This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/uR6qk5DeglUWNbzyA8X_zxBn_Us.roa
File:                     uR6qk5DeglUWNbzyA8X_zxBn_Us.roa (raw, json)
Hash identifier:          7cX65e6MFwNlQSj+gYDD5WGRNzvo97dTNPuyxMqN7k4=
Subject key identifier:   B9:1E:AA:93:90:DE:82:55:16:35:BC:F2:03:C5:FF:CF:10:67:FD:4B
Certificate issuer:       /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial:       019B797EF83C42C8C5EDC910E246A212D90E
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/uR6qk5DeglUWNbzyA8X_zxBn_Us.roa
Signing time:             Thu 01 Jan 2026 12:18:42 +0000
ROA not before:           Thu 01 Jan 2026 12:18:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204457
IP address blocks:        95.141.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:f8:3c:42:c8:c5:ed:c9:10:e2:46:a2:12:d9:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
        Validity
            Not Before: Jan  1 12:18:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b91eaa9390de82551635bcf203c5ffcf1067fd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:43:71:67:f3:65:10:d4:b9:c2:1d:40:e2:
                    f5:11:6d:ce:a1:18:b8:17:36:83:16:bc:9a:f1:7d:
                    12:31:9d:0b:0c:4b:eb:16:9f:ac:72:14:40:42:f9:
                    9b:d9:c0:8c:d6:f5:94:54:b0:f9:a4:42:27:b0:45:
                    d4:18:82:07:9e:c4:e4:d5:25:12:08:39:b0:4f:2e:
                    ba:ea:9f:dd:d2:de:cf:53:c5:15:45:7d:d2:1c:e3:
                    a3:73:ca:f3:0a:95:ef:90:c0:6f:a9:ed:21:81:ce:
                    e3:c2:11:84:36:34:16:23:ac:a2:b1:3f:7c:7a:f6:
                    21:64:8b:2d:80:b3:bb:a3:33:0f:01:de:a0:36:1e:
                    fa:4f:aa:81:4a:1e:66:76:dd:7f:ab:88:a8:fc:dd:
                    e7:51:83:98:87:ad:6a:f4:1c:bf:98:32:4f:50:eb:
                    8a:45:b8:ce:a7:12:41:9d:72:91:d2:0d:39:4f:75:
                    ae:1b:d1:f9:ec:03:eb:a4:b3:40:4a:f9:1a:8a:0c:
                    f9:7c:e0:a4:6b:74:df:2c:1f:b1:1d:2e:66:70:83:
                    76:a6:89:5d:8b:01:52:55:b6:96:14:c1:25:0a:2a:
                    68:81:96:16:d5:1e:f9:3a:62:82:12:ad:d2:34:56:
                    bd:29:d4:a2:bb:31:62:74:fa:16:f5:5d:9f:bd:be:
                    40:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1E:AA:93:90:DE:82:55:16:35:BC:F2:03:C5:FF:CF:10:67:FD:4B
            X509v3 Authority Key Identifier:
                keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/uR6qk5DeglUWNbzyA8X_zxBn_Us.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.141.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:1b:ac:f9:e7:8f:90:fb:3f:0b:61:5c:7e:75:6b:54:2b:f4:
         64:34:fb:3f:e1:ab:43:04:9c:48:66:06:c9:dd:1b:ed:f8:d3:
         02:63:08:a9:29:65:64:ef:61:22:a8:db:3e:2f:ba:c0:f0:64:
         dd:49:4e:27:8d:34:5e:0b:92:df:fc:c7:6a:59:97:e7:df:4e:
         a4:c8:1a:6a:c6:03:e7:8c:96:29:88:9f:16:80:e3:20:b0:69:
         0d:f8:a9:1a:2a:33:54:a7:5d:a1:45:8b:6e:39:32:83:83:c1:
         b5:67:80:59:26:6d:9d:8e:42:9f:68:a7:b5:04:57:ec:ad:08:
         a0:65:2c:22:87:b4:d6:2c:b8:41:f6:3a:55:88:d5:a4:0e:72:
         4d:d1:3a:1a:e0:9b:1d:9e:17:4e:fb:60:4f:26:4d:d2:7d:ca:
         7c:97:a2:d5:bd:ff:0d:dc:8d:30:6c:c3:1c:b9:3b:e2:5f:90:
         d0:e5:13:3d:8a:5e:27:a9:9b:32:84:40:28:ec:21:af:d1:c3:
         a0:8e:09:70:f2:06:b1:e2:4e:dc:36:38:97:0b:b5:09:8c:0b:
         cd:0c:4b:bb:df:86:d3:83:53:ac:ae:ab:a0:60:52:ce:65:c5:
         8d:3e:78:24:3b:25:94:d0:1b:9c:78:ac:71:4b:3d:da:4b:e5:
         ee:fa:56:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5fvg8QsjF7ckQ4kaiEtkOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOGQ4NTk4MDY0ZGI1YThlZGIzYTYwODQwNjRjZDJhMWFk
OGM2ZTMwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTFlYWE5MzkwZGU4MjU1MTYzNWJjZjIwM2M1ZmZjZjEwNjdmZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgtDcWfzZRDUucIdQOL1EW3OoRi4
FzaDFrya8X0SMZ0LDEvrFp+schRAQvmb2cCM1vWUVLD5pEInsEXUGIIHnsTk1SUS
CDmwTy666p/d0t7PU8UVRX3SHOOjc8rzCpXvkMBvqe0hgc7jwhGENjQWI6yisT98
evYhZIstgLO7ozMPAd6gNh76T6qBSh5mdt1/q4io/N3nUYOYh61q9By/mDJPUOuK
RbjOpxJBnXKR0g05T3WuG9H57APrpLNASvkaigz5fOCka3TfLB+xHS5mcIN2pold
iwFSVbaWFMElCipogZYW1R75OmKCEq3SNFa9KdSiuzFidPoW9V2fvb5A1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLkeqpOQ3oJVFjW88gPF/88QZ/1LMB8GA1UdIwQY
MBaAFIuNhZgGTbWo7bOmCEBkzSoa2MbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTQyRm1BWk50YWp0czZZSVFHVE5LaHJZeHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MjNlOWMtNDQyNS00OTZlLWIyMzct
NmIwZWY5MTA4Njg4LzEvdVI2cWs1RGVnbFVXTmJ6eUE4WF96eEJuX1VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MjNlOWMtNDQyNS00OTZlLWIyMzctNmIwZWY5MTA4Njg4
LzEvaTQyRm1BWk50YWp0czZZSVFHVE5LaHJZeHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX434MA0G
CSqGSIb3DQEBCwUAA4IBAQCMG6z554+Q+z8LYVx+dWtUK/RkNPs/4atDBJxIZgbJ
3Rvt+NMCYwipKWVk72EiqNs+L7rA8GTdSU4njTReC5Lf/MdqWZfn306kyBpqxgPn
jJYpiJ8WgOMgsGkN+KkaKjNUp12hRYtuOTKDg8G1Z4BZJm2djkKfaKe1BFfsrQig
ZSwih7TWLLhB9jpViNWkDnJN0Toa4JsdnhdO+2BPJk3Sfcp8l6LVvf8N3I0wbMMc
uTviX5DQ5RM9il4nqZsyhEAo7CGv0cOgjglw8gax4k7cNjiXC7UJjAvNDEu734bT
g1OsrqugYFLOZcWNPngkOyWU0BuceKxxSz3aS+Xu+lbK
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:20:25 2026 by rpki-client