This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uqJVQULxYFFFA5gySQFNCCoM4mQ.roa
File:                     uqJVQULxYFFFA5gySQFNCCoM4mQ.roa (raw, json)
Hash identifier:          D2p+FrBUImg8Yd/4u77fupreCMlTi8cL3l8V1T27H5Q=
Subject key identifier:   BA:A2:55:41:42:F1:60:51:45:03:98:32:49:01:4D:08:2A:0C:E2:64
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       019B7F84AC7BC3B35CEB52674C91E313A85E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uqJVQULxYFFFA5gySQFNCCoM4mQ.roa
Signing time:             Fri 02 Jan 2026 16:22:39 +0000
ROA not before:           Fri 02 Jan 2026 16:22:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44956
IP address blocks:        95.46.97.0/24 maxlen: 24
                          95.47.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:ac:7b:c3:b3:5c:eb:52:67:4c:91:e3:13:a8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 16:22:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=baa2554142f160514503983249014d082a0ce264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c7:7b:25:bd:e2:4c:0d:5d:6c:73:65:6a:c6:
                    f4:0a:53:c4:b3:ec:f6:28:ef:41:19:80:bc:08:7d:
                    46:bd:22:05:6b:b7:59:87:5c:b6:32:ac:95:8f:4b:
                    f6:9b:ce:ec:13:23:5f:6f:f7:46:e9:55:06:a0:ab:
                    29:16:2e:f3:66:a2:04:43:cd:ed:a7:0f:01:94:7e:
                    6c:25:55:48:0c:44:9e:07:2f:f2:88:f8:8f:e6:9f:
                    ca:1d:41:c9:3a:5b:90:50:47:fa:99:1b:8a:9d:07:
                    cd:74:c0:ae:93:40:65:b3:b1:48:bd:c2:11:36:2c:
                    2b:5f:6d:ef:00:b4:bb:05:3d:60:f5:be:c1:85:55:
                    c5:74:c9:be:c6:d7:b0:94:a0:d1:07:c2:a1:a5:a4:
                    66:80:e3:01:f1:51:9f:d8:b8:af:f1:e5:9a:97:e2:
                    58:87:71:f6:26:b0:11:68:c7:7e:cb:ad:70:25:21:
                    ef:89:c7:a7:d9:92:fc:1f:c4:91:b6:fb:d3:3d:a1:
                    f2:de:4e:5e:e0:bc:aa:89:06:e1:dd:c6:0a:a0:25:
                    63:68:d5:5a:4c:96:74:9e:2d:66:e6:9a:c8:2e:e5:
                    f5:bc:76:5b:84:c3:70:81:f7:54:39:4b:89:64:82:
                    a9:13:65:13:a8:ab:d2:52:46:96:88:2b:77:22:29:
                    77:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A2:55:41:42:F1:60:51:45:03:98:32:49:01:4D:08:2A:0C:E2:64
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uqJVQULxYFFFA5gySQFNCCoM4mQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.46.97.0/24
                  95.47.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:54:52:51:73:ba:33:22:66:dc:5d:ef:43:bc:bd:07:82:24:
         b3:7b:18:2b:40:7b:c7:da:db:57:31:36:bb:3e:84:28:18:e1:
         33:f2:8c:f9:06:a2:39:bc:ef:fb:0c:34:83:e1:d8:04:01:0f:
         f2:a5:72:34:82:49:05:97:6c:f3:2e:61:5f:2e:b4:c2:bd:b1:
         25:7b:26:02:05:91:16:11:db:40:cc:fe:69:b7:1c:0a:23:27:
         3d:36:9c:1d:15:48:fc:90:bd:ba:52:79:ad:24:c0:0e:cb:92:
         09:9e:37:98:97:f5:31:4a:40:9e:f9:8e:db:28:64:25:7e:b9:
         29:66:1c:68:c7:8a:e7:d8:1d:49:90:57:83:fa:fc:c9:82:c6:
         22:a8:5f:7e:80:54:fc:01:08:4c:5b:b0:9d:32:c9:68:bd:c6:
         2c:a8:00:67:09:01:cf:53:7f:f3:ad:45:29:1d:99:02:3c:e9:
         51:08:36:09:8f:ba:73:ec:81:c0:96:94:d6:57:a5:49:01:f6:
         d0:54:02:81:1e:a1:ef:be:7d:7e:b3:0f:52:51:ed:52:80:15:
         5a:ce:35:a7:ec:12:75:89:90:fa:c4:a4:74:8b:d1:f0:9c:14:
         98:b8:d6:a5:44:26:d4:01:13:1b:15:ab:47:4b:0f:9b:cd:1b:
         bc:3e:6e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:15:02 2026 by rpki-client