This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/Utc_slWR8yHDk290AryGYchTlYA.roa
File:                     Utc_slWR8yHDk290AryGYchTlYA.roa (raw, json)
Hash identifier:          NUCfh9s0WjqwyOFskJUWEakWr/HjDtF3kDLbwsne7Ro=
Subject key identifier:   52:D7:3F:B2:55:91:F3:21:C3:93:6F:74:02:BC:86:61:C8:53:95:80
Certificate issuer:       /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial:       019B791010F913F59C2BE3AAE6EE418FD019
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/Utc_slWR8yHDk290AryGYchTlYA.roa
Signing time:             Thu 01 Jan 2026 10:17:34 +0000
ROA not before:           Thu 01 Jan 2026 10:17:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215128
IP address blocks:        193.151.244.0/24 maxlen: 24
                          2a13:6040::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:10:f9:13:f5:9c:2b:e3:aa:e6:ee:41:8f:d0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
        Validity
            Not Before: Jan  1 10:17:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=52d73fb25591f321c3936f7402bc8661c8539580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:30:b8:ff:db:40:3e:de:61:67:5f:ef:53:12:
                    20:54:9e:65:5a:c1:72:e0:96:60:12:aa:7f:39:6f:
                    c8:5b:b1:65:41:94:20:e3:99:b6:b5:07:61:5b:7d:
                    d1:27:0f:45:37:91:ce:1d:5e:c5:10:9c:41:44:cc:
                    3e:1a:b1:6c:5b:e8:dc:90:27:46:5d:57:15:62:b7:
                    1a:7a:ad:6d:82:7e:83:07:e7:d3:2c:44:bf:44:f6:
                    1a:09:45:c3:e9:5f:1c:e5:19:4e:76:38:bb:5a:33:
                    4b:dd:ac:eb:56:be:4c:27:44:ef:f4:c5:b0:2a:4e:
                    da:05:d4:55:74:62:0b:3e:16:95:5a:0e:0d:2e:ba:
                    0f:eb:57:a3:3d:10:07:a2:5f:99:ee:20:a1:6b:0f:
                    45:c8:de:3f:83:88:51:09:a1:09:25:ed:b4:b1:4b:
                    9d:4b:2c:b5:45:38:31:4e:4c:98:68:10:f5:0d:1a:
                    4e:96:b6:48:bd:f0:76:8d:fc:4e:5c:d0:03:42:50:
                    92:d8:36:c8:76:1b:98:1d:02:7d:a7:28:1c:17:10:
                    4e:da:c8:96:a9:04:97:b4:49:e1:b0:f2:99:96:b8:
                    63:3e:63:0b:c2:ef:fe:4e:88:b2:68:b1:8f:19:d5:
                    88:90:e4:46:dc:ed:e7:3e:1b:89:02:7f:46:4a:27:
                    3a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D7:3F:B2:55:91:F3:21:C3:93:6F:74:02:BC:86:61:C8:53:95:80
            X509v3 Authority Key Identifier:
                keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/Utc_slWR8yHDk290AryGYchTlYA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.151.244.0/24
                IPv6:
                  2a13:6040::/29

    Signature Algorithm: sha256WithRSAEncryption
         8e:15:67:35:7e:f1:fc:9a:94:f0:7d:f7:f8:34:ff:58:94:e2:
         c4:c8:af:de:d9:b5:dd:6e:e0:cd:4e:5a:5b:33:a3:ea:85:50:
         72:ac:24:92:0e:00:65:b5:9b:69:0f:c6:a3:39:d1:cd:a2:7a:
         28:b3:ac:5e:f8:db:3b:5e:25:bc:2c:41:33:05:b5:29:2a:8b:
         69:2a:e2:3a:bc:f8:40:62:1b:45:b0:5b:a3:99:7c:05:99:60:
         e9:5c:da:c1:43:f1:6d:87:9a:0f:b4:81:a3:7b:42:39:c5:07:
         53:02:25:6d:5b:99:2e:f7:6d:6d:79:5d:59:00:72:34:ea:e8:
         b6:26:07:da:8d:32:67:40:0e:b4:3f:d7:f6:7a:4d:06:42:72:
         71:c8:66:26:6a:90:ee:6d:bf:7b:02:e1:26:f5:12:6d:0f:5e:
         6a:f5:29:ab:5c:6f:57:cb:59:72:9b:65:b8:af:26:f6:6b:af:
         47:0e:f9:d8:b8:d6:c3:3f:67:f7:3b:78:92:40:80:d0:51:51:
         3c:1b:b6:36:cc:f9:38:73:e6:d3:a4:fc:51:71:84:fc:c6:8f:
         4c:16:30:8e:69:c8:72:59:e6:c8:39:c8:0e:3e:e2:28:cd:34:
         56:95:82:c3:47:81:2d:99:4e:8c:20:09:ef:66:83:c8:64:aa:
         bd:bc:1a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:58:34 2026 by rpki-client