This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/Wu-LPUMqwocBNlt5ypkyRQ-BcG8.roa
File:                     Wu-LPUMqwocBNlt5ypkyRQ-BcG8.roa (raw, json)
Hash identifier:          udr6u/rjNC9kwCUZ4fpiUpE5gr+CoJtYznz4JyS606g=
Subject key identifier:   5A:EF:8B:3D:43:2A:C2:87:01:36:5B:79:CA:99:32:45:0F:81:70:6F
Certificate issuer:       /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial:       019B7FF259A167A97F917956850CE4C251AE
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/Wu-LPUMqwocBNlt5ypkyRQ-BcG8.roa
Signing time:             Fri 02 Jan 2026 18:22:27 +0000
ROA not before:           Fri 02 Jan 2026 18:22:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204013
IP address blocks:        94.126.50.0/24 maxlen: 24
                          94.126.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f2:59:a1:67:a9:7f:91:79:56:85:0c:e4:c2:51:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
        Validity
            Not Before: Jan  2 18:22:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5aef8b3d432ac28701365b79ca9932450f81706f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:79:c3:47:4a:d5:d1:bd:f9:57:e3:bf:f6:90:
                    3b:49:d3:8b:f1:ab:04:64:0c:cb:b4:1c:f4:fa:55:
                    ca:81:04:87:4b:9f:02:1a:71:d7:b5:e7:f0:e4:fb:
                    a8:8b:89:25:94:4a:c1:b0:df:89:f6:2f:ec:46:38:
                    f3:6a:16:b9:76:9e:85:0d:7a:2a:7a:3a:3f:73:3b:
                    30:36:d7:64:13:73:ff:bb:7b:1d:33:56:98:a3:ce:
                    81:1b:85:9c:d9:7f:ee:5d:0a:7c:cd:2f:24:aa:6f:
                    f7:cb:59:eb:ba:9f:6d:21:9a:4c:fc:c2:02:e6:b8:
                    fa:b9:4c:84:63:e7:fd:11:3a:33:49:df:ad:9e:45:
                    77:c1:23:7c:3a:e8:17:e3:7a:fe:f8:ec:19:db:02:
                    2a:f3:37:0f:d8:ce:c8:b1:e8:01:c6:ba:f4:fc:c9:
                    90:28:5f:0f:ea:5a:04:8b:3c:ef:0a:90:b4:da:f1:
                    7e:e1:22:46:e3:00:a0:e6:ae:d0:4d:3f:be:f6:6f:
                    9a:1b:5a:b7:46:41:5c:1b:f6:07:1a:fc:a6:93:ac:
                    63:eb:7e:f4:7f:31:ec:0d:ba:d0:c0:76:b3:6a:46:
                    05:bf:cd:6a:f6:c3:26:3f:34:5f:25:10:fb:b3:e2:
                    6c:bf:ec:cf:e5:ec:ba:6a:70:d9:db:84:95:5c:36:
                    7b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EF:8B:3D:43:2A:C2:87:01:36:5B:79:CA:99:32:45:0F:81:70:6F
            X509v3 Authority Key Identifier:
                keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/Wu-LPUMqwocBNlt5ypkyRQ-BcG8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.126.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:be:4b:f2:bb:2a:12:63:ee:68:d3:2b:57:b1:1c:af:fd:30:
         4e:5d:46:82:c6:60:bf:4b:4d:91:43:3b:d9:46:e1:f2:87:b6:
         1f:7c:4d:86:ac:16:40:ec:80:5b:18:3c:5e:d1:46:ae:cf:76:
         cc:2e:13:42:fb:b5:d3:7a:f6:e5:ba:80:11:cf:91:d7:3b:06:
         7b:dc:fc:f7:62:13:b5:96:5c:fe:b1:3c:5c:a8:fe:56:fa:84:
         ad:de:ca:74:76:57:fe:56:83:73:c1:08:7c:67:55:8d:e5:af:
         cd:05:2b:17:05:99:2b:f7:ad:e7:d6:dc:bf:49:98:9c:40:d8:
         a3:49:b2:ac:c6:00:36:36:ed:16:a3:3b:30:66:22:0c:85:4f:
         c5:7b:9f:12:10:66:a5:a3:4a:f5:75:df:7b:e8:80:49:7a:67:
         c1:bf:f8:4d:b7:70:40:61:56:ac:3c:d7:74:78:24:98:eb:ff:
         a0:6d:52:b1:9e:45:6b:8d:d3:39:f4:83:7e:b1:ed:cd:04:12:
         d4:09:92:b6:35:0a:47:00:28:ea:f2:e4:35:08:c7:66:78:f5:
         a3:8b:6e:5a:83:01:8e:69:9a:cb:44:c4:62:e5:4c:b2:66:69:
         8c:4a:99:1e:91:b1:47:04:ce:81:0a:c4:4f:dc:11:c0:9d:8f:
         ad:c5:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:57:56 2026 by rpki-client