This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/uwWeM12akfviVBKgj5V4jKYX10s.roa
File:                     uwWeM12akfviVBKgj5V4jKYX10s.roa (raw, json)
Hash identifier:          GWFPsvp4uvzRWxgRHQVC8crG4d3ea80ySU8gEcTXtgQ=
Subject key identifier:   BB:05:9E:33:5D:9A:91:FB:E2:54:12:A0:8F:95:78:8C:A6:17:D7:4B
Certificate issuer:       /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial:       019B7D5D13AEFA628E3F79378279EE07706F
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/uwWeM12akfviVBKgj5V4jKYX10s.roa
Signing time:             Fri 02 Jan 2026 06:20:10 +0000
ROA not before:           Fri 02 Jan 2026 06:20:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8990
IP address blocks:        195.228.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5d:13:ae:fa:62:8e:3f:79:37:82:79:ee:07:70:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
        Validity
            Not Before: Jan  2 06:20:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bb059e335d9a91fbe25412a08f95788ca617d74b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a4:d8:02:ed:49:85:ca:bc:5d:75:fb:2a:27:
                    a2:df:2b:1a:95:28:03:83:eb:81:43:76:99:ac:ea:
                    5a:e7:2b:91:d4:2e:be:af:8f:1d:19:b3:b5:e5:2c:
                    ec:a6:69:02:f3:6e:c5:21:5a:34:aa:b9:27:c9:db:
                    95:8f:81:2c:12:7e:b6:63:ad:96:ba:1a:0f:37:8f:
                    6f:f7:e5:fc:fd:cc:98:5e:fb:62:ff:98:24:a3:98:
                    6f:30:d1:da:d6:60:f1:14:dc:31:8f:eb:3a:c0:9f:
                    28:3f:f3:6f:50:0c:e5:bd:85:ee:d0:ca:7e:69:3f:
                    8f:4b:cc:f2:f4:d4:40:ec:a3:e6:7f:d9:ff:2b:e1:
                    56:81:bb:a6:d6:51:ea:36:03:8d:a3:45:d3:14:a4:
                    68:8d:e4:c7:ab:9c:76:bc:7b:38:db:ec:25:ca:fd:
                    a7:0d:c9:13:2a:c6:04:32:71:2f:27:4b:53:96:a8:
                    f9:ac:22:8b:ed:45:d5:1f:85:45:38:86:8d:aa:4c:
                    df:fb:aa:a1:53:28:6b:af:af:d6:29:97:bc:8a:3b:
                    0e:93:2d:ad:ac:5a:c0:d5:ec:d4:a1:6b:b4:5a:db:
                    1f:c9:13:6c:45:79:d5:0b:41:f8:27:fb:e5:07:62:
                    87:ff:46:16:72:7e:f7:4f:06:c4:4b:a1:dc:8c:8a:
                    54:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:05:9E:33:5D:9A:91:FB:E2:54:12:A0:8F:95:78:8C:A6:17:D7:4B
            X509v3 Authority Key Identifier:
                keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/uwWeM12akfviVBKgj5V4jKYX10s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.228.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:3f:b3:99:84:95:56:53:02:b1:01:d2:2d:17:97:fc:a3:af:
         d6:4b:39:b8:7e:78:13:48:2b:db:d7:8f:89:48:05:dc:61:fc:
         1e:03:ad:df:6e:95:f1:46:a5:78:ff:8e:21:ec:47:b7:8b:04:
         56:4e:a5:2d:40:e0:e1:47:ed:45:0c:90:d9:fa:00:cf:c2:ac:
         07:6a:15:d8:94:87:64:74:f9:26:69:57:b9:c8:a3:78:a5:4d:
         36:3f:7d:7d:b3:00:fa:10:ce:8b:bc:86:78:4c:55:83:a7:f7:
         9d:d6:d1:17:c7:1d:1e:57:79:86:b3:00:b7:fe:59:5d:bb:5e:
         4a:40:9c:61:3c:95:e8:a8:ac:06:16:0d:dd:51:d6:b2:9b:84:
         d6:64:e1:a9:be:aa:83:9f:5f:e3:22:bc:36:4e:08:12:73:3f:
         22:95:15:58:94:4b:9b:74:ad:13:4e:1d:44:7e:62:d0:92:a5:
         8a:50:84:0c:06:e5:5a:1c:e6:28:08:62:28:e6:95:bf:c5:29:
         8d:63:f8:6c:e0:43:24:5e:02:45:9b:c2:0d:ff:2c:14:e3:5c:
         c3:20:36:10:01:e9:9d:dc:78:9e:df:9e:03:d6:75:e8:0a:f2:
         58:29:b0:8f:86:37:5a:69:99:24:ee:c2:94:0c:34:01:2f:e0:
         46:1a:6a:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9XROu+mKOP3k3gnnuB3BvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4
YWFlN2IwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjA1OWUzMzVkOWE5MWZiZTI1NDEyYTA4Zjk1Nzg4Y2E2MTdkNzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06TYAu1Jhcq8XXX7Kiei3ysalSgD
g+uBQ3aZrOpa5yuR1C6+r48dGbO15SzspmkC827FIVo0qrknyduVj4EsEn62Y62W
uhoPN49v9+X8/cyYXvti/5gko5hvMNHa1mDxFNwxj+s6wJ8oP/NvUAzlvYXu0Mp+
aT+PS8zy9NRA7KPmf9n/K+FWgbum1lHqNgONo0XTFKRojeTHq5x2vHs42+wlyv2n
DckTKsYEMnEvJ0tTlqj5rCKL7UXVH4VFOIaNqkzf+6qhUyhrr6/WKZe8ijsOky2t
rFrA1ezUoWu0WtsfyRNsRXnVC0H4J/vlB2KH/0YWcn73TwbES6HcjIpUtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLsFnjNdmpH74lQSoI+VeIymF9dLMB8GA1UdIwQY
MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt
MjkyYWU0NmU2MzAyLzEvdXdXZU0xMmFrZnZpVkJLZ2o1VjRqS1lYMTBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy
LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+QCMA0G
CSqGSIb3DQEBCwUAA4IBAQA3P7OZhJVWUwKxAdItF5f8o6/WSzm4fngTSCvb14+J
SAXcYfweA63fbpXxRqV4/44h7Ee3iwRWTqUtQODhR+1FDJDZ+gDPwqwHahXYlIdk
dPkmaVe5yKN4pU02P319swD6EM6LvIZ4TFWDp/ed1tEXxx0eV3mGswC3/lldu15K
QJxhPJXoqKwGFg3dUdaym4TWZOGpvqqDn1/jIrw2TggScz8ilRVYlEubdK0TTh1E
fmLQkqWKUIQMBuVaHOYoCGIo5pW/xSmNY/hs4EMkXgJFm8IN/ywU41zDIDYQAemd
3Hie354D1nXoCvJYKbCPhjdaaZkk7sKUDDQBL+BGGmqP
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:50:10 2026 by rpki-client