This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/uB1EV_9of9OBUO5nh6wjIcM7XYM.roa
File:                     uB1EV_9of9OBUO5nh6wjIcM7XYM.roa (raw, json)
Hash identifier:          JxjVwCsJHpCurdGu1ulwE9pvdYXZMK7HdluGzn2poh0=
Subject key identifier:   B8:1D:44:57:FF:68:7F:D3:81:50:EE:67:87:AC:23:21:C3:3B:5D:83
Certificate issuer:       /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial:       019B7F153F8B3A7C0755A7E4B1FE4DAF69F2
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/uB1EV_9of9OBUO5nh6wjIcM7XYM.roa
Signing time:             Fri 02 Jan 2026 14:20:57 +0000
ROA not before:           Fri 02 Jan 2026 14:20:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3356
IP address blocks:        193.178.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:3f:8b:3a:7c:07:55:a7:e4:b1:fe:4d:af:69:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
        Validity
            Not Before: Jan  2 14:20:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b81d4457ff687fd38150ee6787ac2321c33b5d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3f:a0:be:07:c8:57:49:86:9b:fe:b2:c2:2c:
                    de:ad:07:b1:fb:04:22:4d:ba:d2:79:a9:1b:ab:77:
                    fe:2b:97:e8:a8:f6:fc:5d:ab:69:c6:88:28:39:b0:
                    25:86:35:2a:02:9f:25:60:9b:4a:52:1c:a6:70:82:
                    8e:40:c0:d1:aa:87:f3:b0:d6:b6:e5:cd:69:92:53:
                    fe:2b:4f:21:9a:91:c8:94:30:65:65:c6:ad:77:c7:
                    c5:25:89:57:65:f9:40:d2:a2:1e:63:79:81:4a:e0:
                    5c:cb:b9:1a:5c:26:e3:c5:43:c5:cd:cb:55:7d:f6:
                    99:db:4a:39:c9:ba:5b:29:d1:c5:13:3d:ec:ee:d2:
                    f8:db:2d:a6:18:75:f0:25:d4:41:67:25:8e:20:c3:
                    b1:13:22:ab:d5:d7:a6:f3:8f:dd:3e:01:f5:f0:fb:
                    52:09:5a:24:0f:ee:ea:a1:f8:c2:41:ae:e6:06:b5:
                    74:a6:3f:42:0f:b3:eb:6b:b8:b6:99:85:df:8d:cd:
                    83:b4:28:e6:9b:46:3c:42:85:8b:02:29:2b:46:0b:
                    69:7f:68:cb:1b:23:ec:a1:d7:ef:88:b7:af:54:c4:
                    24:ae:a3:09:21:31:63:ac:a6:75:92:c1:c9:75:d5:
                    c5:66:b2:f3:67:70:47:76:c0:f3:ef:0c:cc:e3:12:
                    5e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1D:44:57:FF:68:7F:D3:81:50:EE:67:87:AC:23:21:C3:3B:5D:83
            X509v3 Authority Key Identifier:
                keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/uB1EV_9of9OBUO5nh6wjIcM7XYM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:8d:54:5b:bc:63:50:0c:72:e7:cf:a1:2d:ce:c0:5e:ef:b9:
         60:97:c9:0a:29:56:28:4e:76:f3:5f:45:39:da:c6:b3:c7:7c:
         4f:6d:6c:de:c8:a6:cf:e9:05:c2:b5:cc:6d:bc:f7:7c:3a:18:
         30:e5:46:91:c4:2a:52:11:9a:d0:3c:f4:5e:80:ce:77:fc:80:
         93:9e:4a:82:d9:83:c3:56:43:7d:c7:3a:0d:4a:6e:c3:de:b1:
         ed:fe:23:25:60:88:40:b6:c8:56:b1:b9:18:1a:b5:a1:53:fa:
         11:73:d3:16:26:62:fc:96:90:d4:f3:f4:52:06:fc:f7:f7:42:
         6b:be:32:fe:88:0e:2f:31:35:b2:f1:19:12:a6:6f:91:d1:2e:
         ed:8a:58:61:d2:ba:95:92:64:58:0b:47:e0:8a:77:71:97:09:
         18:4e:3b:f2:68:cf:09:b6:10:8e:e2:17:55:4d:59:07:26:b1:
         8f:1d:85:29:be:52:23:93:61:0a:ac:50:d6:49:5b:bc:c7:44:
         67:61:bb:de:81:2e:a2:01:c5:ed:2a:ec:6b:b5:1f:7c:03:c9:
         db:22:48:53:8f:b8:0b:36:ce:09:cc:9c:6f:3f:37:f5:a2:a5:
         b6:9e:4e:88:d2:3c:08:87:39:f9:aa:6b:b6:5a:ce:f8:96:78:
         cb:fa:3d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 16:03:19 2026 by rpki-client