This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/HUNURVAA892dDIzCfcEspa0FlqE.roa
File:                     HUNURVAA892dDIzCfcEspa0FlqE.roa (raw, json)
Hash identifier:          zuRP0sT5Q7shDkaltBQBAdM4I77s5Z8T+hSw7WgROyk=
Subject key identifier:   1D:43:54:45:50:00:F3:DD:9D:0C:8C:C2:7D:C1:2C:A5:AD:05:96:A1
Certificate issuer:       /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial:       019B7DCA0A7DDAB7A77DC3FADCF67AB85E85
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/HUNURVAA892dDIzCfcEspa0FlqE.roa
Signing time:             Fri 02 Jan 2026 08:19:11 +0000
ROA not before:           Fri 02 Jan 2026 08:19:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59729
IP address blocks:        91.218.176.0/22 maxlen: 24
                          91.232.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:0a:7d:da:b7:a7:7d:c3:fa:dc:f6:7a:b8:5e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
        Validity
            Not Before: Jan  2 08:19:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1d4354455000f3dd9d0c8cc27dc12ca5ad0596a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:89:2f:f4:80:4d:01:a7:66:c4:1b:c4:2c:1c:
                    45:f9:ad:55:65:69:2d:45:f2:42:7f:cd:d3:ff:e0:
                    a8:09:40:46:51:3b:a4:d6:b5:66:8e:a9:02:d5:aa:
                    58:37:2d:e5:ed:0b:48:3c:cc:bc:28:97:94:4b:f7:
                    58:62:b9:69:cf:b8:3f:30:d4:66:c6:3a:11:35:ba:
                    c3:98:7f:c9:d5:7d:a5:93:f9:09:8d:c5:bf:44:51:
                    2f:40:0a:02:e3:ec:fe:4a:e2:30:5f:21:a5:5a:33:
                    6b:b6:7a:03:36:15:ea:1c:68:05:b6:cb:a7:a5:c5:
                    07:73:00:da:55:4d:b0:99:ed:15:2e:f1:2c:1d:d9:
                    7f:88:53:c3:f1:e4:7a:94:77:fb:21:30:cd:51:09:
                    59:8c:1d:6b:41:39:ec:f0:25:cc:18:fb:08:6c:91:
                    3f:55:cc:f4:ce:94:38:0f:d1:5e:3c:b9:52:05:82:
                    67:8b:ce:31:72:d8:ba:d1:50:71:ab:97:d8:5b:b8:
                    c9:6f:ff:44:34:ce:44:03:4b:ef:b3:5c:5e:1f:52:
                    1f:fd:33:0a:86:af:6e:35:b0:a4:d4:36:65:1a:e2:
                    f5:8f:c9:ed:9a:49:78:2d:4e:55:c8:0c:1e:63:c9:
                    e6:34:6c:26:9d:58:40:7a:b7:ce:a5:06:d2:53:87:
                    34:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:43:54:45:50:00:F3:DD:9D:0C:8C:C2:7D:C1:2C:A5:AD:05:96:A1
            X509v3 Authority Key Identifier:
                keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/HUNURVAA892dDIzCfcEspa0FlqE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.218.176.0/22
                  91.232.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:1c:96:b2:9c:af:84:83:74:0c:e5:cc:19:dc:2f:9c:78:fb:
         26:27:5a:20:6e:ae:6f:2e:36:90:11:d4:95:84:1a:b3:79:3a:
         17:d6:0c:f1:2a:d0:06:b5:be:4a:9d:24:40:4a:0a:7d:2e:c4:
         b1:a9:07:20:61:86:e3:b4:1b:da:72:3d:fb:78:58:32:54:73:
         b0:bf:94:c7:4e:ef:33:e2:b4:23:25:77:e6:f4:16:a1:46:5a:
         c6:95:76:28:71:2d:c6:f5:07:90:ad:6f:50:34:15:c4:0d:ab:
         54:5a:d2:cc:23:61:ee:9c:45:ae:41:a7:6b:9c:78:2e:3e:45:
         f9:3d:63:80:85:41:22:7f:ae:46:c8:7c:07:f0:3f:90:4c:68:
         c5:32:de:bd:48:36:88:9b:3f:9d:53:58:be:b6:ed:22:b5:22:
         bf:dd:ab:28:2b:60:cd:38:a5:39:85:96:dd:c5:ec:ca:b7:50:
         72:c4:b5:02:43:90:85:b7:a4:5a:03:b7:6e:e4:7b:1b:21:95:
         4d:cd:50:bb:cf:d8:d1:fc:ad:0a:c7:17:bd:85:ed:6a:28:bb:
         2c:f1:94:42:fe:4c:a3:4d:8e:26:fb:d1:fb:03:c8:71:02:b9:
         de:90:08:63:8d:b8:63:5a:66:d1:33:62:66:3d:98:e0:09:6b:
         04:4a:16:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:11:52 2026 by rpki-client