This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ugtI-QyWNOjJ59RgJ8WbbnFfW4U.roa
File:                     ugtI-QyWNOjJ59RgJ8WbbnFfW4U.roa (raw, json)
Hash identifier:          aT3mMJhpwKfI0RkCBtFq/BKu85xA6+3aVTdjvSvqPZQ=
Subject key identifier:   BA:0B:48:F9:0C:96:34:E8:C9:E7:D4:60:27:C5:9B:6E:71:5F:5B:85
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       019BD62BEEB7EF193C86AEB9B0E438FAC082
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ugtI-QyWNOjJ59RgJ8WbbnFfW4U.roa
Signing time:             Mon 19 Jan 2026 12:12:41 +0000
ROA not before:           Mon 19 Jan 2026 12:12:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        95.155.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d6:2b:ee:b7:ef:19:3c:86:ae:b9:b0:e4:38:fa:c0:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Jan 19 12:12:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ba0b48f90c9634e8c9e7d46027c59b6e715f5b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fc:28:bc:18:57:17:0e:1e:e8:27:79:31:d1:
                    03:c2:69:6e:07:f1:c2:3f:54:c2:f2:34:57:22:1e:
                    c3:72:51:f9:01:2d:9c:be:40:c1:6e:51:59:8e:29:
                    91:70:75:5e:85:f5:01:7f:df:d2:4b:75:04:96:90:
                    ac:8d:3f:df:45:6a:56:f0:96:06:aa:e5:8c:81:fc:
                    78:dc:c7:76:df:be:d9:c8:03:e4:5e:4c:9a:29:e1:
                    cf:37:ea:ec:7a:61:15:4e:51:4f:d0:a5:5a:67:e4:
                    51:ae:3c:d8:d6:ca:85:ca:ce:4a:8e:51:25:ba:5e:
                    b8:c4:35:46:50:ea:a4:75:3d:db:29:db:29:96:f6:
                    6b:a3:c0:9d:ad:4a:80:8d:70:28:91:79:4d:90:02:
                    96:8c:c7:33:41:3a:50:73:b9:10:6d:99:2a:78:33:
                    66:df:f2:c6:b7:6d:3c:8e:c2:a4:5f:a8:a1:eb:67:
                    78:23:1f:77:0d:c1:4c:c5:ed:05:0f:62:f4:fe:90:
                    73:2e:3c:de:25:f7:bc:1a:1c:d3:f9:19:d3:45:08:
                    48:98:3a:31:24:69:dc:ce:55:36:07:f7:20:88:75:
                    b8:81:64:36:ac:e9:8d:d2:0a:e6:7a:87:5f:6b:13:
                    11:ca:89:c1:17:36:45:39:23:96:25:ad:70:48:67:
                    79:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0B:48:F9:0C:96:34:E8:C9:E7:D4:60:27:C5:9B:6E:71:5F:5B:85
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ugtI-QyWNOjJ59RgJ8WbbnFfW4U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.155.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:80:b3:9c:04:01:04:b6:f0:39:e9:44:16:55:e8:9d:53:98:
         b4:ed:39:3c:57:c9:63:a4:21:f6:7b:db:83:48:18:cf:42:90:
         91:8a:df:0b:3d:91:6a:6a:c0:c0:f8:4c:bf:d6:53:50:64:23:
         bc:95:f7:79:9a:a1:bc:a1:e4:61:b5:51:53:ed:f4:06:fa:d4:
         e1:ba:0f:e3:f5:7f:97:15:d5:56:7a:7d:76:4a:21:75:e2:75:
         08:5d:13:7d:00:b0:65:95:fb:2e:54:2a:f9:ee:33:df:5f:71:
         1a:b3:fc:10:03:14:6d:20:d4:c2:a3:8f:9a:89:a4:53:47:22:
         15:51:2b:c8:57:91:a4:ac:6b:b6:f1:6d:7a:92:22:52:36:d1:
         6c:85:c1:76:af:4d:ae:c0:e2:9d:49:3b:89:a1:94:72:ef:2b:
         75:45:a7:bc:8e:34:6f:88:73:64:73:2b:99:bf:cc:0f:92:48:
         10:b5:a7:34:81:40:f0:e3:ed:b8:b5:f2:aa:1d:34:ec:4f:2a:
         ac:7a:20:4c:16:bc:e0:27:d9:22:88:18:24:4b:b0:60:08:1b:
         92:2c:45:dc:fc:d3:74:4d:5a:fb:0f:e9:63:73:42:1b:dc:ba:
         e9:cc:28:7d:44:51:2e:1e:dc:c3:a2:bc:04:1b:4b:bd:47:5d:
         2d:35:9b:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZvWK+637xk8hq65sOQ4+sCCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjYwMTE5MTIxMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTBiNDhmOTBjOTYzNGU4YzllN2Q0NjAyN2M1OWI2ZTcxNWY1Yjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPwovBhXFw4e6Cd5MdEDwmluB/HC
P1TC8jRXIh7DclH5AS2cvkDBblFZjimRcHVehfUBf9/SS3UElpCsjT/fRWpW8JYG
quWMgfx43Md2377ZyAPkXkyaKeHPN+rsemEVTlFP0KVaZ+RRrjzY1sqFys5KjlEl
ul64xDVGUOqkdT3bKdsplvZro8CdrUqAjXAokXlNkAKWjMczQTpQc7kQbZkqeDNm
3/LGt208jsKkX6ih62d4Ix93DcFMxe0FD2L0/pBzLjzeJfe8GhzT+RnTRQhImDox
JGnczlU2B/cgiHW4gWQ2rOmN0grmeodfaxMRyonBFzZFOSOWJa1wSGd5tQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLoLSPkMljToyefUYCfFm25xX1uFMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvdWd0SS1ReVdOT2pKNTlSZ0o4V2JibkZmVzRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX5udMA0G
CSqGSIb3DQEBCwUAA4IBAQBYgLOcBAEEtvA56UQWVeidU5i07Tk8V8ljpCH2e9uD
SBjPQpCRit8LPZFqasDA+Ey/1lNQZCO8lfd5mqG8oeRhtVFT7fQG+tThug/j9X+X
FdVWen12SiF14nUIXRN9ALBllfsuVCr57jPfX3Eas/wQAxRtINTCo4+aiaRTRyIV
USvIV5GkrGu28W16kiJSNtFshcF2r02uwOKdSTuJoZRy7yt1Rae8jjRviHNkcyuZ
v8wPkkgQtac0gUDw4+24tfKqHTTsTyqseiBMFrzgJ9kiiBgkS7BgCBuSLEXc/NN0
TVr7D+ljc0Ib3LrpzCh9RFEuHtzDorwEG0u9R10tNZsR
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:32:33 2026 by rpki-client