This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa
File:                     uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa (raw, json)
Hash identifier:          039KJGIrepNrUhPHQkdyjtfEPU4TOfPGiPFKu2opKXQ=
Subject key identifier:   BB:15:E9:5C:12:7E:0F:8D:A9:E9:4F:69:D1:AD:07:3D:F7:15:B4:27
Certificate issuer:       /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial:       019B7D5B26BBEC08123F124F4460D2DE09ED
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa
Signing time:             Fri 02 Jan 2026 06:18:04 +0000
ROA not before:           Fri 02 Jan 2026 06:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49228
IP address blocks:        45.94.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:26:bb:ec:08:12:3f:12:4f:44:60:d2:de:09:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
        Validity
            Not Before: Jan  2 06:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bb15e95c127e0f8da9e94f69d1ad073df715b427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4d:f8:96:90:49:fb:e8:e8:b4:a3:9a:20:6a:
                    51:86:86:7c:9e:34:77:86:88:a9:6a:0e:aa:25:db:
                    97:b9:98:a4:5f:e2:4d:30:2c:a1:0f:bc:2d:da:32:
                    c1:8a:c6:2f:61:a6:bb:0f:9b:14:05:d0:72:53:2c:
                    b9:e6:41:65:1f:71:43:95:76:8e:d7:ee:34:15:ed:
                    84:de:28:c1:6f:62:cd:bd:e3:06:f8:f6:0f:a9:8d:
                    87:bf:a4:49:ef:de:7a:ce:af:c3:33:6c:f6:1e:ab:
                    fd:13:f2:4f:7e:e0:b8:d7:d3:48:1b:2f:83:0d:d4:
                    cf:23:20:6b:94:4f:cc:c9:de:10:b9:7d:0c:10:bb:
                    17:11:30:ab:69:5b:8f:a8:f5:77:7c:78:b0:6d:08:
                    2a:6b:4b:9c:af:f5:8c:69:f2:0b:c8:a4:6b:f8:de:
                    07:ea:96:85:b3:d0:cf:01:90:70:73:32:ab:fb:f2:
                    be:c9:9a:6a:e2:ca:53:20:4e:4f:3d:e3:df:a8:4f:
                    61:ec:18:9e:b8:94:34:2d:d4:aa:0b:8d:a0:9c:c7:
                    2d:90:a7:78:c3:e9:82:48:27:d1:cb:8e:c8:38:66:
                    9c:9a:6f:2c:c1:34:9d:2b:24:a1:cb:a9:5d:e7:1a:
                    1a:1a:ef:0d:bb:a5:34:e1:86:8b:f7:f9:9c:09:86:
                    d7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:15:E9:5C:12:7E:0F:8D:A9:E9:4F:69:D1:AD:07:3D:F7:15:B4:27
            X509v3 Authority Key Identifier:
                keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:fa:7b:1a:38:a9:2a:62:b2:4f:72:72:31:a0:91:dd:74:2c:
         9b:70:3b:0b:8c:10:11:6d:0b:bc:98:4b:23:90:23:4b:0f:bf:
         66:3d:8b:98:f4:c2:bf:ba:12:d7:c5:6c:46:bf:9a:3f:2a:2a:
         f9:bc:b3:2b:80:0b:1e:e4:d0:94:e8:c5:7c:7f:cd:b1:fb:6d:
         d8:e5:ee:e0:63:c4:ab:40:47:25:f8:e0:64:f9:22:3b:1d:12:
         c2:93:a1:eb:79:8d:08:41:70:68:f4:9f:4d:c8:b1:43:2b:43:
         cc:b0:22:e6:6a:34:82:8e:47:c8:9e:9a:89:2a:4d:63:ef:f7:
         84:cb:b6:ef:d2:33:f4:35:93:fb:0c:14:54:22:35:17:32:df:
         a3:98:74:4e:9e:58:13:33:df:1f:26:05:ef:63:d8:32:4a:66:
         1e:a1:f3:af:55:71:1a:8d:02:dc:18:72:f7:93:8f:36:23:f5:
         16:69:68:d7:cc:66:47:03:64:9f:c8:64:ae:55:aa:1a:33:f9:
         b7:d1:15:b8:0f:22:b1:a2:95:bb:83:9f:5f:66:5c:28:22:c4:
         39:47:c3:cb:73:fb:f0:0a:b9:4d:97:94:55:2b:f0:26:28:d2:
         59:e8:67:c1:a2:4f:7e:ad:a5:94:61:6b:43:e3:e8:90:97:9c:
         19:27:80:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:48:00 2026 by rpki-client