This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/WKDKLv-tt62b9C91OCyzPhQ_OcQ.roa
File:                     WKDKLv-tt62b9C91OCyzPhQ_OcQ.roa (raw, json)
Hash identifier:          R8pPn24trqZL7l8MMCrinetEIJyyN4dGs9r8jTjJKfw=
Subject key identifier:   58:A0:CA:2E:FF:AD:B7:AD:9B:F4:2F:75:38:2C:B3:3E:14:3F:39:C4
Certificate issuer:       /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial:       019B78A2E363CC32D57AAD385DD193F8576F
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/WKDKLv-tt62b9C91OCyzPhQ_OcQ.roa
Signing time:             Thu 01 Jan 2026 08:18:19 +0000
ROA not before:           Thu 01 Jan 2026 08:18:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8280
IP address blocks:        185.82.37.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:e3:63:cc:32:d5:7a:ad:38:5d:d1:93:f8:57:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
        Validity
            Not Before: Jan  1 08:18:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=58a0ca2effadb7ad9bf42f75382cb33e143f39c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:2d:af:f7:38:4b:90:36:b5:e3:50:30:89:
                    6b:45:bc:51:89:e5:b7:e8:03:cb:fd:86:58:7e:ee:
                    ca:74:42:51:08:1c:f0:37:70:d1:e3:c4:82:b5:e1:
                    65:24:1f:5e:2e:e3:c7:28:76:85:83:8a:0c:bc:2d:
                    6c:64:ae:30:43:2f:65:4b:7b:c5:e0:d1:b0:09:8e:
                    d7:94:79:71:0e:06:ce:1f:08:1a:5a:77:41:9b:4e:
                    1e:d3:20:cf:9a:6e:51:ec:6b:a7:32:2b:ea:7f:1a:
                    4a:91:0f:77:09:9a:69:54:f5:fc:fd:bf:25:36:1f:
                    46:65:0b:0b:ef:32:ca:41:e7:4c:bc:6d:e9:dc:e4:
                    ec:e6:f2:60:dc:8a:e1:2d:b2:07:8b:60:34:f1:e0:
                    ff:45:dd:11:6f:62:f4:86:39:2a:65:ce:52:cd:ba:
                    28:f2:be:38:73:ed:d5:a6:04:ba:e6:92:72:15:d2:
                    9f:c0:d7:d6:73:44:ae:aa:5f:ca:84:ae:e0:f9:bc:
                    96:d5:6c:64:a9:68:66:58:91:7e:e8:f7:e3:13:d4:
                    d4:1b:51:8f:49:1e:c1:1f:7e:55:30:a4:c6:a4:ab:
                    20:fb:e0:63:85:49:84:e4:5b:a9:6b:5c:e2:cf:fb:
                    0d:64:98:cf:b4:de:f0:37:c7:64:73:56:ff:7d:e5:
                    bb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A0:CA:2E:FF:AD:B7:AD:9B:F4:2F:75:38:2C:B3:3E:14:3F:39:C4
            X509v3 Authority Key Identifier:
                keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/WKDKLv-tt62b9C91OCyzPhQ_OcQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:59:30:93:87:47:c1:20:22:30:9d:bc:9b:60:79:10:c2:7b:
         8b:df:e1:12:2d:0b:d1:74:e6:a5:33:b3:70:34:06:c3:f3:80:
         81:25:18:41:48:d4:8b:85:13:b7:98:b9:78:47:ba:63:be:80:
         de:ba:36:5c:de:de:ae:47:b4:e6:70:cd:07:95:04:1f:6b:d6:
         cf:8c:76:98:0e:c1:fc:4c:95:97:85:72:88:4c:67:35:42:68:
         c5:1c:6b:a4:fe:e4:e3:56:d5:73:86:2e:ce:29:97:4d:b3:e2:
         39:e5:41:40:7a:2b:1f:19:2d:36:54:4b:68:c6:bc:b9:67:a3:
         e0:8f:01:df:22:63:70:86:24:59:58:2a:dd:09:e8:7e:c3:5e:
         5a:79:10:5d:cd:cf:18:9e:ed:63:dc:c1:52:bd:a7:d9:de:28:
         3c:f2:0d:40:ad:02:d2:ec:06:ac:53:0b:f5:5c:45:6d:ff:10:
         aa:f9:bd:e6:c6:0f:fa:fc:39:10:31:eb:7b:f0:f1:e8:59:df:
         d1:e3:22:ad:52:41:e4:29:61:5e:c6:82:3d:ba:e2:53:8e:38:
         cc:d3:86:52:d8:e5:f5:42:f4:e4:b6:7f:de:3f:04:09:5c:4c:
         6d:78:e9:37:14:45:8e:30:af:51:a9:7b:90:fb:20:87:8d:ee:
         39:6a:fa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:30:11 2026 by rpki-client