This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/UBa5jx_ljBddT4tcu2z4LiFhOrk.roa
File:                     UBa5jx_ljBddT4tcu2z4LiFhOrk.roa (raw, json)
Hash identifier:          zIhepUpUWuaAk7nANePm+39a2QbrU+z3WqdtyUCFmrk=
Subject key identifier:   50:16:B9:8F:1F:E5:8C:17:5D:4F:8B:5C:BB:6C:F8:2E:21:61:3A:B9
Certificate issuer:       /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial:       019B790FF80701106DC2278563A0D3E636C3
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/UBa5jx_ljBddT4tcu2z4LiFhOrk.roa
Signing time:             Thu 01 Jan 2026 10:17:28 +0000
ROA not before:           Thu 01 Jan 2026 10:17:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201518
IP address blocks:        46.21.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:0f:f8:07:01:10:6d:c2:27:85:63:a0:d3:e6:36:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
        Validity
            Not Before: Jan  1 10:17:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5016b98f1fe58c175d4f8b5cbb6cf82e21613ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:63:10:47:fc:cb:39:5d:ef:dc:40:28:3a:2d:
                    07:0e:a0:72:28:27:26:d4:f0:90:2c:35:7f:2d:eb:
                    62:4f:06:86:b6:31:0e:9a:d1:a8:f7:a5:72:3b:01:
                    8b:cf:47:1b:4f:73:b7:7a:84:bc:c0:bc:b0:8d:8e:
                    a7:15:7f:78:17:9b:72:4f:6e:b5:5c:d1:0d:76:26:
                    16:2d:69:2d:b8:0c:f2:fe:e0:21:c5:9d:05:84:9f:
                    20:fd:dd:b0:65:56:70:f2:40:91:be:15:9a:38:a1:
                    7e:75:54:17:af:98:d6:38:bf:dc:ca:6d:1a:41:ef:
                    10:91:d7:43:25:1f:e8:f7:dc:41:06:32:1a:8b:34:
                    b5:f7:a4:b4:06:9f:3f:32:0b:7c:35:48:4d:b8:cd:
                    39:16:ce:dd:47:86:89:75:e1:0d:76:c3:3f:e5:96:
                    9f:87:79:d0:3d:eb:bc:b8:44:e9:2f:ab:a3:41:5f:
                    15:4c:b1:3a:95:ba:c2:64:1b:87:1e:9d:31:e4:42:
                    e2:47:7a:05:de:44:25:bb:ea:f6:9a:22:d5:35:4b:
                    fe:39:8c:e4:31:1a:d7:19:1b:66:f2:10:bb:95:8e:
                    79:a0:08:3d:fe:2d:19:dc:7c:08:b4:7e:ca:53:3f:
                    09:04:1a:eb:0c:5a:22:27:c4:fe:4c:5c:da:66:ab:
                    c8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:16:B9:8F:1F:E5:8C:17:5D:4F:8B:5C:BB:6C:F8:2E:21:61:3A:B9
            X509v3 Authority Key Identifier:
                keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/UBa5jx_ljBddT4tcu2z4LiFhOrk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.21.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:49:9b:04:4f:f7:56:78:d1:80:7b:22:71:d3:31:91:c1:72:
         5f:e4:ca:ec:24:d4:f1:54:a3:56:c8:de:b8:2c:e6:44:71:5f:
         74:f5:74:42:f9:d6:1f:74:e0:a4:7f:da:dc:7a:3c:6d:d9:f3:
         4e:1d:4c:c3:5b:ee:42:89:bf:29:f4:9c:ac:db:b8:21:50:a3:
         10:d3:fd:c4:a6:53:5c:a0:43:68:61:0d:d8:13:e4:41:60:8c:
         c3:84:b8:64:d8:63:d2:db:8e:8e:54:4e:96:28:ef:f2:fa:07:
         4d:30:c1:eb:8a:4a:25:d1:34:21:92:bc:d7:f4:97:c5:22:2a:
         fb:ba:f2:25:3a:54:f8:1f:99:0d:71:ef:b1:14:5a:e5:17:22:
         d6:cf:b4:cc:15:bd:7f:0c:4c:2e:0c:e2:10:f7:74:57:32:29:
         36:86:18:b5:97:f4:48:78:d0:ef:09:86:46:24:22:72:81:62:
         1c:03:47:b2:8e:fd:5b:2f:01:01:11:b4:38:55:9f:4b:1a:24:
         dc:19:57:7b:88:44:83:82:9c:80:29:ed:47:a5:ee:5e:48:02:
         95:9c:1d:c6:a7:78:9f:32:35:8e:7f:70:41:38:b5:a8:12:8c:
         df:83:e4:f1:5e:d4:9d:58:1e:1e:6b:d0:14:4b:45:b1:6e:fa:
         45:49:31:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:40:22 2026 by rpki-client