This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/UILEqiibWmJACV4hyX19R6Akp0c.roa
File:                     UILEqiibWmJACV4hyX19R6Akp0c.roa (raw, json)
Hash identifier:          DiUZ6R2kdK8srCGUiztrMBuvP7pRwrZmlvNKGyfdufg=
Subject key identifier:   50:82:C4:AA:28:9B:5A:62:40:09:5E:21:C9:7D:7D:47:A0:24:A7:47
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       019BEF2D20193681D7B1E7C02BCDB21D265C
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/UILEqiibWmJACV4hyX19R6Akp0c.roa
Signing time:             Sat 24 Jan 2026 08:44:30 +0000
ROA not before:           Sat 24 Jan 2026 08:44:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     984
IP address blocks:        95.155.130.0/24 maxlen: 24
                          152.89.84.0/24 maxlen: 24
                          152.89.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ef:2d:20:19:36:81:d7:b1:e7:c0:2b:cd:b2:1d:26:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Jan 24 08:44:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5082c4aa289b5a6240095e21c97d7d47a024a747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:03:e8:88:1e:01:c0:31:b2:7c:a6:ef:cf:df:
                    d0:e9:27:9d:17:6d:d7:44:cb:a9:e9:4b:61:cc:43:
                    54:17:c6:2a:a8:19:c4:4f:cc:c6:05:7c:45:9d:56:
                    d8:d8:04:4e:27:f3:8e:9c:7f:45:5f:05:d1:4e:8e:
                    1c:20:51:eb:d4:3b:79:cc:a3:a6:8f:60:12:ea:e3:
                    06:26:2e:a8:94:cc:1d:fd:57:13:0d:d8:95:98:31:
                    c4:40:2f:26:60:53:0d:ca:1e:af:9e:e9:db:72:69:
                    ce:d1:eb:2e:17:b1:a0:f8:e5:1d:a1:54:81:a2:cc:
                    37:4c:36:ce:86:0b:0b:d4:ac:27:a9:d0:42:b4:5c:
                    dd:fb:ac:55:6c:78:cb:e2:03:ea:6f:15:89:55:3b:
                    aa:8e:b4:25:75:2a:eb:a2:42:23:4f:bc:b5:a6:bc:
                    78:04:51:4c:5a:e1:f5:ba:0e:5d:ac:45:44:88:81:
                    a3:b4:f6:45:d7:2a:10:76:49:48:e9:03:08:23:70:
                    59:60:07:96:8f:a6:12:f0:07:71:f1:51:3e:f4:12:
                    04:a6:00:bc:49:79:fe:99:d5:fb:b0:d0:55:d9:12:
                    3b:aa:83:5b:d6:ae:8a:4e:e2:75:7d:a4:2f:d2:d0:
                    11:0b:03:f5:0c:70:7e:52:d7:98:35:9b:01:de:0f:
                    bc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:82:C4:AA:28:9B:5A:62:40:09:5E:21:C9:7D:7D:47:A0:24:A7:47
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/UILEqiibWmJACV4hyX19R6Akp0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.155.130.0/24
                  152.89.84.0/24
                  152.89.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:64:1b:5b:e1:f9:b0:eb:57:b0:72:a1:f0:1f:63:83:79:42:
         ce:fe:bd:f2:5c:fc:d8:d1:63:14:c3:45:3a:59:50:16:2c:10:
         3b:90:b0:c0:06:2b:3a:4c:0a:2e:c3:c2:f5:89:ac:cb:20:b5:
         77:d4:5d:06:e9:f1:73:20:26:08:20:5c:1c:25:d4:8a:f2:20:
         85:43:09:63:5d:27:e5:d1:52:5d:8e:a9:b4:bf:32:85:1a:83:
         9a:9d:ff:1d:18:ad:c6:b3:53:65:5b:52:72:88:fe:04:4d:3d:
         d7:73:40:27:7b:e0:14:cc:dd:79:a3:b8:61:34:7f:d6:74:8a:
         c4:35:7b:83:3c:ed:08:e2:b3:db:3d:48:d9:28:db:70:79:8f:
         52:81:b1:dd:4f:cd:47:08:99:8c:58:21:68:e3:b6:46:11:88:
         6e:43:db:06:be:92:28:5f:1a:39:df:8b:65:73:87:3b:5a:91:
         5a:d2:97:cc:56:90:25:47:84:fa:c3:ce:03:77:14:35:88:53:
         92:6b:ea:c1:3c:8b:41:cd:7f:d1:70:9d:d5:06:af:65:e9:9b:
         72:3a:66:a2:f4:ba:99:5f:05:c5:ea:83:c6:2d:36:a6:b3:f1:
         4f:6a:56:34:3c:06:45:e1:c1:8a:0d:46:8a:86:a2:f7:cc:65:
         fa:43:af:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:59:33 2026 by rpki-client