This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/WEFbXTk7yeRkC088JT7a_ioRbi0.roa
File:                     WEFbXTk7yeRkC088JT7a_ioRbi0.roa (raw, json)
Hash identifier:          3qKJYS5NzbZWhGkSEbXPMuOX8xOy4zfcmmxRc/G+Gk4=
Subject key identifier:   58:41:5B:5D:39:3B:C9:E4:64:0B:4F:3C:25:3E:DA:FE:2A:11:6E:2D
Certificate issuer:       /CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Certificate serial:       019B7758796C8189560DAA74D1EC8D8461CB
Authority key identifier: DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/WEFbXTk7yeRkC088JT7a_ioRbi0.roa
Signing time:             Thu 01 Jan 2026 02:17:25 +0000
ROA not before:           Thu 01 Jan 2026 02:17:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47543
IP address blocks:        194.26.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:79:6c:81:89:56:0d:aa:74:d1:ec:8d:84:61:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
        Validity
            Not Before: Jan  1 02:17:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=58415b5d393bc9e4640b4f3c253edafe2a116e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3f:d8:f8:6e:37:c6:e4:20:28:be:77:78:26:
                    59:33:65:3a:d1:47:dc:41:27:a7:08:92:fc:8a:31:
                    40:ed:02:24:ea:af:da:ea:e2:b9:15:65:36:a2:78:
                    d5:49:3f:6e:fa:3d:87:42:1e:f9:22:2e:2c:21:82:
                    89:b8:8b:70:d5:7c:77:d5:55:a3:83:66:8f:50:d4:
                    96:f3:10:3e:93:1b:90:bf:8d:e0:73:ed:ed:f3:01:
                    5d:13:c4:8e:74:f0:48:b1:e0:c5:69:a8:fa:97:87:
                    07:77:79:66:d6:70:97:f9:99:2a:87:d2:15:2c:ac:
                    8c:77:aa:43:5e:f4:be:16:bc:f2:ad:58:98:46:c2:
                    36:a3:90:c5:12:7e:33:4d:b5:00:4c:f8:da:02:d4:
                    1e:01:19:b1:0e:0e:64:7c:64:17:91:05:84:dc:13:
                    71:ce:c1:a7:67:57:a0:6c:74:48:d0:48:e0:fa:58:
                    a8:cc:cf:d1:84:e3:91:e9:cf:a7:d3:cb:95:da:61:
                    36:90:7e:01:a5:8a:0a:20:9a:80:1b:89:5e:df:55:
                    7f:7e:d0:b5:2e:3c:45:07:31:0f:c2:f9:4f:f1:f3:
                    6b:02:db:6d:47:ef:8a:eb:86:45:6d:ce:c2:45:ad:
                    0d:07:dc:53:c7:c6:61:bc:c4:5c:74:46:8b:64:13:
                    ff:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:41:5B:5D:39:3B:C9:E4:64:0B:4F:3C:25:3E:DA:FE:2A:11:6E:2D
            X509v3 Authority Key Identifier:
                keyid:DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/WEFbXTk7yeRkC088JT7a_ioRbi0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:e1:43:21:04:c8:ea:73:fe:7e:ff:26:fa:d7:b5:e1:d1:16:
         e5:65:79:b8:40:c0:71:75:5c:37:88:60:25:a1:f8:4d:72:90:
         9c:63:5d:f3:d8:9a:4d:cd:83:19:45:a2:68:12:30:09:b9:f8:
         b0:56:69:eb:b3:51:b4:cc:56:3b:da:2b:52:40:20:58:2f:bf:
         6c:5b:65:0e:82:52:fa:98:46:46:9b:db:f0:ab:72:41:20:46:
         de:ce:c3:49:ed:1a:96:e3:f2:38:55:1e:27:9a:53:59:ba:13:
         7f:ed:00:d7:49:12:80:cb:65:4d:46:1f:df:c3:fe:20:6f:44:
         5d:18:a4:8d:52:51:59:d0:55:0c:06:89:53:a7:8a:bd:86:18:
         82:ef:54:dc:16:1d:db:3d:68:4d:92:d2:06:cb:a3:fe:ec:c4:
         ea:11:3d:65:61:06:7f:47:b2:e9:94:06:ca:91:4b:bc:77:98:
         e6:b8:4f:9e:c4:7a:2f:c3:f8:8b:6c:5d:bb:f1:b6:dc:00:1f:
         3d:55:f1:08:0c:92:55:0f:57:c0:f7:45:7a:20:cb:5f:41:23:
         8b:8a:e2:8f:76:b4:7e:81:0b:d7:06:e2:e9:ed:c7:dd:7b:53:
         85:b0:af:0c:55:c7:34:36:36:96:88:f9:a8:e4:09:a0:0c:85:
         8c:6e:7b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:10:51 2026 by rpki-client