This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/WOvdhijn_s2DZtcctLEpLuIdUNw.roa
File:                     WOvdhijn_s2DZtcctLEpLuIdUNw.roa (raw, json)
Hash identifier:          Z7s2Qx4CcpmhX86cISi/NLHh5qOxWJPe6Z62x5xT1Q0=
Subject key identifier:   58:EB:DD:86:28:E7:FE:CD:83:66:D7:1C:B4:B1:29:2E:E2:1D:50:DC
Certificate issuer:       /CN=f15096fe3390449c936e857061d4a6965d408a31
Certificate serial:       019B7C7F03179D3FA6114450D65339794878
Authority key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/WOvdhijn_s2DZtcctLEpLuIdUNw.roa
Signing time:             Fri 02 Jan 2026 02:17:37 +0000
ROA not before:           Fri 02 Jan 2026 02:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197883
IP address blocks:        5.42.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:03:17:9d:3f:a6:11:44:50:d6:53:39:79:48:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15096fe3390449c936e857061d4a6965d408a31
        Validity
            Not Before: Jan  2 02:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=58ebdd8628e7fecd8366d71cb4b1292ee21d50dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ca:63:b8:47:88:c2:43:14:3e:a8:34:0c:08:
                    90:48:1d:a8:a9:a6:ba:e6:68:60:a3:c5:71:a0:2d:
                    ec:46:97:48:60:cb:2d:81:f4:7b:8f:d7:fa:4a:32:
                    e7:e1:6e:96:30:01:40:3b:28:a4:f2:64:dd:36:53:
                    52:46:f4:0b:da:1a:5f:37:18:70:02:98:30:fa:c0:
                    ab:ca:c5:cc:fe:22:0c:ba:41:db:30:57:5e:7e:0d:
                    ba:b0:c0:07:2f:6b:aa:c2:d0:95:08:03:c2:a8:2c:
                    d5:60:56:68:c5:14:15:ab:16:89:47:8f:4b:a0:b4:
                    ee:0c:f1:2e:93:54:72:be:dd:c8:3c:08:54:d6:46:
                    15:b6:00:7a:14:d1:32:96:7f:b9:f0:f4:39:49:fe:
                    ee:ac:cd:06:19:75:b9:54:04:23:c0:2c:cf:53:96:
                    63:a8:4d:91:31:52:1c:4f:9c:c3:87:cc:99:dd:29:
                    90:00:ce:69:42:00:d7:1d:97:2a:dd:9a:0d:2b:16:
                    8f:dc:d0:9b:08:58:26:82:66:f1:7c:ee:94:16:12:
                    87:3d:c8:31:1b:f8:30:5d:e3:e1:19:f2:10:e5:2a:
                    80:0d:c3:18:61:b7:be:07:30:a0:3c:c1:a1:90:f5:
                    2d:d5:38:b9:ef:6a:69:56:f4:d2:75:66:50:69:e1:
                    a2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EB:DD:86:28:E7:FE:CD:83:66:D7:1C:B4:B1:29:2E:E2:1D:50:DC
            X509v3 Authority Key Identifier:
                keyid:F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/WOvdhijn_s2DZtcctLEpLuIdUNw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.42.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:b3:c7:91:53:d6:af:88:e4:13:6f:2b:2e:22:54:ff:c7:83:
         b7:d7:63:2c:1b:a0:d4:61:dd:ed:27:27:e3:d1:46:b2:28:f7:
         8f:d3:74:98:ba:1a:2d:65:f8:78:9c:7f:4e:49:4b:e5:cf:0c:
         40:0c:21:63:e7:0a:b2:17:16:32:80:57:47:0d:8f:e9:21:71:
         8c:a8:f1:51:bc:bd:b4:dd:4f:ed:af:0b:32:50:14:0c:83:44:
         d4:03:7e:1d:2d:e1:0a:9c:43:d8:82:2a:6a:93:57:4d:0b:ab:
         6a:ae:61:c7:9c:2a:00:41:b5:83:6a:4e:dd:c5:ce:38:2b:ec:
         38:24:a6:77:1b:bc:cd:d0:f4:02:cf:0e:d0:dd:85:e4:49:40:
         67:bb:01:47:0d:49:ac:18:60:d7:7b:76:38:1a:c6:14:5b:d8:
         5b:13:65:c8:0b:25:94:42:2b:a8:49:8e:36:08:9b:19:84:27:
         52:a7:e7:b0:fa:b8:00:6e:a6:62:59:33:17:46:fd:e7:10:c6:
         45:a9:a5:20:74:bb:17:3d:34:af:fe:27:7e:90:36:a9:35:d9:
         81:48:6c:f8:a6:6f:0c:88:ea:49:9d:fc:82:2b:a6:df:fb:b1:
         d8:14:49:0b:f9:d1:13:e2:a3:29:64:d9:86:df:07:02:45:f9:
         14:3c:79:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:58 2026 by rpki-client