This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/uJACdV10EKYjDPAt6fI1jvPKsi0.roa
File:                     uJACdV10EKYjDPAt6fI1jvPKsi0.roa (raw, json)
Hash identifier:          SqSn3v0aLoH5HzHbohXSEzvqOPRzwdhqN+JqUGBBEF0=
Subject key identifier:   B8:90:02:75:5D:74:10:A6:23:0C:F0:2D:E9:F2:35:8E:F3:CA:B2:2D
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       019A883D6A1B05B7BDDDEE849036062155B2
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/uJACdV10EKYjDPAt6fI1jvPKsi0.roa
Signing time:             Sat 15 Nov 2025 15:58:37 +0000
ROA not before:           Sat 15 Nov 2025 15:58:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201160
IP address blocks:        194.62.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:88:3d:6a:1b:05:b7:bd:dd:ee:84:90:36:06:21:55:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Nov 15 15:58:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b89002755d7410a6230cf02de9f2358ef3cab22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:20:32:1e:69:52:c3:1c:ec:63:51:47:fd:f4:
                    f7:f6:80:52:5a:3d:f3:2b:1f:20:1a:bd:0d:88:1f:
                    5b:de:68:81:fb:2f:dd:18:b9:ff:e9:00:98:c2:d4:
                    30:c5:4c:ae:27:84:10:b0:57:92:e8:84:3d:b9:9d:
                    f1:67:6c:0e:72:53:7c:00:8d:de:ae:e3:8a:1b:90:
                    1f:91:c8:bc:bc:0f:97:19:b2:b0:da:a0:66:2d:3a:
                    23:f1:23:cd:9d:49:82:6c:d0:72:c2:a2:d7:14:cb:
                    a1:08:d5:a2:07:fe:58:3f:99:e3:8c:45:1a:31:73:
                    1e:da:c8:6c:0b:8b:88:b7:73:cf:7e:dd:b9:b2:77:
                    ee:ab:de:76:1a:c0:b6:73:18:d2:4b:7c:c5:e6:a3:
                    b3:4e:ea:15:45:f7:22:0c:59:f9:2d:c8:4e:d2:c5:
                    af:12:0c:ce:be:37:98:4a:56:5d:a3:42:66:4f:51:
                    9d:2e:f0:f6:5d:3e:c6:d1:62:03:1e:1b:b3:5e:fd:
                    e4:9d:74:b3:ff:1a:51:27:ed:9f:bb:79:01:cc:da:
                    dc:08:7e:0d:62:ac:92:9b:8b:cd:47:9a:9a:02:44:
                    8f:7b:6d:76:c7:cf:58:d1:97:35:b0:ca:d3:61:c5:
                    c8:5c:85:ac:71:b5:3b:1b:5e:e4:22:2f:df:fd:49:
                    f1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:90:02:75:5D:74:10:A6:23:0C:F0:2D:E9:F2:35:8E:F3:CA:B2:2D
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/uJACdV10EKYjDPAt6fI1jvPKsi0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:12:d2:2a:09:89:44:a9:05:44:b9:74:94:b0:be:ee:fe:94:
         99:5c:17:f5:c7:db:45:0a:bf:f8:86:52:32:92:b8:44:e8:5e:
         a8:6c:0b:e1:04:07:fa:ff:0b:89:4d:87:c6:60:9b:19:13:d1:
         14:88:d1:32:2f:a3:49:1c:72:df:e6:6a:a0:e7:8b:4d:74:77:
         54:22:51:66:f0:ed:b1:36:b0:ef:1f:34:48:5a:b5:03:d7:bd:
         46:69:6b:0b:30:4f:a7:44:26:d3:cb:4e:4c:10:cf:60:75:90:
         75:4a:3b:99:d6:27:8d:4b:21:2b:7f:a1:a7:63:80:18:3a:00:
         1d:3c:09:ad:76:55:cd:25:04:a5:fd:c0:cd:64:f9:6a:73:04:
         84:42:6e:16:01:b5:c0:db:28:9e:44:65:d7:4e:bc:14:35:2b:
         5b:03:09:ea:41:fd:3d:ab:38:86:7f:8c:55:a6:fd:2b:b9:53:
         ce:a3:a5:52:d8:f5:b4:f3:37:a8:c9:8d:9c:22:1d:94:40:85:
         d2:0b:10:eb:b5:58:0d:49:06:65:23:ea:a3:e2:70:b4:4f:48:
         49:91:4b:93:8a:41:97:ac:2c:ef:bc:03:d8:17:16:e5:0d:a8:
         25:79:b3:11:ba:80:4c:63:99:df:ae:8f:bb:44:41:bb:6a:f0:
         02:cd:71:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:18:28 2025 by rpki-client