b:26:b6:19:46:ee:3b:67:c9:36:55:
         ae:1b:f0:d2:b0:5f:9a:71:6a:ef:ec:f1:78:f1:97:f1:86:92:
         b8:49:a3:e8:5a:e5:55:e6:66:0f:cb:1b:0a:08:e4:c6:85:bc:
         e9:ba:c7:20:19:6b:b3:09:1d:a5:1a:79:a7:5e:62:d8:8c:b0:
         14:90:09:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:35:01 2025 by rpki-client