This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/WusVN-lv9eIqEK24QBuEhLvjP8M.roa
File:                     WusVN-lv9eIqEK24QBuEhLvjP8M.roa (raw, json)
Hash identifier:          gizA/6rF1Z6npTsPwp0Ou8td/qyEUaqKD568ryLOGS8=
Subject key identifier:   5A:EB:15:37:E9:6F:F5:E2:2A:10:AD:B8:40:1B:84:84:BB:E3:3F:C3
Certificate issuer:       /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial:       019B7F14C29A41B36D3431D39BFEBA1DC501
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/WusVN-lv9eIqEK24QBuEhLvjP8M.roa
Signing time:             Fri 02 Jan 2026 14:20:25 +0000
ROA not before:           Fri 02 Jan 2026 14:20:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208915
IP address blocks:        194.231.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:c2:9a:41:b3:6d:34:31:d3:9b:fe:ba:1d:c5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
        Validity
            Not Before: Jan  2 14:20:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5aeb1537e96ff5e22a10adb8401b8484bbe33fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ac:88:3f:a5:7d:1e:94:3b:c5:fd:b8:77:14:
                    b9:cd:9a:25:fc:00:4b:ce:7b:b9:5f:84:32:ec:e4:
                    c1:6b:3b:60:3e:08:14:5c:7d:6b:c7:cc:43:81:5f:
                    eb:0d:f2:62:45:29:dc:44:bb:c6:d6:29:60:fa:f1:
                    31:d3:d4:4c:90:a7:41:5d:61:da:15:3c:00:f9:00:
                    f8:e0:da:be:84:85:01:bf:91:4c:d9:a7:4d:5b:07:
                    4b:f1:3e:1f:7d:8f:2f:1c:2a:db:59:f3:34:07:37:
                    6d:d8:1c:69:32:07:d2:48:b7:e2:18:55:7b:6d:d6:
                    5e:28:53:c1:7b:ac:e4:56:8a:91:49:1d:bd:fe:7a:
                    68:22:8b:37:e6:1e:a2:49:09:2c:72:ae:e1:e5:e2:
                    ed:aa:a5:f4:39:f6:c9:bb:a1:37:c9:77:c7:73:d2:
                    aa:f6:ea:29:1b:26:a4:ce:26:96:6d:c9:cf:99:53:
                    78:a0:eb:6c:2e:1e:4f:bb:34:93:99:34:a8:ab:4a:
                    3a:2b:cb:ad:43:bf:f9:75:65:ce:bc:4d:26:0c:95:
                    39:10:5b:30:17:f7:70:09:b8:d4:b0:b4:12:c0:ad:
                    78:af:3f:6d:78:a2:2e:3d:82:b9:7f:68:a0:58:e3:
                    ed:54:00:36:f1:32:dc:e9:e5:18:6d:97:3c:76:93:
                    88:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EB:15:37:E9:6F:F5:E2:2A:10:AD:B8:40:1B:84:84:BB:E3:3F:C3
            X509v3 Authority Key Identifier:
                keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/WusVN-lv9eIqEK24QBuEhLvjP8M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.231.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:ad:6f:bf:5c:a4:66:83:b4:23:1f:73:41:6b:7d:47:aa:7f:
         ca:c7:c2:1b:d7:b1:5a:79:1a:13:da:65:32:91:21:74:2d:fd:
         f2:92:86:45:ec:6d:44:42:11:0a:cf:d9:8e:df:9f:87:39:6e:
         d8:0e:dd:1a:2c:3c:b7:b6:06:2e:a5:d5:2e:b9:ba:55:56:f0:
         8a:69:ed:15:fb:82:ba:4e:2d:51:e2:b2:fd:d7:85:47:7d:c2:
         80:f1:5c:ad:9c:bf:ca:05:d8:be:50:79:6b:77:87:09:54:1a:
         df:8f:21:ec:f9:b5:b6:f1:d4:b6:64:26:3f:5c:1b:2c:67:93:
         ef:6e:69:70:96:a6:e7:c1:c9:6f:04:bc:dc:94:b8:af:52:fa:
         7f:e9:2f:bd:ad:62:1c:a9:66:d6:48:d1:c5:a4:a8:88:9d:b4:
         e2:a2:3f:6e:e3:dd:97:a4:7c:25:db:2a:0f:b9:cb:a0:a3:9e:
         dd:77:25:07:87:ee:4c:9c:3b:1b:c1:69:c3:46:88:59:7e:5f:
         59:ad:4d:ba:38:69:8b:bd:a8:d9:46:f7:4f:2d:e3:7c:86:13:
         73:f6:23:1a:dc:58:07:55:04:0d:e9:78:58:9c:40:7a:5c:e5:
         e8:63:39:6a:d2:45:a9:a4:76:a3:86:ba:1c:d9:bf:f1:31:a4:
         3c:6f:c3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:13:50 2026 by rpki-client