This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/Wv-19NnCsrhZrwnSI2oU6lLrFv4.roa
File:                     Wv-19NnCsrhZrwnSI2oU6lLrFv4.roa (raw, json)
Hash identifier:          QUllUIUWzb1bn3tS38z/e3aKNKTT0J3rQMusPQtlNMo=
Subject key identifier:   5A:FF:B5:F4:D9:C2:B2:B8:59:AF:09:D2:23:6A:14:EA:52:EB:16:FE
Certificate issuer:       /CN=a0272902658e15cb34bd509c3950bade21a796d2
Certificate serial:       019B775956985CB5FEDF142C0AFF99861234
Authority key identifier: A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/Wv-19NnCsrhZrwnSI2oU6lLrFv4.roa
Signing time:             Thu 01 Jan 2026 02:18:22 +0000
ROA not before:           Thu 01 Jan 2026 02:18:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209382
IP address blocks:        45.67.236.0/22 maxlen: 24
                          2a09:7d40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:56:98:5c:b5:fe:df:14:2c:0a:ff:99:86:12:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0272902658e15cb34bd509c3950bade21a796d2
        Validity
            Not Before: Jan  1 02:18:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5affb5f4d9c2b2b859af09d2236a14ea52eb16fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b5:65:a5:f9:8a:8b:ec:6f:27:53:88:be:4b:
                    8a:3a:07:2e:8a:b9:82:5c:96:fa:3d:96:df:c4:b8:
                    97:1c:7d:a3:31:a3:4f:8d:94:9c:25:a6:c9:eb:5f:
                    d6:d1:2b:a1:20:2e:a4:24:e1:b6:22:d5:5f:be:96:
                    65:ff:7b:e8:0f:e8:61:23:6f:e5:69:5e:8d:d4:9e:
                    a5:c4:0f:2d:89:9c:1d:8c:29:93:d7:82:18:aa:3c:
                    16:59:a3:79:2c:ed:31:3d:00:d8:d3:f8:32:26:9e:
                    75:1f:3b:bb:b2:bd:db:1d:4b:32:8c:fc:a9:d2:26:
                    d4:e4:26:11:c6:56:46:5b:95:d8:87:f7:ea:df:69:
                    2f:1e:ad:1c:e5:9a:77:be:7c:38:bd:d9:e2:58:97:
                    71:85:82:70:26:75:39:4c:2c:23:9e:22:a5:67:1b:
                    63:da:34:97:d2:04:0f:a1:29:0d:84:f2:b7:8e:54:
                    ad:77:85:37:b7:d9:00:8f:06:e7:a9:de:0b:6c:33:
                    65:62:26:95:f6:dc:70:45:37:ea:89:a4:a6:86:6f:
                    b9:0a:24:02:30:92:15:d5:da:66:1a:f2:e4:4f:fb:
                    8d:17:d2:aa:0e:02:57:43:9a:0f:ee:65:13:25:16:
                    c0:23:74:1f:ad:79:72:fc:c6:96:d7:b8:7a:59:21:
                    ff:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FF:B5:F4:D9:C2:B2:B8:59:AF:09:D2:23:6A:14:EA:52:EB:16:FE
            X509v3 Authority Key Identifier:
                keyid:A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/Wv-19NnCsrhZrwnSI2oU6lLrFv4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.236.0/22
                IPv6:
                  2a09:7d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:c6:9c:d8:9b:6d:bb:66:49:0d:a4:2f:df:54:1e:f3:fd:4b:
         f1:cf:2d:c9:3d:0a:da:a5:6e:1f:94:1a:3e:ed:ab:b0:30:18:
         2a:fb:0c:a1:4e:3a:18:14:f8:47:ef:44:0d:ee:11:7f:d6:ac:
         dc:7c:9b:c1:88:e7:f7:51:ad:c3:9a:49:4a:34:10:08:4d:28:
         88:2f:35:41:49:37:37:6e:69:2f:76:02:ff:31:bc:1d:e7:aa:
         30:25:46:42:b0:78:22:67:51:3c:cb:d5:8d:70:71:ab:0b:a5:
         24:4f:ef:3f:8e:1d:73:82:ec:81:21:16:e2:ea:22:c8:e4:09:
         b7:7a:fa:c9:14:15:54:72:a4:ae:42:07:0e:cb:6e:1a:c1:2a:
         a9:1d:9f:0e:75:6e:93:3b:da:3e:2c:b2:05:b5:52:f2:62:65:
         f4:ff:11:0d:2c:51:96:ca:85:1a:3d:1e:8c:f9:08:c1:b7:0e:
         c6:2a:2c:d2:7e:59:81:88:90:92:01:2e:e7:5a:42:d7:49:46:
         9e:33:5b:37:33:a6:60:a9:f5:59:67:fe:ca:9c:3e:fb:f2:b2:
         1c:2d:06:d4:d0:a2:af:0e:c9:c3:b3:ea:1c:00:b1:4b:8d:5c:
         f8:2f:77:f7:64:f1:39:94:99:18:0b:82:cc:de:ce:45:40:85:
         00:b4:12:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:23 2026 by rpki-client