This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/wgPfSToKC9FTCAvt-lOgja8J3iY.roa
File:                     wgPfSToKC9FTCAvt-lOgja8J3iY.roa (raw, json)
Hash identifier:          PycEQ97+AB+dOAuBHC6DWVd/AycBCpoV++Dya2/jh+M=
Subject key identifier:   C2:03:DF:49:3A:0A:0B:D1:53:08:0B:ED:FA:53:A0:8D:AF:09:DE:26
Certificate issuer:       /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial:       019B791052D97F0C3744B535324B9C7FD4CD
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/wgPfSToKC9FTCAvt-lOgja8J3iY.roa
Signing time:             Thu 01 Jan 2026 10:17:51 +0000
ROA not before:           Thu 01 Jan 2026 10:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204592
IP address blocks:        82.114.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:52:d9:7f:0c:37:44:b5:35:32:4b:9c:7f:d4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
        Validity
            Not Before: Jan  1 10:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c203df493a0a0bd153080bedfa53a08daf09de26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e6:2a:52:d4:c4:73:97:7e:7d:ed:55:53:fd:
                    63:a7:fc:0b:09:a9:a7:3d:7c:15:dd:4e:2c:72:07:
                    38:d7:7d:6f:5d:08:7e:3e:d3:38:6d:df:92:3a:0e:
                    e4:68:8b:34:65:3d:5e:a7:9c:fe:03:68:ed:22:e3:
                    95:1d:89:6f:59:81:1a:fa:64:12:6b:a7:ba:f9:4e:
                    5f:db:d6:74:10:ac:90:2c:e2:19:5d:c3:69:a0:57:
                    0b:38:1c:da:17:fb:5c:26:43:b6:22:18:c5:e5:3c:
                    8c:78:c9:a7:2c:3e:ce:4d:aa:a7:d1:c8:64:1c:51:
                    17:15:5d:d9:c0:3a:1b:1d:7d:89:49:1b:df:65:ef:
                    a5:b9:f3:09:9d:b6:50:01:9d:86:67:98:c8:4b:ba:
                    f2:c9:a6:3d:b8:8b:4e:c6:a8:ad:1b:bf:da:ee:81:
                    87:8a:d6:33:2b:da:3f:17:19:f1:09:2a:99:61:fa:
                    d5:a6:71:d0:79:f7:16:39:24:db:f7:70:9b:cb:18:
                    69:84:93:de:6a:9d:9b:cd:29:1d:9c:56:63:dc:3b:
                    bf:00:d6:51:da:28:58:e6:8a:fe:27:bb:9e:51:d1:
                    92:3e:f3:1a:ac:4b:c7:4a:af:98:81:2d:d3:2a:87:
                    74:ba:c7:31:c0:b0:c2:80:3b:e5:36:c0:f7:4d:54:
                    31:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:03:DF:49:3A:0A:0B:D1:53:08:0B:ED:FA:53:A0:8D:AF:09:DE:26
            X509v3 Authority Key Identifier:
                keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/wgPfSToKC9FTCAvt-lOgja8J3iY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.114.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:55:02:bc:a2:0f:77:06:63:f4:65:bf:e4:4b:5b:f7:e8:fa:
         19:e4:bb:8d:e6:30:43:6e:73:00:ce:65:fb:8d:42:4d:c8:03:
         dc:0d:2e:85:e6:c6:be:6e:a0:fe:67:e3:4d:74:6a:be:6d:0d:
         6d:08:40:1b:68:68:5a:db:d2:8d:db:d7:ec:d7:2b:3c:2f:7f:
         50:31:b8:13:3c:1b:b0:08:7a:cf:06:80:a0:15:c1:29:0a:50:
         d8:3e:63:2d:57:65:28:88:b5:f3:7a:18:45:b4:b0:ec:7f:80:
         4d:71:71:c6:02:ea:4a:19:3b:51:07:14:e6:e0:6b:fc:b1:b9:
         99:34:0a:ec:c5:80:e4:a1:f6:17:3a:17:4e:cf:77:87:e8:a7:
         e9:0a:da:a1:de:1a:f8:df:bf:e9:59:e0:e4:52:1b:71:a3:7d:
         31:7c:dd:17:5e:53:30:a3:42:ed:83:74:82:db:14:b6:70:07:
         c7:39:23:5f:0e:62:4c:ca:d9:1f:51:5c:7c:23:0d:79:38:6d:
         b4:14:fa:6c:72:bf:51:c1:c3:fd:95:bb:ad:10:73:66:4a:eb:
         84:7e:78:86:2f:fb:f2:6c:f3:00:cd:85:b6:aa:cd:9f:85:03:
         de:4a:1c:c3:38:fe:0e:4f:2b:cf:2a:1f:d9:5e:87:fc:d0:75:
         27:42:79:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:29:37 2026 by rpki-client