This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/UEDe2YcCkK60qxLQ7EMjKMaLeVk.roa
File:                     UEDe2YcCkK60qxLQ7EMjKMaLeVk.roa (raw, json)
Hash identifier:          9ZEiLEpeNHQPSSjaHm5KtU2EfQDw++56segRjLKG218=
Subject key identifier:   50:40:DE:D9:87:02:90:AE:B4:AB:12:D0:EC:43:23:28:C6:8B:79:59
Certificate issuer:       /CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Certificate serial:       019B79112D0F47D919E2B1E9262DBD73FE86
Authority key identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/UEDe2YcCkK60qxLQ7EMjKMaLeVk.roa
Signing time:             Thu 01 Jan 2026 10:18:47 +0000
ROA not before:           Thu 01 Jan 2026 10:18:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202269
IP address blocks:        95.128.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:2d:0f:47:d9:19:e2:b1:e9:26:2d:bd:73:fe:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1695d5558241e04a872dc1346898f2cea70dfe7
        Validity
            Not Before: Jan  1 10:18:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5040ded9870290aeb4ab12d0ec432328c68b7959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:32:1e:08:2d:ef:1b:d3:54:c8:0c:9e:4e:9c:
                    79:45:18:73:90:5b:c4:3f:4d:1e:b8:f5:79:42:91:
                    58:2b:10:36:67:5e:28:67:3d:76:f8:f6:84:1e:b1:
                    79:b4:06:66:d5:32:e6:01:ac:0f:b9:3a:17:7b:b0:
                    25:6f:02:70:21:4d:c2:c0:ce:dc:57:4c:3c:c8:94:
                    4c:db:23:71:d4:c1:60:95:af:f0:67:e9:d8:c4:f2:
                    3d:ad:05:be:d8:04:fc:25:b8:79:c1:09:d1:f4:28:
                    e4:ea:d9:e3:a7:a6:24:24:2c:27:c3:c1:b0:3f:68:
                    1b:3d:20:7e:22:25:ee:77:40:33:34:f8:3d:25:01:
                    6d:97:27:ad:af:dc:a7:0f:39:ef:a7:38:cb:d8:be:
                    5c:81:2e:85:aa:e7:b7:84:53:95:bb:f2:d7:f8:6e:
                    9b:eb:8b:c7:d4:8b:6a:57:c3:80:88:50:0a:e7:5c:
                    ae:41:17:21:c9:36:8b:1e:88:cb:42:30:ef:42:87:
                    59:c2:8e:4a:ff:81:0a:03:f5:de:e5:2a:06:45:2f:
                    05:54:36:96:30:4a:a6:8c:a2:64:1a:4c:47:1b:72:
                    d6:a8:cb:ab:52:9a:e9:2e:45:e6:42:32:67:79:d9:
                    b5:19:02:bf:66:b5:2c:ab:74:70:bf:a5:13:0f:34:
                    47:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:40:DE:D9:87:02:90:AE:B4:AB:12:D0:EC:43:23:28:C6:8B:79:59
            X509v3 Authority Key Identifier:
                keyid:A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/UEDe2YcCkK60qxLQ7EMjKMaLeVk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.128.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:50:dd:92:c2:fa:ab:67:fb:d2:73:9e:6c:ae:fa:0f:33:5c:
         48:95:bf:bc:c7:3d:8d:cc:d9:17:5f:3e:fa:55:01:9c:0e:5c:
         b8:16:a6:30:52:8b:30:9f:2a:c0:57:f4:62:97:2e:d2:ee:6d:
         a6:e5:eb:5b:e2:0b:bd:28:3e:4e:bc:f5:fc:aa:d3:be:48:2b:
         88:95:51:47:24:11:71:91:9b:11:9d:cf:e4:f1:5d:e1:ba:04:
         12:9d:2e:40:7d:43:21:d7:13:2e:24:04:d8:fd:f6:c7:6e:d7:
         52:e0:d1:aa:43:fe:91:74:2e:a7:b3:17:cf:a3:64:94:6a:bc:
         b6:4a:76:7e:e1:6f:ac:ae:50:59:a3:fd:7c:9a:34:7b:70:6e:
         75:13:73:e1:10:b0:a3:eb:38:aa:d8:e7:82:22:86:a7:8c:76:
         99:8f:f2:e2:d1:98:04:64:9f:bf:f9:65:7b:24:09:7b:61:50:
         18:76:af:7a:a6:38:47:32:9c:73:fe:48:07:c0:30:53:c1:ec:
         d2:85:65:03:b9:17:38:23:8f:96:68:a6:23:29:f5:d5:93:23:
         5d:e6:74:90:32:b9:a3:3f:6f:5b:c3:87:ec:c3:bd:3b:ea:c6:
         3a:9a:df:e1:11:0e:1a:24:83:50:0e:f6:d5:de:2b:66:36:27:
         9e:15:4a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:52:53 2026 by rpki-client