This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/WVGS-uOqCUSz2p_N5CL2Cz4z-K0.roa
File:                     WVGS-uOqCUSz2p_N5CL2Cz4z-K0.roa (raw, json)
Hash identifier:          IB5UKLk0ZZT7DbiIeOg9ZlXwRRXDT147MF0fykJ8TKI=
Subject key identifier:   59:51:92:FA:E3:AA:09:44:B3:DA:9F:CD:E4:22:F6:0B:3E:33:F8:AD
Certificate issuer:       /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial:       019B7F14C761F6223EE4B10B5CEB1CFFBFCA
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/WVGS-uOqCUSz2p_N5CL2Cz4z-K0.roa
Signing time:             Fri 02 Jan 2026 14:20:26 +0000
ROA not before:           Fri 02 Jan 2026 14:20:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59796
IP address blocks:        185.217.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:c7:61:f6:22:3e:e4:b1:0b:5c:eb:1c:ff:bf:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
        Validity
            Not Before: Jan  2 14:20:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=595192fae3aa0944b3da9fcde422f60b3e33f8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:5b:35:ab:10:d0:fe:73:6d:7f:d6:dd:f9:
                    ff:13:45:d6:57:c0:c3:30:68:97:1e:bc:b3:94:c7:
                    18:34:ca:e3:05:10:b4:8f:7f:71:8e:8a:17:ce:d1:
                    02:31:35:ae:e2:00:b9:82:bc:d9:05:2f:cf:c3:74:
                    40:22:6e:89:a9:dc:b7:db:f8:d4:9c:83:30:0e:28:
                    9f:c8:e3:63:c0:4a:89:95:32:6b:5a:e3:aa:2c:f2:
                    60:c4:a6:95:72:e2:8a:62:c9:1a:81:c3:af:f3:14:
                    01:85:2b:77:6b:5c:0f:6c:2a:23:b6:c6:b6:87:78:
                    57:63:66:cf:9f:2f:5f:60:81:7c:e3:0f:0e:ac:5e:
                    11:2c:86:63:84:d7:38:df:f6:b8:7b:97:ed:5f:2f:
                    c2:a0:63:df:17:67:47:e2:f6:70:61:06:ff:4e:55:
                    21:e2:c6:62:a8:27:75:67:ee:df:e5:d5:f7:52:0e:
                    2a:9a:dc:e8:9e:c5:97:c4:b4:6c:f2:9b:68:98:ca:
                    90:cc:08:d3:41:0e:f3:ef:cb:7d:6a:f3:de:d8:d1:
                    04:d4:ed:02:ac:d3:61:e3:ea:0b:db:26:05:6b:59:
                    dc:57:16:15:88:dc:33:e8:e5:42:27:3f:68:ab:b0:
                    2c:fa:cb:00:20:9a:2c:6c:65:75:e9:0a:04:dc:76:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:51:92:FA:E3:AA:09:44:B3:DA:9F:CD:E4:22:F6:0B:3E:33:F8:AD
            X509v3 Authority Key Identifier:
                keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/WVGS-uOqCUSz2p_N5CL2Cz4z-K0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.217.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:20:af:66:11:2b:a7:e8:7a:fa:32:cb:4d:e7:87:09:d4:16:
         b1:50:5d:de:e5:f5:96:e6:92:23:d4:a9:07:e1:fe:4c:b1:0d:
         58:0d:84:4d:4a:b8:9f:5d:f4:6a:0f:f1:b7:41:1e:cf:27:3e:
         ff:2b:2f:4a:3e:4e:9b:33:02:39:cf:c5:72:48:1b:92:34:61:
         19:0b:e4:44:93:13:5c:04:0a:e5:c4:6f:f0:87:b1:89:59:93:
         94:51:ea:32:fc:25:1a:06:46:f7:90:10:7c:c1:ac:9d:63:e3:
         7e:c6:fd:9b:f3:d9:5c:9b:ff:df:de:30:6c:72:fd:57:1c:b8:
         2d:b5:b4:54:1d:e5:0b:4a:48:21:24:df:ad:81:a2:e4:e8:a1:
         3c:64:bb:a6:77:9e:ef:4c:45:03:73:29:47:d4:47:10:14:da:
         93:2f:12:2b:94:30:d6:19:ef:a6:1a:c1:53:5e:00:09:0c:b4:
         e5:99:52:73:82:e7:ac:0b:0e:8c:32:27:bf:1f:98:62:c6:f8:
         2d:bd:58:d9:db:03:fb:a6:b0:eb:71:a6:29:ba:4e:5f:f0:24:
         dc:9d:8a:ee:1f:6c:64:97:35:eb:1b:e6:02:b8:91:21:7e:9c:
         b8:d1:a8:d7:1a:28:ae:fa:7a:0d:88:44:21:7f:83:b2:03:85:
         94:25:bc:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FMdh9iI+5LELXOsc/7/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYjY1YTkwZWQzY2Y0YWUwNDUyNTU0ZWUzNGI5MmE4NDc2
ZGNmMTAwHhcNMjYwMTAyMTQyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTUxOTJmYWUzYWEwOTQ0YjNkYTlmY2RlNDIyZjYwYjNlMzNmOGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJBbNasQ0P5zbX/W3fn/E0XWV8DD
MGiXHryzlMcYNMrjBRC0j39xjooXztECMTWu4gC5grzZBS/Pw3RAIm6Jqdy32/jU
nIMwDiifyONjwEqJlTJrWuOqLPJgxKaVcuKKYskagcOv8xQBhSt3a1wPbCojtsa2
h3hXY2bPny9fYIF84w8OrF4RLIZjhNc43/a4e5ftXy/CoGPfF2dH4vZwYQb/TlUh
4sZiqCd1Z+7f5dX3Ug4qmtzonsWXxLRs8ptomMqQzAjTQQ7z78t9avPe2NEE1O0C
rNNh4+oL2yYFa1ncVxYViNwz6OVCJz9oq7As+ssAIJosbGV16QoE3HbUTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFlRkvrjqglEs9qfzeQi9gs+M/itMB8GA1UdIwQY
MBaAFNy2WpDtPPSuBFJVTuNLkqhHbc8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEt
ODVhOTU1ZjIxNjNiLzEvV1ZHUy11T3FDVVN6MnBfTjVDTDJDejR6LUswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEtODVhOTU1ZjIxNjNi
LzEvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudlaMA0G
CSqGSIb3DQEBCwUAA4IBAQDAIK9mESun6Hr6MstN54cJ1BaxUF3e5fWW5pIj1KkH
4f5MsQ1YDYRNSrifXfRqD/G3QR7PJz7/Ky9KPk6bMwI5z8VySBuSNGEZC+REkxNc
BArlxG/wh7GJWZOUUeoy/CUaBkb3kBB8waydY+N+xv2b89lcm//f3jBscv1XHLgt
tbRUHeULSkghJN+tgaLk6KE8ZLumd57vTEUDcylH1EcQFNqTLxIrlDDWGe+mGsFT
XgAJDLTlmVJzguesCw6MMie/H5hixvgtvVjZ2wP7prDrcaYpuk5f8CTcnYruH2xk
lzXrG+YCuJEhfpy40ajXGiiu+noNiEQhf4OyA4WUJbwT
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:13:30 2026 by rpki-client