This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/uJKDxtZcDj52wYkdN5YgVbbm_Qg.roa
File:                     uJKDxtZcDj52wYkdN5YgVbbm_Qg.roa (raw, json)
Hash identifier:          sUSljUPkGt2IJZimoVojQH+i2T6wSTV1gkUYlZq+bz4=
Subject key identifier:   B8:92:83:C6:D6:5C:0E:3E:76:C1:89:1D:37:96:20:55:B6:E6:FD:08
Certificate issuer:       /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial:       019B7EA6685442C4BFC96160876E2BAE5E4D
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/uJKDxtZcDj52wYkdN5YgVbbm_Qg.roa
Signing time:             Fri 02 Jan 2026 12:19:53 +0000
ROA not before:           Fri 02 Jan 2026 12:19:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57801
IP address blocks:        84.245.96.0/24 maxlen: 24
                          195.12.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:68:54:42:c4:bf:c9:61:60:87:6e:2b:ae:5e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
        Validity
            Not Before: Jan  2 12:19:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b89283c6d65c0e3e76c1891d37962055b6e6fd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d8:a3:e7:59:4d:64:84:8d:bf:4e:8a:a0:a0:
                    ac:bd:ac:fb:3a:a5:ca:3d:b1:15:0f:1a:26:dc:13:
                    6d:7f:60:90:6c:f0:5b:4c:1b:47:d8:45:88:c1:29:
                    16:77:f7:00:95:a7:f2:1d:2a:28:87:64:df:ce:e0:
                    3d:15:59:b5:8f:4d:4f:df:f8:94:8b:61:d0:7a:be:
                    a1:20:fc:59:f0:90:db:92:a1:e2:c4:7b:94:dd:49:
                    29:2c:4d:dd:2c:05:8a:67:bf:af:ed:48:6a:e8:fc:
                    86:cc:15:26:1d:34:6a:a8:79:45:c9:a1:29:60:03:
                    60:ec:94:ba:b4:17:cb:b4:af:41:40:83:ec:a9:10:
                    9a:f2:71:8f:4d:d2:47:85:5d:ee:27:1c:65:5a:30:
                    a2:7a:b0:0c:48:bc:aa:5c:58:9f:f9:cb:2b:93:59:
                    e2:c7:84:18:29:f6:4a:09:d1:2f:17:32:a3:33:2d:
                    c1:5c:89:19:64:aa:34:da:59:55:0e:d1:c0:c0:bb:
                    f0:12:db:7c:b2:64:b5:66:cf:7c:c9:7c:8b:95:86:
                    5e:75:eb:db:8b:fb:80:eb:40:9c:28:cb:16:8d:db:
                    b7:c3:7a:2f:ce:96:c5:4a:ce:e9:06:54:f7:7d:aa:
                    d1:93:e4:6d:96:fb:27:e1:6b:75:29:f3:75:9f:18:
                    26:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:92:83:C6:D6:5C:0E:3E:76:C1:89:1D:37:96:20:55:B6:E6:FD:08
            X509v3 Authority Key Identifier:
                keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/uJKDxtZcDj52wYkdN5YgVbbm_Qg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.245.96.0/24
                  195.12.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:f9:bf:01:bc:50:31:54:c9:96:ed:a6:e1:76:d5:ac:0d:68:
         d8:2f:56:7a:13:87:04:ef:b3:0f:7b:e1:eb:ce:53:4c:3e:77:
         6e:3d:81:06:36:89:16:c8:95:bc:98:d1:fb:7d:57:1a:f6:68:
         13:92:e6:96:79:d8:3d:c9:23:81:40:5a:99:06:a7:aa:15:06:
         80:f9:19:c2:0c:2f:2d:ce:0b:c5:33:85:07:ea:75:20:89:82:
         f4:e5:4e:7d:9a:07:d5:fa:ee:04:c2:61:b7:bd:f0:3f:50:8c:
         d5:ec:0e:41:81:eb:c9:8d:64:aa:fa:62:a4:0d:0a:ac:1d:24:
         15:1a:74:98:07:f8:f6:42:01:a4:3c:f1:68:25:bf:38:e8:b8:
         ff:4e:2a:0f:f9:78:9e:be:94:bb:ad:cb:2e:65:02:81:91:4b:
         91:2a:ae:6f:f3:35:ba:a4:d9:65:5f:fb:da:38:8f:5d:2f:c6:
         b6:28:5e:1c:a2:ad:f9:bb:0a:34:6d:de:7e:eb:a5:b6:e8:98:
         52:43:7b:de:9b:36:a1:4c:1e:6a:d2:0f:ec:40:d1:0d:aa:f4:
         39:a8:91:f2:a5:d7:a5:30:a8:ff:c5:2a:95:f8:77:4a:b6:9e:
         f1:2d:9b:7a:e7:66:12:43:85:14:08:bd:6d:7f:dd:c3:2f:82:
         6d:c8:7f:5f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt+pmhUQsS/yWFgh24rrl5NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm
MDVkYmEwHhcNMjYwMTAyMTIxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODkyODNjNmQ2NWMwZTNlNzZjMTg5MWQzNzk2MjA1NWI2ZTZmZDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dij51lNZISNv06KoKCsvaz7OqXK
PbEVDxom3BNtf2CQbPBbTBtH2EWIwSkWd/cAlafyHSooh2TfzuA9FVm1j01P3/iU
i2HQer6hIPxZ8JDbkqHixHuU3UkpLE3dLAWKZ7+v7Uhq6PyGzBUmHTRqqHlFyaEp
YANg7JS6tBfLtK9BQIPsqRCa8nGPTdJHhV3uJxxlWjCierAMSLyqXFif+csrk1ni
x4QYKfZKCdEvFzKjMy3BXIkZZKo02llVDtHAwLvwEtt8smS1Zs98yXyLlYZedevb
i/uA60CcKMsWjdu3w3ovzpbFSs7pBlT3farRk+Rtlvsn4Wt1KfN1nxgmLQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLiSg8bWXA4+dsGJHTeWIFW25v0IMB8GA1UdIwQY
MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt
ZTJmYmMzYTY4ODAwLzEvdUpLRHh0WmNEajUyd1lrZE41WWdWYmJtX1FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw
LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVPVgAwQA
wwyfMA0GCSqGSIb3DQEBCwUAA4IBAQA5+b8BvFAxVMmW7abhdtWsDWjYL1Z6E4cE
77MPe+HrzlNMPnduPYEGNokWyJW8mNH7fVca9mgTkuaWedg9ySOBQFqZBqeqFQaA
+RnCDC8tzgvFM4UH6nUgiYL05U59mgfV+u4EwmG3vfA/UIzV7A5BgevJjWSq+mKk
DQqsHSQVGnSYB/j2QgGkPPFoJb846Lj/TioP+XievpS7rcsuZQKBkUuRKq5v8zW6
pNllX/vaOI9dL8a2KF4coq35uwo0bd5+66W26JhSQ3vemzahTB5q0g/sQNENqvQ5
qJHypdelMKj/xSqV+HdKtp7xLZt652YSQ4UUCL1tf93DL4JtyH9f
-----END CERTIFICATE-----
Generated at Mon Jan 26 12:17:58 2026 by rpki-client