This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/02UbpjggiD2hCuBROuOMzSrBNes.roa
File:                     02UbpjggiD2hCuBROuOMzSrBNes.roa (raw, json)
Hash identifier:          oD92ZLodntYyRevIXaKbN61NlRaYP5OLaBNueXJo8rI=
Subject key identifier:   D3:65:1B:A6:38:20:88:3D:A1:0A:E0:51:3A:E3:8C:CD:2A:C1:35:EB
Certificate issuer:       /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial:       019B77C6CF1D7A6E798F42D59C27D4A3B866
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/02UbpjggiD2hCuBROuOMzSrBNes.roa
Signing time:             Thu 01 Jan 2026 04:17:56 +0000
ROA not before:           Thu 01 Jan 2026 04:17:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31027
IP address blocks:        193.41.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:cf:1d:7a:6e:79:8f:42:d5:9c:27:d4:a3:b8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
        Validity
            Not Before: Jan  1 04:17:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d3651ba63820883da10ae0513ae38ccd2ac135eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c2:9b:13:68:ba:83:4e:1c:a6:9c:bb:b8:67:
                    35:f4:18:3c:2f:97:37:82:aa:c9:3f:ea:78:0f:ef:
                    e7:fb:de:bd:a5:bb:bf:10:34:26:da:dd:3a:53:ff:
                    cc:93:02:71:2d:10:f5:87:5b:7e:2b:42:8d:7a:38:
                    51:83:44:91:bf:57:5c:21:d4:c8:43:94:5a:41:f8:
                    f7:32:e5:41:96:ea:4a:6c:2f:c2:de:57:3c:58:e0:
                    7d:0d:7b:47:dd:9b:5f:28:75:8e:50:36:6f:97:84:
                    90:f4:21:94:4e:59:9f:93:4d:c7:df:71:0f:d8:b7:
                    b8:46:e5:3a:53:7d:c0:62:81:4a:cf:ce:98:f1:16:
                    64:6b:4b:3b:80:34:b7:5b:51:b2:aa:88:1f:53:01:
                    b4:f5:04:f7:a8:2d:2b:9f:33:1a:20:51:50:e1:0c:
                    4f:e0:59:13:6f:ff:50:d9:93:71:c4:cb:4a:0a:d1:
                    28:d4:fa:22:3c:86:08:21:f1:12:e9:18:00:4d:21:
                    a9:71:5f:17:0f:3f:83:80:14:4f:68:d5:b7:35:ae:
                    2d:b8:6d:52:62:99:1d:71:e5:a6:b1:e2:9a:bc:41:
                    06:6a:6d:b2:fd:69:13:9f:7d:82:f6:fb:51:e7:40:
                    f4:74:de:c5:30:38:91:8b:cd:f3:d2:f5:b6:4e:5b:
                    b3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:65:1B:A6:38:20:88:3D:A1:0A:E0:51:3A:E3:8C:CD:2A:C1:35:EB
            X509v3 Authority Key Identifier:
                keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/02UbpjggiD2hCuBROuOMzSrBNes.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.41.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:a5:7b:4d:61:a7:6a:9d:79:2c:b1:35:2f:d1:23:d2:71:73:
         56:b1:19:5a:a9:88:ce:76:c1:70:bd:65:a4:83:72:4f:7b:f6:
         1e:00:2a:8c:ea:cb:f5:83:ba:87:09:78:84:9e:24:a4:64:bb:
         35:87:00:fb:f8:9e:b3:0c:f4:6b:59:29:b2:ab:95:d8:69:f8:
         90:cf:e6:bb:f7:17:a2:c9:b7:a1:58:9f:eb:a0:d6:25:f8:0e:
         a7:f5:f5:a0:ff:b7:0d:3d:b0:b1:e7:05:23:45:3e:b7:b8:0a:
         ff:4f:bc:b9:25:93:5e:1b:e1:e3:c5:67:d2:a6:f2:af:ce:fa:
         cb:85:3a:e4:13:bc:ef:d7:ac:9c:42:b8:f9:0d:9c:41:31:d9:
         9d:e4:ec:6f:2d:ce:61:6b:e7:cc:bf:f1:ff:cb:9a:e9:c0:93:
         f5:23:13:34:49:3f:5a:61:00:25:a2:3e:42:79:29:a6:96:02:
         a1:09:db:8b:c3:df:fb:93:aa:2e:b8:f9:9a:9d:45:e2:97:e6:
         6d:9d:fb:3c:fb:7a:97:f0:36:56:83:d4:ec:61:e5:44:fb:e6:
         9b:1a:ad:7d:e8:84:a7:43:8d:8f:ec:b8:cc:b7:f4:f0:0e:97:
         8a:03:99:cf:ba:f4:58:c9:90:2d:e2:4a:af:36:28:60:93:b1:
         ff:a7:36:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:26:21 2026 by rpki-client