This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UxjzDE3sO0EVpigey9FF_W29OqA.roa
File:                     UxjzDE3sO0EVpigey9FF_W29OqA.roa (raw, json)
Hash identifier:          jkwU/bN8bTpneIGM+pV3El5xthTJ2eqPQHB92GM7XWg=
Subject key identifier:   53:18:F3:0C:4D:EC:3B:41:15:A6:28:1E:CB:D1:45:FD:6D:BD:3A:A0
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       019B77594C0A4160564560574D5FDFBA684B
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UxjzDE3sO0EVpigey9FF_W29OqA.roa
Signing time:             Thu 01 Jan 2026 02:18:19 +0000
ROA not before:           Thu 01 Jan 2026 02:18:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41807
IP address blocks:        89.45.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:4c:0a:41:60:56:45:60:57:4d:5f:df:ba:68:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: Jan  1 02:18:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5318f30c4dec3b4115a6281ecbd145fd6dbd3aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d5:70:1f:7d:0c:6f:0f:87:4f:5a:b5:42:47:
                    55:d7:3d:32:28:dd:05:14:75:67:59:50:c4:c7:4c:
                    b3:4a:96:7c:f2:7d:34:8f:45:ce:d5:a3:55:e3:98:
                    38:fd:c6:a1:1b:2a:ee:33:dd:63:d9:cd:09:71:7b:
                    c2:a7:4c:bf:59:18:6b:ae:a4:05:ce:7c:9d:4d:fc:
                    0d:19:e7:76:20:5e:f4:79:74:06:59:df:a2:62:b7:
                    2a:fe:cd:dd:ff:41:f2:38:48:36:46:e3:5a:82:8a:
                    b5:0a:19:dc:5e:25:c5:6b:93:a5:c0:87:5b:8a:43:
                    87:50:42:e1:ed:85:98:e2:54:01:ff:c3:13:2e:24:
                    a7:2e:0c:f7:9b:8b:99:31:65:38:0c:f9:28:61:c4:
                    8f:9c:a8:08:b9:78:38:6d:4c:21:3a:ff:b4:74:da:
                    eb:8b:19:90:2f:e1:3b:0a:ff:93:b4:3c:e8:66:f7:
                    17:e1:53:65:41:4d:fb:10:b1:80:e4:fa:65:bf:34:
                    f0:01:60:97:49:29:e4:f5:4b:bf:c0:f6:42:2a:6c:
                    95:b2:e9:a0:96:8e:e7:bc:4b:f5:44:2f:27:30:d5:
                    4f:ac:3a:60:fb:ca:5c:29:3c:e9:2d:47:34:5a:ff:
                    4e:5b:3c:14:0f:ff:cf:88:79:a0:54:e8:75:fc:35:
                    a5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:18:F3:0C:4D:EC:3B:41:15:A6:28:1E:CB:D1:45:FD:6D:BD:3A:A0
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UxjzDE3sO0EVpigey9FF_W29OqA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.45.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:cd:11:37:a9:72:ce:e5:e7:81:05:c9:29:ed:56:aa:8a:d1:
         c3:a7:6c:33:e4:4a:ee:d9:b3:87:38:eb:1a:03:0f:1f:7c:3e:
         92:66:e6:99:36:02:b7:e4:83:ba:a9:0a:bc:f1:69:2f:6c:1c:
         62:56:92:a4:1f:98:43:02:9c:0e:d3:56:25:a8:c7:ca:ce:8a:
         9b:30:30:fb:ca:c9:21:7f:a1:64:bc:90:2f:ad:73:c1:3d:ba:
         2d:c1:27:4d:cd:11:a8:43:a7:39:2f:1c:6f:98:08:76:97:a0:
         11:fa:92:47:3f:d0:ba:da:c3:22:7f:ea:62:87:2c:6a:e4:90:
         44:ea:e4:e3:4e:17:c4:e5:58:c6:06:96:c9:dc:01:01:a3:a9:
         fb:be:c0:83:fe:ea:64:99:21:28:70:26:3f:5c:92:0c:6f:1d:
         f3:28:b5:b4:66:5e:7f:67:59:a3:b4:ba:71:54:af:44:c4:db:
         04:5c:9c:be:42:9f:f1:c0:4b:18:b7:21:f9:8d:ff:47:2a:fd:
         af:f6:22:16:81:bf:60:7f:da:80:9e:3e:bb:f0:37:f4:89:f6:
         6f:6e:aa:9f:ca:47:bb:d9:02:7c:0e:c7:92:80:fa:47:f4:38:
         c3:2e:8f:c6:14:cd:45:bd:0c:e1:56:49:75:2b:e2:0a:e4:41:
         24:10:91:e7
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZt3WUwKQWBWRWBXTV/fumhLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzE4ZjMwYzRkZWMzYjQxMTVhNjI4MWVjYmQxNDVmZDZkYmQzYWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9VwH30Mbw+HT1q1QkdV1z0yKN0F
FHVnWVDEx0yzSpZ88n00j0XO1aNV45g4/cahGyruM91j2c0JcXvCp0y/WRhrrqQF
znydTfwNGed2IF70eXQGWd+iYrcq/s3d/0HyOEg2RuNagoq1ChncXiXFa5OlwIdb
ikOHUELh7YWY4lQB/8MTLiSnLgz3m4uZMWU4DPkoYcSPnKgIuXg4bUwhOv+0dNrr
ixmQL+E7Cv+TtDzoZvcX4VNlQU37ELGA5PplvzTwAWCXSSnk9Uu/wPZCKmyVsumg
lo7nvEv1RC8nMNVPrDpg+8pcKTzpLUc0Wv9OWzwUD//PiHmgVOh1/DWlXQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFFMY8wxN7DtBFaYoHsvRRf1tvTqgMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL1V4anpERTNzTzBFVnBpZ2V5OUZGX1cyOU9xQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFZLaYw
DQYJKoZIhvcNAQELBQADggEBAADNETepcs7l54EFySntVqqK0cOnbDPkSu7Zs4c4
6xoDDx98PpJm5pk2Arfkg7qpCrzxaS9sHGJWkqQfmEMCnA7TViWox8rOipswMPvK
ySF/oWS8kC+tc8E9ui3BJ03NEahDpzkvHG+YCHaXoBH6kkc/0LrawyJ/6mKHLGrk
kETq5ONOF8TlWMYGlsncAQGjqfu+wIP+6mSZIShwJj9ckgxvHfMotbRmXn9nWaO0
unFUr0TE2wRcnL5Cn/HASxi3IfmN/0cq/a/2IhaBv2B/2oCePrvwN/SJ9m9uqp/K
R7vZAnwOx5KA+kf0OMMuj8YUzUW9DOFWSXUr4grkQSQQkec=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:39:14 2026 by rpki-client