This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_ucYlKcSV9u4dKTixz5tuwFZdbs.roa
File:                     _ucYlKcSV9u4dKTixz5tuwFZdbs.roa (raw, json)
Hash identifier:          MihutH8dIC7eqe5OKGCAT1jtLG34edPGvZzCl++Gy0A=
Subject key identifier:   FE:E7:18:94:A7:12:57:DB:B8:74:A4:E2:C7:3E:6D:BB:01:59:75:BB
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       019A9D4ECAC094DF1662AE1ED8896BC649FF
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_ucYlKcSV9u4dKTixz5tuwFZdbs.roa
Signing time:             Wed 19 Nov 2025 18:09:37 +0000
ROA not before:           Wed 19 Nov 2025 18:09:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201813
IP address blocks:        45.67.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:9d:4e:ca:c0:94:df:16:62:ae:1e:d8:89:6b:c6:49:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Nov 19 18:09:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fee71894a71257dbb874a4e2c73e6dbb015975bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e9:3c:d2:b5:7d:34:3e:fd:1f:a6:98:61:ac:
                    38:65:d8:8b:ef:72:ab:fb:13:10:cd:1e:24:8f:25:
                    95:78:c0:83:93:d0:b3:db:1b:20:87:99:b9:c4:e8:
                    a3:2c:7f:7a:3c:1c:5c:a2:32:b2:c5:d5:6d:d4:7b:
                    95:59:4a:a9:dd:b1:82:db:21:dd:5e:16:e4:f2:f4:
                    d0:54:7b:27:59:00:09:ca:f8:91:c8:f9:49:9b:a6:
                    ba:bc:03:fd:c8:ee:db:a9:d4:af:4a:70:34:b1:94:
                    59:e4:fb:cc:0a:a1:01:f2:ed:5a:93:0e:9a:08:dc:
                    ef:72:fe:ea:d5:91:e1:49:1d:c6:ce:25:e7:1c:42:
                    ee:12:12:f7:15:99:9b:c1:e5:c6:c2:73:aa:55:3d:
                    9b:9f:e3:25:92:96:f0:c1:96:e3:e7:21:69:ef:c0:
                    1b:f3:4c:66:e4:5d:bb:d1:4c:e8:da:a0:a8:8a:92:
                    4e:9f:d7:fe:e1:93:9d:e7:9e:d2:32:5e:16:2a:f9:
                    6c:74:9c:b0:0c:4d:2c:03:5f:a9:41:1e:7c:85:f5:
                    70:8f:0f:11:41:ca:6a:2c:45:a8:80:7a:5c:1e:0d:
                    36:72:51:a5:ac:50:19:16:b9:01:d5:96:06:61:34:
                    0e:e8:dc:b2:7e:bd:3d:8d:44:86:f9:b0:03:5d:08:
                    0e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E7:18:94:A7:12:57:DB:B8:74:A4:E2:C7:3E:6D:BB:01:59:75:BB
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_ucYlKcSV9u4dKTixz5tuwFZdbs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:af:e8:8b:46:bb:48:20:a8:90:05:a4:1d:8d:99:7b:8f:89:
         fb:db:2d:86:b4:16:70:62:0e:85:76:22:27:eb:21:66:01:71:
         43:de:d8:16:8f:d0:e8:27:71:11:0a:5f:ca:81:9f:9d:e0:b8:
         ad:46:de:8f:51:70:90:07:c4:ac:55:df:bf:1d:e9:8d:d1:71:
         37:af:8b:b1:90:56:0b:f8:68:05:7d:fb:bc:bb:83:fa:0c:50:
         78:5c:f8:b8:3e:72:7a:27:0d:a0:1b:c4:09:25:60:65:2a:cc:
         28:d5:68:1c:a0:3a:1b:7d:c8:5c:19:d1:71:21:1d:75:c6:00:
         1e:39:62:3a:13:76:4d:fc:7e:6c:45:a2:72:7e:b6:a5:8d:a0:
         eb:46:2d:df:88:63:ae:97:bd:7f:d7:93:bd:46:cc:a0:22:12:
         9b:3b:04:32:11:db:a4:19:10:35:7f:2a:57:cc:a2:75:b4:e0:
         15:5f:43:4d:9f:d6:c4:2e:06:41:90:95:69:d1:de:44:c2:88:
         00:28:87:75:19:d1:2b:ac:75:00:89:42:79:d7:85:08:43:94:
         8a:6b:5e:a4:25:82:cf:01:38:e0:7f:a7:9a:6e:7a:73:e2:d5:
         4f:e5:bf:57:2c:16:0d:35:af:0a:6f:23:71:84:df:5e:d9:c1:
         68:d2:de:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZqdTsrAlN8WYq4e2Ilrxkn/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjUxMTE5MTgwOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWU3MTg5NGE3MTI1N2RiYjg3NGE0ZTJjNzNlNmRiYjAxNTk3NWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+k80rV9ND79H6aYYaw4ZdiL73Kr
+xMQzR4kjyWVeMCDk9Cz2xsgh5m5xOijLH96PBxcojKyxdVt1HuVWUqp3bGC2yHd
Xhbk8vTQVHsnWQAJyviRyPlJm6a6vAP9yO7bqdSvSnA0sZRZ5PvMCqEB8u1akw6a
CNzvcv7q1ZHhSR3GziXnHELuEhL3FZmbweXGwnOqVT2bn+MlkpbwwZbj5yFp78Ab
80xm5F270Uzo2qCoipJOn9f+4ZOd557SMl4WKvlsdJywDE0sA1+pQR58hfVwjw8R
QcpqLEWogHpcHg02clGlrFAZFrkB1ZYGYTQO6Nyyfr09jUSG+bADXQgOcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP7nGJSnElfbuHSk4sc+bbsBWXW7MB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvX3VjWWxLY1NWOXU0ZEtUaXh6NXR1d0ZaZGJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLUPEMA0G
CSqGSIb3DQEBCwUAA4IBAQBEr+iLRrtIIKiQBaQdjZl7j4n72y2GtBZwYg6FdiIn
6yFmAXFD3tgWj9DoJ3ERCl/KgZ+d4LitRt6PUXCQB8SsVd+/HemN0XE3r4uxkFYL
+GgFffu8u4P6DFB4XPi4PnJ6Jw2gG8QJJWBlKswo1WgcoDobfchcGdFxIR11xgAe
OWI6E3ZN/H5sRaJyfraljaDrRi3fiGOul71/15O9RsygIhKbOwQyEdukGRA1fypX
zKJ1tOAVX0NNn9bELgZBkJVp0d5EwogAKId1GdErrHUAiUJ514UIQ5SKa16kJYLP
ATjgf6eabnpz4tVP5b9XLBYNNa8KbyNxhN9e2cFo0t74
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:54:56 2025 by rpki-client