This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Wo4vtsKegMTFfJikkezBrEYozvc.roa
File:                     Wo4vtsKegMTFfJikkezBrEYozvc.roa (raw, json)
Hash identifier:          7+0bjH8ax28g4RHfCsUM0BaAKEZmGD9GjmLe2VJtLrs=
Subject key identifier:   5A:8E:2F:B6:C2:9E:80:C4:C5:7C:98:A4:91:EC:C1:AC:46:28:CE:F7
Certificate issuer:       /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial:       019B7CEE581C6FAA98E4BE08788C6D9D9417
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Wo4vtsKegMTFfJikkezBrEYozvc.roa
Signing time:             Fri 02 Jan 2026 04:19:13 +0000
ROA not before:           Fri 02 Jan 2026 04:19:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44213
IP address blocks:        87.229.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:58:1c:6f:aa:98:e4:be:08:78:8c:6d:9d:94:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
        Validity
            Not Before: Jan  2 04:19:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a8e2fb6c29e80c4c57c98a491ecc1ac4628cef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:40:0e:a8:ca:b4:43:32:6f:53:52:24:99:01:
                    72:10:1a:58:bd:db:98:f2:a6:55:68:1b:2d:89:31:
                    9d:f7:f5:43:28:b9:55:de:6c:33:06:00:1b:a4:f1:
                    58:f5:b1:6d:0a:6c:3b:64:eb:7c:45:20:56:ba:99:
                    09:47:8a:db:5c:4d:b8:9b:9d:36:d7:94:75:81:a7:
                    cf:2b:cc:81:87:d3:9a:9f:4d:ff:b1:d1:9e:b5:04:
                    aa:51:46:01:58:e0:13:e1:fd:88:91:07:74:55:21:
                    4e:65:a5:e0:ba:47:ad:1f:7a:52:91:98:81:5d:2f:
                    2d:ca:b1:35:c2:11:04:9d:19:f6:24:c4:c6:93:d3:
                    22:c3:a0:bb:08:0f:3f:76:49:6d:df:42:59:44:e3:
                    02:94:63:af:33:a4:df:3b:43:23:35:d3:97:2e:20:
                    9e:f5:95:f9:6e:ef:aa:01:65:39:78:52:b9:6d:3f:
                    97:d2:5b:35:6d:08:ba:8d:c3:ba:e6:3c:14:da:d1:
                    01:f4:37:74:bb:ac:cd:a8:2e:d6:87:d0:0a:c1:e6:
                    29:ff:5c:3b:85:54:26:bf:a9:6b:db:4e:85:4d:f0:
                    85:14:c2:47:d6:8b:41:de:ec:4a:e2:79:49:9c:1a:
                    38:7e:f4:49:0e:c4:1e:0f:2d:1b:42:7a:79:b0:bd:
                    85:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8E:2F:B6:C2:9E:80:C4:C5:7C:98:A4:91:EC:C1:AC:46:28:CE:F7
            X509v3 Authority Key Identifier:
                keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Wo4vtsKegMTFfJikkezBrEYozvc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.229.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:0d:d3:4a:9f:db:78:15:4f:dd:e7:0f:b0:34:7e:3c:2e:75:
         56:6b:eb:2c:3c:df:91:cc:01:34:52:5e:3c:af:44:aa:8c:e1:
         ec:d2:ba:9b:59:68:36:fd:98:47:05:fa:ef:61:a8:e7:ac:65:
         42:a1:d7:f7:9a:0c:17:95:bd:bc:e5:66:41:d7:e7:46:b0:4a:
         02:eb:0b:59:e5:5b:f0:36:5a:10:eb:0f:6b:ad:eb:5e:5a:67:
         63:13:65:8d:6a:7d:ee:40:d1:27:9d:f1:65:34:98:30:9b:19:
         f9:a5:89:a8:ab:59:ba:a2:62:6e:19:71:5a:15:f6:69:22:cd:
         8d:75:fe:ff:38:68:ff:9e:48:26:0c:f3:18:8f:99:67:de:5f:
         6b:9e:95:80:7d:96:0f:86:95:5b:b9:b8:20:c0:8f:02:d3:cd:
         94:39:97:fe:8f:ab:63:dc:c5:51:51:c0:7d:e1:03:de:b3:21:
         12:14:1a:fd:b6:60:df:e8:94:73:84:12:1f:9e:c7:53:ab:cd:
         d1:9a:b2:89:93:c2:55:68:d0:60:38:a3:3b:38:75:cc:b6:39:
         9f:33:4a:5a:e8:46:35:dc:90:ed:bb:ea:2f:18:4b:c9:ce:67:
         13:dd:29:1b:e1:b7:f5:1d:c4:8c:d3:bb:48:5f:aa:7f:e5:33:
         56:b9:19:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:16:34 2026 by rpki-client