This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Ub8GbvDA35aTIzVecXGmXtHsXEc.roa
File:                     Ub8GbvDA35aTIzVecXGmXtHsXEc.roa (raw, json)
Hash identifier:          elt6C1OboYliVZXwfhYgZV3fxNGiHeY3wGhmbW2ynL4=
Subject key identifier:   51:BF:06:6E:F0:C0:DF:96:93:23:35:5E:71:71:A6:5E:D1:EC:5C:47
Certificate issuer:       /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial:       019B7C7F67E1EAF84E8F06A5CE34BF17FE29
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Ub8GbvDA35aTIzVecXGmXtHsXEc.roa
Signing time:             Fri 02 Jan 2026 02:18:02 +0000
ROA not before:           Fri 02 Jan 2026 02:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     7155
IP address blocks:        92.51.216.0/22 maxlen: 24
                          92.51.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:67:e1:ea:f8:4e:8f:06:a5:ce:34:bf:17:fe:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
        Validity
            Not Before: Jan  2 02:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=51bf066ef0c0df969323355e7171a65ed1ec5c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4b:94:27:2d:b1:75:93:e7:3b:bd:ef:fa:ac:
                    62:76:ce:ea:4d:0a:93:a6:f3:7f:13:ba:d8:2a:a9:
                    11:14:19:4f:18:b1:88:29:98:ab:24:22:8c:20:5b:
                    92:6a:58:83:04:f5:98:9e:19:6a:a1:1c:cb:29:16:
                    ca:a9:e0:68:a4:35:ce:57:29:4f:89:59:e7:ca:4b:
                    01:41:2e:7b:6f:60:8a:50:9d:5b:5a:3d:0b:51:24:
                    13:79:95:80:4c:40:75:51:76:37:f0:7d:d4:6b:a4:
                    11:a8:65:b6:df:6c:8b:2b:9f:7f:3c:6b:1f:03:f8:
                    c5:b2:c7:75:60:78:a7:7a:59:31:f5:fe:68:ef:af:
                    6d:df:85:83:aa:0c:39:c0:2e:4b:9d:56:86:95:c0:
                    e5:0f:b9:57:52:99:a8:47:d8:09:45:41:2c:df:7c:
                    ee:b0:1a:eb:7e:06:74:ea:a8:6f:b6:b9:f2:83:11:
                    bc:8a:6e:71:7c:73:fb:7b:13:1c:de:a7:5a:64:90:
                    12:f4:96:f2:8f:35:50:f6:5b:5e:fc:95:00:9f:c0:
                    34:2b:e2:5b:c1:24:ce:b9:0a:f0:bd:f6:72:74:6b:
                    e0:74:66:c7:c1:86:f1:e3:2d:8f:7a:0e:84:3f:fe:
                    a3:34:f3:ea:9c:92:c8:28:ca:60:f3:2f:4d:07:83:
                    2a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BF:06:6E:F0:C0:DF:96:93:23:35:5E:71:71:A6:5E:D1:EC:5C:47
            X509v3 Authority Key Identifier:
                keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Ub8GbvDA35aTIzVecXGmXtHsXEc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.51.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ab:8d:e4:be:4c:b0:ee:99:39:b8:c5:f6:e2:57:5b:84:11:52:
         fb:35:eb:78:8d:6a:cf:fc:71:db:ca:a0:a1:11:99:ea:fe:90:
         f9:8d:c5:c0:b1:4d:69:6b:7a:3b:cd:56:47:dd:24:32:1f:dc:
         05:65:47:31:64:7d:62:89:26:bd:a8:30:aa:36:a1:36:28:71:
         85:df:17:d2:7b:ae:dd:19:51:be:ee:92:3a:4c:7e:8d:7a:0d:
         32:34:71:aa:b7:ec:15:8d:90:3e:3c:62:81:5c:2d:af:af:85:
         a6:59:ca:12:b4:3a:1d:99:3b:4c:a8:0e:e0:ee:46:ad:ad:da:
         c9:79:c1:f1:0e:05:17:c3:28:70:36:79:45:36:d8:e3:5b:93:
         6e:c1:e6:26:17:39:9f:75:bf:b0:f3:34:96:8f:f9:9a:f4:1f:
         60:08:04:ad:34:42:3b:f4:cb:32:7c:f4:5f:16:08:c7:99:e6:
         52:6d:03:04:fc:d8:87:b1:51:d5:84:cd:51:79:76:b3:c0:19:
         22:46:7d:ac:58:be:1a:d4:9b:a0:fd:83:4e:1d:10:e6:56:df:
         5c:89:79:0d:17:4c:8b:41:07:10:4d:bd:f3:e3:e9:d0:fd:e0:
         53:5e:1f:de:44:3d:56:d6:ce:3c:6e:58:a2:4d:4b:76:10:79:
         00:65:2f:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8f2fh6vhOjwalzjS/F/4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGU0NTNhZmZlODk1YjY0NTJiODQwMjc0MzdjNWMwMGZk
MzcwNjcwHhcNMjYwMTAyMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWJmMDY2ZWYwYzBkZjk2OTMyMzM1NWU3MTcxYTY1ZWQxZWM1YzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykuUJy2xdZPnO73v+qxids7qTQqT
pvN/E7rYKqkRFBlPGLGIKZirJCKMIFuSaliDBPWYnhlqoRzLKRbKqeBopDXOVylP
iVnnyksBQS57b2CKUJ1bWj0LUSQTeZWATEB1UXY38H3Ua6QRqGW232yLK59/PGsf
A/jFssd1YHinelkx9f5o769t34WDqgw5wC5LnVaGlcDlD7lXUpmoR9gJRUEs33zu
sBrrfgZ06qhvtrnygxG8im5xfHP7exMc3qdaZJAS9JbyjzVQ9lte/JUAn8A0K+Jb
wSTOuQrwvfZydGvgdGbHwYbx4y2Peg6EP/6jNPPqnJLIKMpg8y9NB4MqKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFG/Bm7wwN+WkyM1XnFxpl7R7FxHMB8GA1UdIwQY
MBaAFNxORTr/6JW2RSuEAnQ3xcAP03BnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEt
MTgyMjg2N2UxNTk2LzEvVWI4R2J2REEzNWFUSXpWZWNYR21YdEhzWEVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEtMTgyMjg2N2UxNTk2
LzEvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXDPYMA0G
CSqGSIb3DQEBCwUAA4IBAQCrjeS+TLDumTm4xfbiV1uEEVL7Net4jWrP/HHbyqCh
EZnq/pD5jcXAsU1pa3o7zVZH3SQyH9wFZUcxZH1iiSa9qDCqNqE2KHGF3xfSe67d
GVG+7pI6TH6Neg0yNHGqt+wVjZA+PGKBXC2vr4WmWcoStDodmTtMqA7g7katrdrJ
ecHxDgUXwyhwNnlFNtjjW5NuweYmFzmfdb+w8zSWj/ma9B9gCAStNEI79MsyfPRf
FgjHmeZSbQME/NiHsVHVhM1ReXazwBkiRn2sWL4a1Jug/YNOHRDmVt9ciXkNF0yL
QQcQTb3z4+nQ/eBTXh/eRD1W1s48bliiTUt2EHkAZS+8
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:13:59 2026 by rpki-client