This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/Wvn-6bOtVas0qXKxXybSRbQtZBc.roa
File:                     Wvn-6bOtVas0qXKxXybSRbQtZBc.roa (raw, json)
Hash identifier:          1X1eFGWJ8hZe2T0rJSVL9R4hPe90VqVV+Y7boPOk/og=
Subject key identifier:   5A:F9:FE:E9:B3:AD:55:AB:34:A9:72:B1:5F:26:D2:45:B4:2D:64:17
Certificate issuer:       /CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
Certificate serial:       019B79ED00A4D340AB0EC8981A3A217DD5FE
Authority key identifier: 49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/Wvn-6bOtVas0qXKxXybSRbQtZBc.roa
Signing time:             Thu 01 Jan 2026 14:18:53 +0000
ROA not before:           Thu 01 Jan 2026 14:18:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48930
IP address blocks:        195.88.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 23:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:00:a4:d3:40:ab:0e:c8:98:1a:3a:21:7d:d5:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
        Validity
            Not Before: Jan  1 14:18:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5af9fee9b3ad55ab34a972b15f26d245b42d6417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:86:b3:71:72:7b:52:6b:4c:94:1c:cd:8b:7c:
                    57:29:29:e4:0b:f6:5a:b1:7d:52:79:15:ca:8d:f2:
                    a5:ad:d4:91:13:ac:78:62:3d:76:24:62:e2:51:56:
                    03:23:89:66:f5:4a:16:29:f0:09:59:f5:af:1b:6a:
                    e2:b7:b0:5d:f0:90:53:50:27:8c:0c:eb:28:e7:e7:
                    f5:8a:f6:12:d8:58:d2:0e:3d:f6:9c:10:9f:c2:05:
                    ff:1a:5e:3c:df:9a:5e:3b:bf:bd:7f:0e:83:a4:88:
                    7f:b5:9b:67:d4:02:04:ac:57:28:1b:be:84:49:55:
                    32:10:2b:0c:b4:7f:f8:ab:90:5d:e3:2a:13:d8:17:
                    19:68:25:14:cd:7e:91:39:34:59:0b:45:bc:25:f5:
                    d5:58:ca:f2:33:f1:ff:10:13:1d:89:c7:6e:60:a9:
                    8c:16:9c:2f:49:43:1c:6f:58:74:e8:a1:a9:04:21:
                    95:90:3d:89:31:b2:1a:69:ac:0f:3c:86:90:01:55:
                    c8:1c:7c:8f:a5:de:e2:93:d7:f3:4f:08:6e:68:42:
                    0b:47:ba:b8:18:be:88:30:17:1b:ac:59:bd:7c:42:
                    ee:ad:08:f3:f7:3e:39:b7:c1:ca:1f:92:f8:0e:e1:
                    b7:63:f8:59:9f:a8:e2:18:27:ee:2a:ce:30:78:06:
                    24:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F9:FE:E9:B3:AD:55:AB:34:A9:72:B1:5F:26:D2:45:B4:2D:64:17
            X509v3 Authority Key Identifier:
                keyid:49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/Wvn-6bOtVas0qXKxXybSRbQtZBc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:52:75:88:49:84:0f:3f:03:8f:c1:af:38:2c:d3:c0:b1:c0:
         0f:95:0e:10:48:b6:ec:da:38:93:61:a1:0f:eb:80:07:71:95:
         9a:8c:8f:d5:4a:66:38:61:83:5d:b3:29:27:0d:6b:bb:2d:d0:
         f6:bd:47:a7:80:b6:79:2f:96:69:bb:0c:91:46:ce:a6:98:c7:
         9f:09:3c:a7:6d:55:82:e8:82:40:37:89:25:4f:69:f0:d0:95:
         0c:b2:33:49:7c:78:b6:2e:58:7b:95:fa:ec:10:15:aa:33:25:
         2e:13:6d:e3:50:c6:ec:2a:55:30:e5:3b:11:88:f8:ae:15:e4:
         ce:0d:b9:be:87:8e:f9:04:04:ec:46:1b:56:c1:ab:ca:7e:5e:
         cf:fc:9c:30:db:3c:12:7b:66:7f:a8:0e:d6:11:f3:c7:eb:b8:
         37:cc:0d:4c:51:a5:d3:b5:c1:53:65:9d:77:c2:e9:7f:43:d3:
         90:84:2f:ac:b4:1c:94:39:81:12:5b:39:c5:51:de:4f:6f:5b:
         fe:d7:c7:e3:2c:65:f6:4f:36:d5:63:7e:31:a3:70:b5:d8:af:
         f1:ac:20:1a:a8:bf:d0:f0:63:db:4d:ed:2a:0b:e8:cb:eb:b0:
         1f:b6:7a:8c:be:89:74:b3:10:15:f3:c2:34:6d:42:2a:ea:03:
         d4:9b:9b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 08:38:24 2026 by rpki-client