This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/WVTec6WdlinW2NDLGRvaP7XGcrE.roa
File:                     WVTec6WdlinW2NDLGRvaP7XGcrE.roa (raw, json)
Hash identifier:          AVgu0/9AF/Q2loFPcgeDLiO4K7I+K+GfkMpa0wfObDM=
Subject key identifier:   59:54:DE:73:A5:9D:96:29:D6:D8:D0:CB:19:1B:DA:3F:B5:C6:72:B1
Certificate issuer:       /CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Certificate serial:       019B791079DBE123AEE11539CB95EE81B8DD
Authority key identifier: 3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/WVTec6WdlinW2NDLGRvaP7XGcrE.roa
Signing time:             Thu 01 Jan 2026 10:18:01 +0000
ROA not before:           Thu 01 Jan 2026 10:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50683
IP address blocks:        2001:67c:25a4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:79:db:e1:23:ae:e1:15:39:cb:95:ee:81:b8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ada5baa058c409565ff2ac876a22ee6377b503b
        Validity
            Not Before: Jan  1 10:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5954de73a59d9629d6d8d0cb191bda3fb5c672b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:de:95:11:5d:3b:ce:a0:d1:37:e4:e7:b7:fc:
                    a2:cd:71:e6:20:0b:80:da:7f:fe:6b:0c:35:72:d7:
                    5b:76:c2:6c:91:90:c0:f0:15:5f:fd:5f:f5:b5:2b:
                    a5:4a:f7:74:3d:62:cd:68:74:ff:c0:02:0f:7d:a5:
                    ac:86:4c:3b:06:46:9d:88:4d:99:61:47:29:a2:95:
                    ca:79:da:72:f7:83:49:a1:92:ae:d5:93:42:0c:b6:
                    36:92:0f:16:00:3a:0a:76:63:96:af:c3:b6:43:4a:
                    3c:a3:6d:08:9e:9f:19:89:54:3e:d6:75:51:82:9d:
                    59:1b:f6:45:73:de:37:dd:59:0c:3a:04:f1:16:bb:
                    73:d1:52:5b:92:7f:5f:62:f5:42:d9:74:fa:fa:b3:
                    dd:e1:9e:d9:17:a8:92:e5:d8:45:ef:79:98:f4:07:
                    45:7d:7d:08:5b:c6:ca:c2:7a:c1:d3:fb:14:cb:ae:
                    81:14:0f:3e:47:91:fc:7f:d4:3a:1d:78:c1:96:7e:
                    6e:e9:52:4f:45:df:89:89:bb:b7:0b:0f:b3:2d:eb:
                    db:2b:72:f2:db:7f:d7:c9:a5:c9:58:00:38:37:5d:
                    8a:c0:db:c3:25:1c:d0:c4:3d:e4:e2:e5:bb:47:e8:
                    c9:8f:72:7e:3e:9d:0d:0c:ef:31:f9:95:40:a5:2b:
                    4c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:54:DE:73:A5:9D:96:29:D6:D8:D0:CB:19:1B:DA:3F:B5:C6:72:B1
            X509v3 Authority Key Identifier:
                keyid:3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/WVTec6WdlinW2NDLGRvaP7XGcrE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:25a4::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:25:99:df:52:0b:29:25:0d:86:a8:af:6f:21:78:b7:65:3b:
         81:cd:aa:43:2b:0e:f6:84:f3:14:cd:da:68:6e:f9:a5:d5:2e:
         ac:30:f5:c4:91:fe:a8:3c:09:37:d8:fe:8c:d9:b6:30:e0:25:
         39:49:28:a0:62:36:b1:96:7e:30:51:5d:72:db:a0:13:66:4f:
         41:5c:eb:fb:19:bf:0b:b7:c9:15:5c:42:ff:ac:3f:04:e3:81:
         a3:e3:5c:86:22:50:96:de:ce:f1:44:b2:a2:b4:8d:9c:f8:97:
         c0:51:c9:86:33:22:d4:b9:09:1d:88:45:0c:a2:a0:a4:f8:29:
         8a:ff:15:78:fe:11:42:96:98:29:8e:17:32:cb:bb:85:4e:a5:
         06:02:30:7f:b0:68:5b:ff:b3:53:62:f1:86:70:0e:13:f2:19:
         c3:1e:96:6f:5d:bb:a9:59:26:b6:28:e3:98:b6:84:26:1c:68:
         4b:bb:0f:f7:ab:3d:0d:73:a8:4d:66:d8:6d:52:78:70:4e:29:
         3a:09:5e:d6:b0:f0:ee:82:9c:c2:4c:64:9c:e6:38:74:9b:57:
         1b:05:53:79:21:ee:e3:0a:23:6b:82:54:de:3a:31:04:1d:ed:
         a5:4f:04:36:35:a8:28:22:05:35:40:2c:e1:ac:fa:20:5f:e2:
         3f:1f:b5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:06:48 2026 by rpki-client