This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/Wapc6Zx4OMN_VO0S67d5ibZ5710.roa
File:                     Wapc6Zx4OMN_VO0S67d5ibZ5710.roa (raw, json)
Hash identifier:          Y3NNed793NnfHappH6bAqpYLngigkEFCr29UQdBuPQM=
Subject key identifier:   59:AA:5C:E9:9C:78:38:C3:7F:54:ED:12:EB:B7:79:89:B6:79:EF:5D
Certificate issuer:       /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial:       019B7F831AE310A533983204367EBDFC378B
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/Wapc6Zx4OMN_VO0S67d5ibZ5710.roa
Signing time:             Fri 02 Jan 2026 16:20:57 +0000
ROA not before:           Fri 02 Jan 2026 16:20:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28878
IP address blocks:        193.177.160.0/23 maxlen: 23
                          194.53.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:1a:e3:10:a5:33:98:32:04:36:7e:bd:fc:37:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
        Validity
            Not Before: Jan  2 16:20:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=59aa5ce99c7838c37f54ed12ebb77989b679ef5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:41:7d:48:1c:b7:39:e6:04:35:2d:a1:d3:aa:
                    60:99:9c:11:7a:47:ec:35:2c:79:b4:47:c2:02:5d:
                    9b:c9:d0:e1:d0:ba:40:d5:98:87:5a:5f:ec:d1:ed:
                    38:8c:80:8c:d9:05:33:44:f1:80:3f:2a:2c:69:76:
                    54:9e:7b:c3:7b:48:71:89:c4:50:f6:b3:3a:39:d5:
                    33:fa:20:4d:9f:2b:52:d6:a0:64:d8:81:11:8a:18:
                    be:3f:ab:9e:54:c0:1d:b1:7c:a6:f7:92:23:e2:fa:
                    99:50:06:a4:29:4d:85:35:7e:a5:33:65:0f:45:63:
                    36:08:2e:55:b0:6d:ae:0f:3d:e8:d1:f5:40:6e:ea:
                    9b:ff:05:1f:c5:a0:22:27:94:e9:69:c0:29:2a:44:
                    1e:2d:64:be:15:80:69:b6:7d:6d:3c:b7:4e:d2:58:
                    ce:cf:b8:99:07:58:0f:b1:84:0d:7b:42:67:1c:8c:
                    e6:d7:ad:c2:7d:49:c3:b0:14:42:1e:90:db:4b:01:
                    51:1e:34:9d:5d:31:94:6b:37:1f:9d:e8:36:74:40:
                    24:df:e4:db:a7:81:73:b5:af:84:fd:d9:19:53:50:
                    22:ca:fa:ae:03:b9:51:32:12:57:fc:d6:5a:a0:6f:
                    ac:ec:75:f9:c0:bf:9e:79:e2:55:ca:19:be:86:de:
                    11:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AA:5C:E9:9C:78:38:C3:7F:54:ED:12:EB:B7:79:89:B6:79:EF:5D
            X509v3 Authority Key Identifier:
                keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/Wapc6Zx4OMN_VO0S67d5ibZ5710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.177.160.0/23
                  194.53.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:18:b0:b2:00:03:b0:e8:6c:69:44:55:3c:b5:40:71:af:f2:
         ee:45:89:05:04:2f:85:64:04:22:fe:7c:35:7d:65:ee:a6:02:
         dd:6d:40:b5:97:de:59:71:38:b2:77:cb:f2:46:b3:7e:c3:c7:
         39:87:c7:51:04:d0:ff:02:ae:4b:9d:31:69:fd:a8:be:cf:99:
         77:f8:d7:35:9c:ac:f9:16:e8:8c:4f:00:8c:ce:70:d3:e2:d2:
         29:74:25:9a:1b:80:14:4c:40:31:13:3f:c7:1e:ee:9a:7c:13:
         c3:62:8f:2f:34:aa:b0:66:09:ee:16:ac:44:e9:78:08:11:6c:
         d4:f2:48:6e:bf:8f:b7:01:b7:67:7d:20:52:f1:9e:db:e1:9e:
         ab:b3:c6:88:15:15:9b:f8:40:14:4c:80:3c:51:54:06:66:8e:
         1f:8d:9f:24:f2:99:b4:7f:17:88:62:fd:4b:1f:49:fb:d0:9e:
         28:6e:b2:c6:85:4d:ae:c7:92:10:f0:f1:01:1b:45:ec:35:18:
         aa:bc:d3:27:f6:21:1a:0b:d2:2c:25:95:db:2f:b5:55:08:ed:
         77:23:85:7d:c3:fd:64:10:22:2d:94:0d:45:20:c7:46:a6:ea:
         ac:dc:7b:b3:90:13:28:a3:ea:34:db:be:d6:68:9a:0b:37:a1:
         08:8c:f4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:36:18 2026 by rpki-client