This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/wuv0_6DlHlqZM6LGb2Dio6T6saI.roa
File:                     wuv0_6DlHlqZM6LGb2Dio6T6saI.roa (raw, json)
Hash identifier:          gtv4offigq8W3OlFkNHPXsPQNm16YoHFJZaK7iF86d4=
Subject key identifier:   C2:EB:F4:FF:A0:E5:1E:5A:99:33:A2:C6:6F:60:E2:A3:A4:FA:B1:A2
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       019B797E37AD933B2BF36E58F4B8AD2A826A
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/wuv0_6DlHlqZM6LGb2Dio6T6saI.roa
Signing time:             Thu 01 Jan 2026 12:17:53 +0000
ROA not before:           Thu 01 Jan 2026 12:17:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200325
IP address blocks:        185.190.83.0/24 maxlen: 32
                          194.156.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 12:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:37:ad:93:3b:2b:f3:6e:58:f4:b8:ad:2a:82:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 12:17:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2ebf4ffa0e51e5a9933a2c66f60e2a3a4fab1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:92:f8:52:44:c4:bd:30:87:b1:c4:c6:c6:
                    d5:c2:79:a7:55:07:61:a6:de:ac:93:1d:2c:ac:89:
                    43:19:45:22:42:96:5e:cc:51:a8:f5:6d:75:f9:2e:
                    a1:66:95:05:64:ea:c9:59:a5:be:7d:6a:fa:89:25:
                    24:d0:77:06:56:e9:1c:4e:66:94:7f:e0:10:30:49:
                    24:7e:e1:d2:bc:ec:f6:c1:81:a0:d3:b5:59:b5:be:
                    f6:0a:79:3e:50:b0:87:1b:b9:50:45:52:3a:7e:58:
                    73:04:04:6e:03:49:bb:46:96:a7:28:53:6c:9b:4b:
                    eb:b2:9c:da:e7:73:d9:25:da:05:ac:90:51:20:62:
                    a8:71:05:bf:ee:63:ec:f9:9e:c1:5b:31:90:5a:29:
                    e3:be:8a:93:22:e3:3e:47:b4:c6:b0:9c:3e:58:03:
                    77:05:97:db:88:8e:be:77:7a:2d:71:3e:b0:1d:f3:
                    62:5b:6d:41:95:e7:95:ce:cd:51:30:2a:e7:2b:bc:
                    17:96:38:6e:f5:04:b1:6e:c6:c2:81:35:5c:1d:90:
                    c3:94:63:6b:88:64:8e:18:ea:6c:bb:d3:1d:c7:c8:
                    98:c4:c7:ba:ca:cb:89:2b:eb:e1:3f:c2:47:b0:d3:
                    fe:c0:fd:48:2f:3a:bb:48:79:4f:04:1d:4b:11:01:
                    6d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EB:F4:FF:A0:E5:1E:5A:99:33:A2:C6:6F:60:E2:A3:A4:FA:B1:A2
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/wuv0_6DlHlqZM6LGb2Dio6T6saI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.83.0/24
                  194.156.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:d4:17:6f:90:d0:51:8f:b0:3d:c2:53:96:3c:97:b6:53:d8:
         c8:4b:2f:91:88:6e:5f:14:68:e4:ea:ef:7f:b4:ef:d9:6f:15:
         77:ec:ad:63:5c:45:78:62:31:83:87:ca:04:bf:12:ce:0f:8f:
         0b:c1:c5:c1:ad:40:bc:41:1f:6f:fd:e6:d0:62:c2:25:86:13:
         3f:ed:02:00:ff:d2:93:31:2b:3a:b3:ea:13:7f:09:cb:fa:e6:
         fe:4c:d4:f1:28:36:c3:c2:74:1f:cb:d5:f3:9b:81:f9:6c:80:
         8a:31:60:78:49:0f:b0:68:42:37:60:62:73:15:1f:04:ec:0a:
         ee:5f:0e:2b:37:44:c2:b0:85:bc:ce:46:a7:47:d0:b4:e0:5f:
         e8:a2:6e:4c:f7:a1:0a:45:f2:5f:97:36:de:94:a8:67:59:14:
         99:1b:a0:48:5c:45:3c:41:bd:e7:0e:35:48:21:27:5b:4b:d6:
         21:4c:3b:d9:0f:a0:d3:6b:22:b7:93:12:51:b4:7a:8d:91:81:
         a4:b8:97:dc:e0:7f:5e:36:59:db:0f:86:9c:ec:38:04:08:d7:
         af:35:92:0b:2e:63:79:d1:2e:37:10:bf:1d:7c:51:8b:78:f2:
         5b:c1:52:a1:ed:8e:bf:24:e0:4a:27:8d:5f:6d:27:4f:f7:85:
         f9:65:3f:79
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt5fjetkzsr825Y9LitKoJqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjYwMTAxMTIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmViZjRmZmEwZTUxZTVhOTkzM2EyYzY2ZjYwZTJhM2E0ZmFiMWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8eS+FJExL0wh7HExsbVwnmnVQdh
pt6skx0srIlDGUUiQpZezFGo9W11+S6hZpUFZOrJWaW+fWr6iSUk0HcGVukcTmaU
f+AQMEkkfuHSvOz2wYGg07VZtb72Cnk+ULCHG7lQRVI6flhzBARuA0m7RpanKFNs
m0vrspza53PZJdoFrJBRIGKocQW/7mPs+Z7BWzGQWinjvoqTIuM+R7TGsJw+WAN3
BZfbiI6+d3otcT6wHfNiW21BleeVzs1RMCrnK7wXljhu9QSxbsbCgTVcHZDDlGNr
iGSOGOpsu9Mdx8iYxMe6ysuJK+vhP8JHsNP+wP1ILzq7SHlPBB1LEQFtjQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMLr9P+g5R5amTOixm9g4qOk+rGiMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvd3V2MF82RGxIbHFaTTZMR2IyRGlvNlQ2c2FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAub5TAwQA
wpycMA0GCSqGSIb3DQEBCwUAA4IBAQCf1BdvkNBRj7A9wlOWPJe2U9jISy+RiG5f
FGjk6u9/tO/ZbxV37K1jXEV4YjGDh8oEvxLOD48LwcXBrUC8QR9v/ebQYsIlhhM/
7QIA/9KTMSs6s+oTfwnL+ub+TNTxKDbDwnQfy9Xzm4H5bICKMWB4SQ+waEI3YGJz
FR8E7AruXw4rN0TCsIW8zkanR9C04F/oom5M96EKRfJflzbelKhnWRSZG6BIXEU8
Qb3nDjVIISdbS9YhTDvZD6DTayK3kxJRtHqNkYGkuJfc4H9eNlnbD4ac7DgECNev
NZILLmN50S43EL8dfFGLePJbwVKh7Y6/JOBKJ41fbSdP94X5ZT95
-----END CERTIFICATE-----
Generated at Mon Jan 19 20:26:04 2026 by rpki-client