This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/UAe6hHF4tY5tJRAZ4zl4Keq33hE.roa
File:                     UAe6hHF4tY5tJRAZ4zl4Keq33hE.roa (raw, json)
Hash identifier:          4qhi3u98mfE9B0D9RD9MOTzasDKVZY5O0ywJYLJl2BU=
Subject key identifier:   50:07:BA:84:71:78:B5:8E:6D:25:10:19:E3:39:78:29:EA:B7:DE:11
Certificate issuer:       /CN=57e1d4a3095e9fa8b937d7faa437593727d23932
Certificate serial:       019B7BA42090B75096EDF7B30CD92A3CA2E0
Authority key identifier: 57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/UAe6hHF4tY5tJRAZ4zl4Keq33hE.roa
Signing time:             Thu 01 Jan 2026 22:18:32 +0000
ROA not before:           Thu 01 Jan 2026 22:18:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42337
IP address blocks:        95.128.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:20:90:b7:50:96:ed:f7:b3:0c:d9:2a:3c:a2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e1d4a3095e9fa8b937d7faa437593727d23932
        Validity
            Not Before: Jan  1 22:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5007ba847178b58e6d251019e3397829eab7de11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9f:a0:32:d0:d9:2e:65:ba:a3:61:98:5b:cd:
                    85:0a:0d:4a:54:39:8b:2d:ba:1f:ec:48:de:91:82:
                    62:25:0b:2a:0f:5e:d7:10:1b:6d:4c:21:27:ba:84:
                    da:5a:36:17:6d:c4:84:38:f1:a7:38:7e:9e:b0:12:
                    f1:c1:d3:b4:0b:9a:a7:56:7d:80:98:9a:08:ce:a6:
                    97:4e:f8:0a:79:e3:8d:0d:c0:af:ef:ba:df:40:94:
                    d6:b4:c6:98:e0:b0:73:7c:80:02:72:ee:65:39:57:
                    5c:cb:4b:81:53:1a:31:21:74:76:50:65:de:45:0d:
                    1b:d3:46:62:6b:c4:70:e3:16:01:e5:5a:64:62:8a:
                    73:2e:6b:7a:f7:ef:12:bb:2f:be:29:94:40:a5:72:
                    86:0e:69:03:10:3b:48:07:bf:bd:67:e5:fd:3b:bd:
                    e4:b9:6d:c0:38:f9:fd:e4:b7:47:f0:50:5f:8b:c4:
                    c1:2b:26:6b:cf:41:52:f9:56:b6:46:41:a2:10:60:
                    7d:d5:33:55:f0:6f:28:51:70:2e:44:27:fc:c9:63:
                    61:0b:de:ae:6b:da:56:e2:81:b2:53:d1:cb:74:c4:
                    3e:8d:7d:46:65:fd:ef:92:54:5d:b6:4b:24:c1:ac:
                    e2:5b:6b:c5:c5:c2:86:b4:e8:93:6c:c9:5d:b3:2c:
                    51:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:07:BA:84:71:78:B5:8E:6D:25:10:19:E3:39:78:29:EA:B7:DE:11
            X509v3 Authority Key Identifier:
                keyid:57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/UAe6hHF4tY5tJRAZ4zl4Keq33hE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.128.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:21:ac:50:51:37:75:3b:ff:e9:fe:db:67:da:f6:e8:85:dd:
         52:2d:e4:c8:ac:36:01:34:1b:92:ec:b3:57:ce:80:49:a8:37:
         91:cc:ac:fa:70:cc:5d:94:23:7f:4a:d5:14:e8:b3:d1:76:6e:
         34:84:10:3d:45:be:dd:a9:63:a4:26:98:2a:4b:25:d9:76:7d:
         6a:e8:f5:f3:f8:4f:dc:99:ee:4e:f4:9b:2c:e5:41:1c:39:9d:
         73:5f:46:a9:66:44:4e:1a:05:20:c9:54:f0:28:38:93:f9:97:
         e3:98:16:e7:2d:99:72:e8:62:dd:c5:41:82:f0:be:12:f6:a1:
         31:1b:39:8b:4c:bc:da:a8:b1:85:3f:5a:10:c7:38:cf:58:27:
         5a:08:4f:88:ca:ce:b6:57:ac:0d:2e:ae:84:13:85:0f:f3:c1:
         47:d4:d7:aa:1c:75:6a:6b:54:d8:20:0a:5c:f1:f6:ee:38:20:
         56:72:14:f5:6a:01:3b:24:3c:5c:dc:9a:b7:af:54:77:a9:fe:
         46:ec:b3:94:94:fc:8f:30:e6:8b:ad:d7:8c:89:e5:c2:cb:66:
         f7:5a:43:75:30:6c:af:bb:12:54:a6:6f:15:f7:b5:04:94:0c:
         3e:ee:f1:97:e1:34:dc:f9:10:79:a8:13:89:e7:f8:6d:d6:be:
         ea:df:13:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:16:06 2026 by rpki-client