This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/wuPeAwGhCGGyy1vUlZnoXQ_te9w.roa
File:                     wuPeAwGhCGGyy1vUlZnoXQ_te9w.roa (raw, json)
Hash identifier:          Ya4gfqovf3JM8yFavds8OzJvokLnz9/3YHuh2owqYdI=
Subject key identifier:   C2:E3:DE:03:01:A1:08:61:B2:CB:5B:D4:95:99:E8:5D:0F:ED:7B:DC
Certificate issuer:       /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial:       019B791130D2FA362973AB503765EFEBEDF8
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/wuPeAwGhCGGyy1vUlZnoXQ_te9w.roa
Signing time:             Thu 01 Jan 2026 10:18:48 +0000
ROA not before:           Thu 01 Jan 2026 10:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41826
IP address blocks:        193.34.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:30:d2:fa:36:29:73:ab:50:37:65:ef:eb:ed:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
        Validity
            Not Before: Jan  1 10:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2e3de0301a10861b2cb5bd49599e85d0fed7bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2a:02:18:0d:a0:83:be:ed:7e:74:88:d8:74:
                    b7:9b:35:4b:d3:84:bd:f9:39:73:ed:69:07:c8:c0:
                    85:65:36:3b:55:b6:70:a0:50:00:52:35:5d:6e:ae:
                    a5:ef:76:b7:7f:26:5c:53:43:c3:f6:61:d4:4f:61:
                    7a:f1:e4:c8:29:54:cf:cf:41:f1:36:3d:75:1b:3a:
                    c3:7a:a5:98:0a:8c:d1:1d:37:e7:c8:46:f4:5d:cd:
                    c2:c1:d5:d7:c1:02:d0:2d:fa:c0:e4:7d:0d:bd:75:
                    ea:e1:fd:5c:a4:c6:a0:cc:6b:c6:19:5c:96:17:91:
                    9d:38:89:08:95:c7:94:a5:f8:eb:df:49:d8:f2:06:
                    90:0f:33:30:0c:f3:4f:02:f5:d1:36:d9:16:7a:4f:
                    d9:b6:81:08:a3:fc:d0:77:44:61:be:af:08:55:93:
                    94:84:f6:54:39:76:93:8d:fc:88:be:c4:0b:49:a5:
                    a7:c1:7f:2e:b8:37:79:1f:f3:be:90:1a:16:91:d1:
                    a8:1e:36:60:e0:52:f4:95:26:cd:28:0d:95:9c:78:
                    af:0f:70:59:56:1b:cc:bb:ad:69:3e:7f:64:6d:5e:
                    0a:4c:cb:76:70:bb:b5:98:85:a0:fa:c8:01:d1:4a:
                    dd:f3:d4:92:04:c1:ab:82:80:0c:62:a6:f6:9b:08:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E3:DE:03:01:A1:08:61:B2:CB:5B:D4:95:99:E8:5D:0F:ED:7B:DC
            X509v3 Authority Key Identifier:
                keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/wuPeAwGhCGGyy1vUlZnoXQ_te9w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.34.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:b3:98:d9:06:93:fe:0e:5f:a0:38:48:b7:39:c3:02:6d:a7:
         a7:a1:f1:1d:f8:d7:52:b6:c2:6e:21:60:55:1d:97:42:d1:ae:
         27:a9:9b:5e:d2:92:4f:8d:30:d5:ec:cc:d7:d4:53:f7:b3:ee:
         74:19:f4:bf:8a:44:5f:26:a8:ff:85:00:bd:56:5f:64:f6:91:
         fc:08:0e:4b:db:8d:42:58:3a:f6:18:3e:9e:e3:e0:a3:44:e2:
         21:54:a1:83:c1:9f:84:81:3d:ea:0d:59:cd:4f:81:d1:34:3c:
         a7:27:d7:31:7e:b8:66:9a:9e:a1:d7:93:37:24:d2:65:f3:2d:
         7c:36:2b:b3:10:f0:2e:29:0a:e9:28:eb:dc:04:c7:bc:98:72:
         1f:73:87:21:e3:d1:c4:57:db:8e:46:da:96:39:72:7d:9d:bf:
         13:d4:de:e8:f2:63:80:f4:1c:9c:b5:cc:8b:75:d8:2e:23:cd:
         bb:ff:1a:4c:e2:05:26:49:4e:98:6c:2a:21:00:bb:9d:af:fe:
         88:1e:eb:b7:2f:56:d4:77:86:ee:a3:cb:cb:6f:57:02:5a:c4:
         f5:70:39:60:83:5c:16:4c:68:f8:ad:6c:62:e4:62:6c:9f:dd:
         1a:6f:9e:02:e9:3a:0c:83:a7:96:45:81:fd:40:55:0a:4d:06:
         e1:01:75:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:40:42 2026 by rpki-client