This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa
File:                     UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa (raw, json)
Hash identifier:          Y4z7KLj7vfcDesQxa00pP19sxOBjnRSBjEe98F7tXaU=
Subject key identifier:   51:C4:35:22:9A:5C:89:CF:50:B0:CA:B8:9B:60:F6:80:EF:59:A4:89
Certificate issuer:       /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial:       019B7BA3D9D7AE02C6F5BD5E6C79C9F14787
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa
Signing time:             Thu 01 Jan 2026 22:18:14 +0000
ROA not before:           Thu 01 Jan 2026 22:18:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44636
IP address blocks:        178.17.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:d9:d7:ae:02:c6:f5:bd:5e:6c:79:c9:f1:47:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
        Validity
            Not Before: Jan  1 22:18:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=51c435229a5c89cf50b0cab89b60f680ef59a489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:9b:41:f5:98:0b:3e:47:03:95:07:2f:55:
                    89:b8:19:0c:9a:65:77:56:1a:c1:95:7f:8c:2b:3a:
                    56:b3:85:71:83:ba:b3:59:38:d0:76:ce:1b:83:1b:
                    13:99:46:f2:47:1d:59:24:2f:ed:03:38:3a:2d:a0:
                    ec:cc:4c:8a:b5:3b:8c:93:68:ea:aa:8a:6e:75:6c:
                    7f:7e:d3:84:59:18:89:e8:b8:9f:0d:6c:3c:6b:2d:
                    57:dd:ad:b3:1c:64:cc:d1:7c:b7:7f:7c:52:30:74:
                    12:c8:cd:ae:2b:e2:81:f6:7c:4e:1b:a5:91:e9:1b:
                    bf:a1:70:9c:f2:1d:ec:b3:d4:9f:27:0d:76:73:8f:
                    cb:22:5c:ba:ad:ce:03:14:c4:12:78:1b:6b:55:e6:
                    4f:d3:5d:ba:7d:a2:79:48:33:05:5e:e8:92:67:07:
                    b6:33:f1:da:c8:e4:15:7b:14:e0:3b:8e:c8:da:3e:
                    87:9b:ed:c3:26:39:3f:19:49:df:c9:8b:6a:3b:1b:
                    68:83:13:54:d2:5e:a4:bb:5f:4d:90:24:39:ee:a3:
                    2f:98:e4:37:f7:55:63:54:e7:b1:91:c4:02:8e:00:
                    b0:e6:7d:32:69:f5:40:8c:e3:44:d3:82:b5:69:06:
                    2c:95:08:46:e2:f8:71:e8:ec:56:bd:ff:a5:06:40:
                    0e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C4:35:22:9A:5C:89:CF:50:B0:CA:B8:9B:60:F6:80:EF:59:A4:89
            X509v3 Authority Key Identifier:
                keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.17.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:9c:b9:43:06:07:ea:fb:dd:e5:20:83:b8:6d:e0:0f:ee:f4:
         6f:99:ee:13:3c:c4:38:5b:77:0f:f6:c3:69:44:a7:56:11:20:
         0d:e4:4c:f9:e8:a0:09:e6:c2:17:da:3a:d8:a1:09:b0:4e:95:
         a6:31:87:a2:15:f4:b0:41:26:70:60:7d:05:c7:29:00:e3:ff:
         03:73:e2:c3:3b:0f:a4:8e:df:1a:95:3f:71:92:4f:60:b7:76:
         18:94:65:1c:4b:b8:12:7f:95:80:6d:44:58:14:e5:d2:4a:ac:
         c9:9c:0b:2d:dc:fe:cd:ba:01:00:e2:b5:15:9d:02:55:4d:25:
         e9:8d:5f:1d:d6:fb:9d:5a:3f:0d:27:29:37:e9:74:53:0c:d2:
         95:c4:c7:15:26:74:9f:8f:06:66:2c:c5:89:a7:ef:d1:67:d7:
         cb:cb:91:d1:2a:77:bf:c4:46:ed:f8:6b:bb:9a:f6:42:d0:b4:
         93:79:84:02:44:4d:da:fd:54:6a:e0:73:94:ef:a3:3a:3b:a5:
         b1:60:0b:ca:30:92:4e:6c:1c:56:a0:47:12:03:3c:2b:f7:df:
         cc:ed:d1:46:b5:ca:cb:4c:89:c6:a2:70:2f:60:cd:39:f8:c7:
         7c:96:df:fb:47:69:12:3e:38:83:c5:79:b7:17:7a:ef:95:c0:
         3b:cc:81:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:35:53 2026 by rpki-client