This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/UdpDaeZVys7LHpexLg2_ugrpKao.roa
File:                     UdpDaeZVys7LHpexLg2_ugrpKao.roa (raw, json)
Hash identifier:          4C4Vm/weE0RMdrsBZQ2+meAake0bVi8NxlHOyIu9Ojw=
Subject key identifier:   51:DA:43:69:E6:55:CA:CE:CB:1E:97:B1:2E:0D:BF:BA:0A:E9:29:AA
Certificate issuer:       /CN=555988478690ad8d81149aa5c4cae75af5385f1b
Certificate serial:       019B7F155612A495565288999FF0F240CFD4
Authority key identifier: 55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/UdpDaeZVys7LHpexLg2_ugrpKao.roa
Signing time:             Fri 02 Jan 2026 14:21:03 +0000
ROA not before:           Fri 02 Jan 2026 14:21:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197997
IP address blocks:        194.0.32.0/24 maxlen: 24
                          2001:678:3c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:56:12:a4:95:56:52:88:99:9f:f0:f2:40:cf:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555988478690ad8d81149aa5c4cae75af5385f1b
        Validity
            Not Before: Jan  2 14:21:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=51da4369e655cacecb1e97b12e0dbfba0ae929aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7e:7b:d8:e5:ec:a7:57:85:b4:cf:14:67:ec:
                    a1:97:8a:9f:d6:b6:ed:53:7a:db:62:e4:02:c2:4f:
                    61:c2:99:50:07:f3:aa:1b:fa:12:0d:fe:88:62:9e:
                    1f:c5:7a:de:10:a9:f1:5c:a7:13:13:b4:c6:35:1d:
                    b7:30:fd:af:dd:93:6a:0c:91:f8:19:69:6b:6c:23:
                    8e:88:21:02:47:19:b7:30:43:01:45:50:1f:22:80:
                    42:d7:12:c9:90:c3:6d:34:ec:11:e6:4c:25:1e:25:
                    e4:b1:52:da:1c:bc:2d:5b:43:13:d9:e9:de:41:ac:
                    f2:ef:2d:9c:07:89:00:42:3e:e4:23:2b:d0:da:35:
                    ef:b9:aa:1b:3f:e1:0b:ed:ad:67:41:ef:27:d2:7f:
                    6d:5f:9a:bf:2a:40:6b:cf:9f:1b:d0:e5:08:9e:90:
                    57:cf:8a:27:66:21:2d:1d:e7:6e:07:dd:1a:a6:cf:
                    5b:00:c6:b4:cf:a3:db:94:c3:4d:89:38:b7:e0:c7:
                    62:06:88:7c:0c:a1:cb:78:16:8f:eb:3b:22:7e:e8:
                    97:77:94:4d:36:19:5f:47:a2:e8:20:ef:71:46:e4:
                    2c:48:d2:38:03:0f:9f:29:e8:e4:1e:d6:a7:4d:1c:
                    34:cb:50:b5:b3:0f:fe:b2:e3:00:dc:60:4c:d9:3e:
                    f0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DA:43:69:E6:55:CA:CE:CB:1E:97:B1:2E:0D:BF:BA:0A:E9:29:AA
            X509v3 Authority Key Identifier:
                keyid:55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/UdpDaeZVys7LHpexLg2_ugrpKao.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.0.32.0/24
                IPv6:
