This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WvRp_gznMFQXQPaTjPiL0EXsPjM.roa
File:                     WvRp_gznMFQXQPaTjPiL0EXsPjM.roa (raw, json)
Hash identifier:          pE/bJbkjYZqV9Cq3QEo8BOtZc8YYyIKAcmV3TXAQGc4=
Subject key identifier:   5A:F4:69:FE:0C:E7:30:54:17:40:F6:93:8C:F8:8B:D0:45:EC:3E:33
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B7F84AB1721837F81B8BDA158BDB7206F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WvRp_gznMFQXQPaTjPiL0EXsPjM.roa
Signing time:             Fri 02 Jan 2026 16:22:39 +0000
ROA not before:           Fri 02 Jan 2026 16:22:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211415
IP address blocks:        31.57.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Jan 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:ab:17:21:83:7f:81:b8:bd:a1:58:bd:b7:20:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan  2 16:22:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5af469fe0ce730541740f6938cf88bd045ec3e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a4:7f:3f:5b:e4:b0:ca:40:bf:27:e1:f4:f0:
                    eb:6c:7d:ed:8d:83:52:d9:3f:be:6e:c5:f2:24:35:
                    6f:76:47:9e:3e:46:74:7d:a1:cc:91:af:d8:5a:2d:
                    7b:98:6d:d1:6a:83:11:b2:86:93:d3:ae:8e:aa:b7:
                    e6:8b:f1:d6:a6:3a:6f:50:5e:69:76:16:f8:4f:3b:
                    6c:cd:6a:4a:62:1a:f7:47:ef:1a:e4:0c:5c:17:30:
                    78:41:94:8c:26:0a:c5:5f:bf:ec:28:fc:e9:65:7c:
                    0d:7c:74:8d:83:12:a2:8c:ad:87:92:c8:25:2c:80:
                    a6:ca:e3:08:ba:80:ce:4c:fb:83:1a:e0:e5:e8:ee:
                    2e:ca:64:c0:48:fc:ef:61:59:d5:40:78:c7:c2:5a:
                    5c:4f:60:a0:ff:d6:2a:5e:f3:01:30:e5:09:f7:81:
                    43:26:24:9f:7b:ce:83:04:64:2e:95:16:dc:01:1b:
                    9d:d7:c5:bf:1b:24:0c:e5:25:0b:d7:a7:f3:37:25:
                    e7:ff:0b:b1:8a:43:9b:85:26:e2:63:a3:b7:51:7c:
                    a3:15:f7:ff:27:fd:f4:e7:9b:c5:9d:1b:07:31:7e:
                    33:eb:e7:e8:c2:4e:a7:a1:62:b9:36:fc:06:31:6c:
                    f0:7d:74:9f:79:98:d5:62:31:bd:8f:f4:6b:22:a1:
                    f4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F4:69:FE:0C:E7:30:54:17:40:F6:93:8C:F8:8B:D0:45:EC:3E:33
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WvRp_gznMFQXQPaTjPiL0EXsPjM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.57.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:80:42:88:32:50:cc:4f:cd:90:f4:ee:86:7e:a7:c7:44:b1:
         bb:e5:ea:9b:a3:ae:40:d0:d4:b0:60:cd:4d:20:20:08:62:a6:
         9d:a6:fe:03:ba:f0:92:b6:67:eb:ab:04:66:7a:04:68:b5:43:
         5d:48:0b:53:c8:91:03:4c:fd:9b:2a:08:1f:de:8f:18:45:43:
         29:f8:d5:4a:00:4c:4f:a4:1c:27:16:fe:d9:9c:c6:6b:28:c6:
         e6:42:36:a0:a5:b7:7e:39:2a:ba:1e:92:1c:88:9e:f4:15:ec:
         19:33:28:ba:a8:d3:3e:77:2e:56:42:65:bb:49:c6:26:89:73:
         2d:ae:98:dc:c8:45:b1:b4:1e:aa:ea:6f:a7:f2:c8:01:f1:28:
         e5:e7:96:d0:41:dc:7b:f4:a1:3f:6e:c6:85:7e:75:6f:ff:c0:
         81:18:50:35:ba:05:6f:70:9b:90:25:ec:0c:77:fb:a4:a3:59:
         75:ca:c3:c0:38:1b:eb:96:3c:70:6c:39:67:5f:d2:e6:50:eb:
         e8:34:a3:7d:e2:48:00:06:bd:cd:57:a7:f8:cf:11:bb:be:85:
         fa:09:75:08:6e:05:2a:bb:82:7f:06:0c:52:4d:37:74:3c:09:
         73:77:24:e9:de:4e:7c:4e:ac:c5:00:a6:f9:66:43:ff:37:6d:
         56:d2:a8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:33:27 2026 by rpki-client