This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/WC7-N-AQVvJOrJsfvHc7Lw82OeA.roa
File:                     WC7-N-AQVvJOrJsfvHc7Lw82OeA.roa (raw, json)
Hash identifier:          DSIGTtOOJTOd6v4lSY+KI5Vvun5FIwwizdppUGcnQf0=
Subject key identifier:   58:2E:FE:37:E0:10:56:F2:4E:AC:9B:1F:BC:77:3B:2F:0F:36:39:E0
Certificate issuer:       /CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Certificate serial:       019B797DED8176C9E103D239056D68E7B602
Authority key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/WC7-N-AQVvJOrJsfvHc7Lw82OeA.roa
Signing time:             Thu 01 Jan 2026 12:17:34 +0000
ROA not before:           Thu 01 Jan 2026 12:17:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24579
IP address blocks:        193.110.89.0/24 maxlen: 24
                          193.111.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7d:ed:81:76:c9:e1:03:d2:39:05:6d:68:e7:b6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
        Validity
            Not Before: Jan  1 12:17:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=582efe37e01056f24eac9b1fbc773b2f0f3639e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:64:6c:d5:bd:8e:c4:c4:cf:91:c2:32:84:39:
                    03:5b:c8:d3:0f:d0:e4:5f:de:e1:ab:73:8c:0d:0d:
                    42:17:a2:27:63:d0:e9:c9:ca:9b:2a:ed:1d:58:00:
                    15:9a:a7:97:b2:3b:fc:ed:01:94:49:97:c3:38:53:
                    bc:19:96:4d:b4:5c:5a:42:eb:e6:8a:1a:6b:09:3a:
                    57:72:29:64:fc:a2:74:ea:f7:29:cf:07:5f:d7:06:
                    91:f6:9b:6d:05:b0:46:12:e1:0e:6d:ff:a6:b4:0a:
                    f9:83:a2:b2:95:9b:3b:8f:88:bf:70:f8:51:39:9f:
                    67:25:11:00:05:36:63:0b:aa:18:25:7f:0a:3a:26:
                    ba:0d:74:53:7e:6a:92:8d:6d:7a:9b:a3:70:ce:b2:
                    54:59:03:4a:fd:81:d9:8b:16:27:f7:2c:42:c4:ed:
                    9e:ff:ba:4e:4a:34:61:6b:0d:b1:ef:e1:5e:a3:10:
                    94:ce:84:8f:3d:44:0a:b8:aa:c9:59:9f:39:2d:78:
                    41:af:5b:a1:88:e6:67:3c:be:cd:d1:fe:1d:3a:da:
                    8b:2a:37:e8:6e:14:4e:f6:11:f4:f4:3e:ed:96:95:
                    e8:00:ef:9c:79:4e:f1:3f:00:e0:cb:9e:e2:3e:98:
                    2d:b4:f2:93:ff:ad:21:4b:eb:fb:3b:1e:93:75:44:
                    49:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2E:FE:37:E0:10:56:F2:4E:AC:9B:1F:BC:77:3B:2F:0F:36:39:E0
            X509v3 Authority Key Identifier:
                keyid:88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/WC7-N-AQVvJOrJsfvHc7Lw82OeA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.89.0/24
                  193.111.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:f6:39:7c:a8:0d:cf:ef:cc:71:8e:59:46:78:33:1a:fa:0f:
         a2:b8:69:08:49:2b:aa:88:75:c0:80:a0:4c:5c:f9:99:85:04:
         d2:72:56:40:2d:e4:7f:01:7c:58:84:63:20:ff:ee:2a:20:5d:
         01:66:48:99:0c:ab:95:e0:0f:00:cb:f7:3e:01:bf:30:03:eb:
         d3:b9:ca:6d:77:78:3c:26:35:01:fd:10:47:2a:c4:98:2d:c7:
         d3:5c:c0:b0:cc:ce:da:b1:a8:b3:a0:f7:61:97:13:05:68:a0:
         a2:23:8f:44:e4:8e:9d:50:9a:c6:a9:13:18:27:ab:d8:43:50:
         ce:78:5c:50:13:80:ce:5e:0a:73:b0:0a:9e:eb:48:06:d6:dc:
         52:6f:b5:26:df:2d:3a:6d:62:d0:a3:e7:64:0a:4b:d8:37:ae:
         fb:07:6c:d3:9b:0e:4a:e0:51:09:bc:5d:13:ca:8b:95:3d:25:
         65:88:8f:fc:a5:e1:00:b6:ff:d0:a7:d7:ee:3f:db:45:97:02:
         23:62:91:4f:ec:1e:22:17:60:d3:33:c4:e7:5e:2a:91:4d:a2:
         e1:bc:40:92:d4:86:f0:0f:5f:98:ff:b7:f9:73:f7:6f:7e:c0:
         8b:93:2b:cb:11:f4:a0:82:a4:a4:76:16:fe:cc:6a:c0:3d:05:
         19:65:e0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:29:54 2026 by rpki-client