                  2001:678:3c::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:4d:50:05:1d:79:25:c6:33:a6:f1:2f:1f:2c:bb:ba:25:33:
         7f:5d:de:f0:14:73:de:6b:5b:b9:89:e1:19:57:7c:31:c5:aa:
         65:2e:10:af:47:7d:65:82:2d:b7:01:b0:9a:4a:fb:be:13:8d:
         07:00:e2:a7:1c:87:d8:ea:2a:f2:9a:e6:c1:f0:01:61:28:78:
         ee:9a:98:ec:a3:26:8d:2e:37:de:e2:e2:09:df:e7:b0:fd:a8:
         59:f9:3f:50:df:5b:da:e8:e6:22:4a:f9:89:14:9a:88:c3:e9:
         ca:6e:42:64:26:d4:b0:2c:62:60:25:b8:51:df:f3:e7:80:05:
         d6:de:f3:5d:0a:b8:b4:f9:ba:f4:a9:14:89:88:d8:08:08:d5:
         b4:02:62:d9:e7:2b:ef:f3:1b:96:bb:83:5b:c6:be:54:29:e6:
         27:34:39:67:cc:dc:28:fd:f4:b9:2b:12:4f:e8:be:65:78:ad:
         32:39:bf:33:39:c4:66:58:25:11:ad:56:fd:c5:6e:3e:6e:73:
         0a:ad:60:86:f2:38:d8:da:08:44:3e:bc:86:c4:14:01:ee:ad:
         94:b0:66:62:71:a2:75:7f:cf:0c:83:a8:9b:27:b0:a0:19:86:
         0b:27:b1:5b:75:02:d1:16:24:18:e8:9b:c4:af:3c:5d:b9:c7:
         5d:c5:46:83
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZt/FVYSpJVWUoiZn/DyQM/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NTk4ODQ3ODY5MGFkOGQ4MTE0OWFhNWM0Y2FlNzVhZjUz
ODVmMWIwHhcNMjYwMTAyMTQyMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWRhNDM2OWU2NTVjYWNlY2IxZTk3YjEyZTBkYmZiYTBhZTkyOWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn572OXsp1eFtM8UZ+yhl4qf1rbt
U3rbYuQCwk9hwplQB/OqG/oSDf6IYp4fxXreEKnxXKcTE7TGNR23MP2v3ZNqDJH4
GWlrbCOOiCECRxm3MEMBRVAfIoBC1xLJkMNtNOwR5kwlHiXksVLaHLwtW0MT2ene
Qazy7y2cB4kAQj7kIyvQ2jXvuaobP+EL7a1nQe8n0n9tX5q/KkBrz58b0OUInpBX
z4onZiEtHeduB90aps9bAMa0z6PblMNNiTi34MdiBoh8DKHLeBaP6zsifuiXd5RN
NhlfR6LoIO9xRuQsSNI4Aw+fKejkHtanTRw0y1C1sw/+suMA3GBM2T7wOQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFHaQ2nmVcrOyx6XsS4Nv7oK6SmqMB8GA1UdIwQY
MBaAFFVZiEeGkK2NgRSapcTK51r1OF8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlZtSVI0YVFyWTJCRkpxbHhNcm5XdlU0WHhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNzhmZjctOTRhNy00ZmMyLWFlZDgt
OGQxZGE5ZjM4YTBiLzEvVWRwRGFlWlZ5czdMSHBleExnMl91Z3JwS2FvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNzhmZjctOTRhNy00ZmMyLWFlZDgtOGQxZGE5ZjM4YTBi
LzEvVlZtSVI0YVFyWTJCRkpxbHhNcm5XdlU0WHhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwgAgMA8E
AgACMAkDBwAgAQZ4ADwwDQYJKoZIhvcNAQELBQADggEBAHZNUAUdeSXGM6bxLx8s
u7olM39d3vAUc95rW7mJ4RlXfDHFqmUuEK9HfWWCLbcBsJpK+74TjQcA4qcch9jq
KvKa5sHwAWEoeO6amOyjJo0uN97i4gnf57D9qFn5P1DfW9ro5iJK+YkUmojD6cpu
QmQm1LAsYmAluFHf8+eABdbe810KuLT5uvSpFImI2AgI1bQCYtnnK+/zG5a7g1vG
vlQp5ic0OWfM3Cj99LkrEk/ovmV4rTI5vzM5xGZYJRGtVv3Fbj5ucwqtYIbyONja
CEQ+vIbEFAHurZSwZmJxonV/zwyDqJsnsKAZhgsnsVt1AtEWJBjom8SvPF25x13F
RoM=
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:38:54 2026 by rpki-client