This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/UyjLHUjp8FR96cTc-X91a4t5VzU.roa
File:                     UyjLHUjp8FR96cTc-X91a4t5VzU.roa (raw, json)
Hash identifier:          olOAARUB3nsGFVXwsbDM9r8HLRIAOZ22q31k+PB08xE=
Subject key identifier:   53:28:CB:1D:48:E9:F0:54:7D:E9:C4:DC:F9:7F:75:6B:8B:79:57:35
Certificate issuer:       /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial:       019B7AC7A65FA614E90FD4D1DA1D6DA6903A
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/UyjLHUjp8FR96cTc-X91a4t5VzU.roa
Signing time:             Thu 01 Jan 2026 18:17:43 +0000
ROA not before:           Thu 01 Jan 2026 18:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     272877
IP address blocks:        45.80.196.0/22 maxlen: 22
                          45.80.196.0/23 maxlen: 23
                          45.80.196.0/24 maxlen: 24
                          45.80.197.0/24 maxlen: 24
                          45.80.198.0/23 maxlen: 23
                          45.80.198.0/24 maxlen: 24
                          45.80.199.0/24 maxlen: 24
                          103.23.62.0/23 maxlen: 23
                          103.23.62.0/24 maxlen: 24
                          103.23.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:a6:5f:a6:14:e9:0f:d4:d1:da:1d:6d:a6:90:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
        Validity
            Not Before: Jan  1 18:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5328cb1d48e9f0547de9c4dcf97f756b8b795735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:38:0a:bf:34:13:56:5a:1e:1d:25:e1:0c:5e:
                    31:ce:0a:d6:dd:90:81:98:ad:5b:30:f5:6a:1e:13:
                    34:08:3b:cf:ba:57:c7:6f:47:02:8f:32:2c:51:08:
                    af:23:ab:af:8c:d1:a5:6e:54:bc:56:5a:36:c5:e3:
                    c6:34:e0:b8:9c:4d:7d:e4:51:10:bb:0c:5d:88:db:
                    d8:ec:d1:bf:f3:4e:a2:0f:19:d0:6c:5b:50:7d:0a:
                    4f:fb:dc:24:13:b5:58:6e:fa:db:18:2e:2a:0a:47:
                    55:3d:f1:8f:d6:80:5f:f6:70:82:71:87:7a:b6:dd:
                    42:fb:b7:6b:94:04:bb:46:9b:d2:d7:7c:93:e3:d1:
                    0f:5d:72:17:05:ef:16:e4:0e:87:26:92:b9:b6:df:
                    ea:8a:2a:f0:89:09:ae:45:51:c0:b3:ac:1d:45:3e:
                    dd:df:bd:df:51:26:73:ba:ac:ee:5e:e1:29:f2:90:
                    e1:b5:b7:8e:33:b7:16:20:23:fb:1c:ef:e1:08:48:
                    16:ad:10:c6:db:6e:5d:03:10:d4:9e:77:ad:13:cc:
                    75:52:6a:49:dd:15:71:94:8e:9b:19:3e:cc:3b:29:
                    28:c4:f5:b0:94:1c:46:a9:3e:72:f6:be:3d:02:51:
                    de:79:dd:da:b6:72:7a:0d:ac:7f:e5:8a:09:06:88:
                    7d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:28:CB:1D:48:E9:F0:54:7D:E9:C4:DC:F9:7F:75:6B:8B:79:57:35
            X509v3 Authority Key Identifier:
                keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/UyjLHUjp8FR96cTc-X91a4t5VzU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.196.0/22
                  103.23.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:fb:35:78:75:a4:84:f5:d9:76:c2:d1:24:0c:8a:dd:34:a0:
         ad:da:36:40:e1:ed:21:52:28:64:b8:fe:09:ce:62:95:65:aa:
         1f:ec:dc:18:9a:61:26:3f:62:da:8b:57:97:cd:99:4c:00:da:
         3c:b1:7c:a3:e2:65:bd:a7:1f:b3:62:d4:84:30:c9:d6:19:e7:
         33:75:86:a8:67:42:5c:2e:bf:85:e1:cd:85:c3:00:71:f7:7b:
         f4:fb:28:26:55:71:5d:1c:47:58:6b:cb:87:54:db:ba:08:6d:
         21:0d:ad:76:b7:cf:5b:59:99:46:57:79:81:f0:8f:61:3e:4c:
         5a:7a:fb:90:ca:dc:4a:60:e9:da:77:8e:b1:0e:d4:fe:a3:b3:
         7e:85:a1:75:18:4e:43:66:dc:15:8b:7f:0b:d9:52:09:8a:5d:
         c8:ac:02:45:7d:05:79:28:00:87:b7:1f:f3:ec:2d:5b:e4:2f:
         b1:e0:6a:dc:48:0e:09:56:2e:a1:44:8f:9c:5a:11:8a:20:39:
         9c:22:c2:ef:3e:3e:3d:3e:0b:d2:88:bb:6b:ab:90:19:9a:d1:
         aa:57:cb:31:c5:7a:bc:23:15:ce:c1:86:8d:6d:94:53:1f:32:
         d8:3f:ee:9c:b9:a5:91:54:4e:ad:a7:60:60:6f:cf:7d:ec:e1:
         9d:3a:87:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:24:48 2026 by rpki-client