This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/E2zZ0ptuLLW4GKeqwRjSDPvtHuc.roa
File:                     E2zZ0ptuLLW4GKeqwRjSDPvtHuc.roa (raw, json)
Hash identifier:          6H27mylWpjWFpKd6fOdf4A0bu4ovsdmc8EAG0X5i4xQ=
Subject key identifier:   13:6C:D9:D2:9B:6E:2C:B5:B8:18:A7:AA:C1:18:D2:0C:FB:ED:1E:E7
Certificate issuer:       /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial:       019B78A2B67460B029449A2C57A5794E9E9B
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/E2zZ0ptuLLW4GKeqwRjSDPvtHuc.roa
Signing time:             Thu 01 Jan 2026 08:18:08 +0000
ROA not before:           Thu 01 Jan 2026 08:18:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211826
IP address blocks:        195.182.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:b6:74:60:b0:29:44:9a:2c:57:a5:79:4e:9e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
        Validity
            Not Before: Jan  1 08:18:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=136cd9d29b6e2cb5b818a7aac118d20cfbed1ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:02:c1:75:8f:ef:fa:cc:5e:26:ae:78:b3:e6:
                    09:51:34:e1:5e:60:66:cd:18:20:b7:e6:46:f6:4d:
                    73:e6:6d:e8:4c:c2:f3:ae:ad:fb:1d:41:3c:e3:df:
                    f5:16:bb:4f:3a:d7:d9:ee:87:ee:62:4b:04:ea:7a:
                    ec:a5:03:d6:bd:5b:4b:6d:48:33:1a:2a:6e:ca:61:
                    51:1d:ad:b7:e9:29:05:f8:8f:1e:16:fd:eb:f5:bb:
                    71:95:77:48:58:69:5d:a2:9a:35:02:87:31:82:90:
                    f4:83:c3:9d:61:6d:db:f5:2d:23:b3:16:9d:99:b0:
                    ff:9e:67:5a:51:12:0b:b0:d2:42:81:89:49:1b:57:
                    22:4d:0a:0d:e7:2d:e0:0d:dd:26:63:45:51:92:18:
                    42:82:62:60:54:89:3d:81:70:cf:f5:89:d8:3e:db:
                    26:91:92:24:98:32:b6:e1:02:bf:76:fc:f3:55:ed:
                    a8:f9:61:c6:92:50:c3:cd:7a:fc:50:7b:b2:a3:2f:
                    88:aa:97:04:30:c7:4b:f0:b9:9f:66:16:26:b9:d2:
                    e7:2c:52:09:4e:64:1e:f3:68:c7:35:96:d5:b0:db:
                    f8:e2:75:f6:b0:49:db:1b:24:85:b7:dc:b9:42:3d:
                    dd:b0:3f:29:8d:64:5d:64:c5:8e:81:7e:df:5a:24:
                    a4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6C:D9:D2:9B:6E:2C:B5:B8:18:A7:AA:C1:18:D2:0C:FB:ED:1E:E7
            X509v3 Authority Key Identifier:
                keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/E2zZ0ptuLLW4GKeqwRjSDPvtHuc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.182.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:cd:63:1e:a6:33:3a:56:ca:9b:53:58:ca:33:9c:ec:3b:48:
         bf:0a:26:9d:12:f9:9e:ad:95:18:87:ae:13:b4:fc:df:c8:2c:
         51:75:ad:b5:c0:30:71:f5:e9:49:72:fb:74:fe:24:54:e9:3d:
         29:f8:36:db:cd:39:ef:ec:89:f7:41:f7:97:d4:a4:14:36:a3:
         ca:73:94:45:9b:69:8a:fd:b0:a4:84:18:3f:5e:36:bb:5d:ce:
         30:8f:46:ef:2c:79:67:5b:01:2b:c4:d5:8f:f3:b8:4e:f9:bd:
         2c:74:4b:9a:62:1d:90:c3:d2:07:63:12:57:01:62:91:48:92:
         b6:e1:f0:11:dd:b9:d6:eb:1e:65:95:26:80:85:8e:f3:43:b0:
         2a:05:84:c6:28:bd:19:4a:4b:a9:a5:4e:5e:d2:9d:99:38:09:
         05:71:d2:60:b7:a1:ab:8a:44:65:d3:eb:d6:d7:07:91:62:db:
         b9:2b:f1:13:82:31:02:ea:a4:89:7e:fc:78:4b:39:10:73:74:
         bd:39:21:af:d1:51:73:e9:65:97:1e:1a:60:a1:8a:b4:c4:2c:
         17:d2:b7:cb:31:de:4d:f9:f1:5e:88:1c:57:2c:97:68:a2:d3:
         c4:2c:8c:40:de:e2:89:ea:82:9f:8a:7c:2f:b4:ed:f4:92:66:
         83:06:3e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:40:40 2026 by rpki-client