This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Uv_SGqi2JF1nd4Jts8M0JJNv8bw.roa
File:                     Uv_SGqi2JF1nd4Jts8M0JJNv8bw.roa (raw, json)
Hash identifier:          huCBe0RamT/j33CuGs+nRv/QVf6GhjQmEOheNJxHbgU=
Subject key identifier:   52:FF:D2:1A:A8:B6:24:5D:67:77:82:6D:B3:C3:34:24:93:6F:F1:BC
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       019B78A2F416B5B4A36B4F519E07BD2B9606
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Uv_SGqi2JF1nd4Jts8M0JJNv8bw.roa
Signing time:             Thu 01 Jan 2026 08:18:23 +0000
ROA not before:           Thu 01 Jan 2026 08:18:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     36666
IP address blocks:        83.143.115.0/24 maxlen: 24
                          94.156.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 02:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:f4:16:b5:b4:a3:6b:4f:51:9e:07:bd:2b:96:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 08:18:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=52ffd21aa8b6245d6777826db3c33424936ff1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:b1:81:29:bf:fd:ca:3f:2e:73:7e:5c:09:
                    db:62:2d:79:1c:70:fd:10:00:d2:91:cf:34:10:cc:
                    7c:37:8f:31:e7:65:8e:e0:c5:18:4e:eb:09:00:a0:
                    4a:92:b2:c2:b4:7d:9e:c4:e2:1b:7b:56:c9:3b:2f:
                    21:03:f3:3b:ed:dd:61:75:6e:1b:da:78:b0:78:90:
                    c5:fa:8a:0c:fb:ed:a8:8e:3d:64:37:25:17:61:16:
                    18:a4:ba:c7:8e:74:ad:59:39:16:41:ce:26:4c:3b:
                    54:d3:75:19:e2:7f:f5:89:58:3c:57:cc:5e:16:9c:
                    50:fa:f5:b7:07:db:0e:97:fc:d0:80:73:f2:ca:75:
                    6c:44:9a:be:00:8d:51:c8:dc:0d:b5:d5:3a:30:71:
                    fe:3b:44:97:0f:b1:7e:9f:f7:2d:98:b1:6d:56:db:
                    3e:5e:42:c4:09:eb:1b:84:d0:f6:fe:60:8a:6e:65:
                    88:9e:0d:99:69:bd:d1:b3:54:3a:09:ee:fc:97:8f:
                    ec:79:ff:09:03:a8:11:6e:79:69:7c:c3:7b:1d:5a:
                    c3:b8:2c:e9:8c:c1:7c:9e:92:ef:84:ec:20:aa:6a:
                    c2:03:51:c0:75:24:5b:c2:5a:ce:d0:63:38:56:44:
                    26:1a:2e:a8:42:a6:68:38:14:4b:83:4b:92:ac:08:
                    75:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FF:D2:1A:A8:B6:24:5D:67:77:82:6D:B3:C3:34:24:93:6F:F1:BC
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Uv_SGqi2JF1nd4Jts8M0JJNv8bw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.143.115.0/24
                  94.156.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:e0:f9:70:d2:ac:36:9c:fd:8d:e6:59:bf:77:ff:9f:4d:e9:
         dd:da:a3:72:0e:18:cb:ab:f6:f0:c5:2d:0f:7b:0a:85:5e:0f:
         40:35:a0:66:97:3d:dc:5e:93:c5:8f:3c:38:a0:f5:f7:c4:88:
         01:98:dd:8e:d3:44:6c:44:f3:a1:46:27:de:5d:fd:35:dd:1b:
         52:60:e8:4e:20:bf:59:3b:cb:b6:64:2e:5c:6d:07:93:10:eb:
         3c:8f:bc:c7:5f:60:23:d3:4c:35:dc:4d:07:3f:7c:53:77:5f:
         9a:99:4b:cd:05:3c:1e:5a:ff:f5:ed:4a:0c:3d:87:ab:46:2a:
         fc:e5:83:86:24:d0:5f:5d:ce:63:5b:dd:fe:33:56:33:0c:60:
         82:17:08:5f:15:a3:e8:05:16:d7:d9:ea:e4:cf:16:c5:57:fa:
         ad:26:64:cb:56:c5:6e:20:ff:aa:e9:7a:86:e8:92:b3:04:17:
         3a:71:1d:16:e6:db:2c:8d:df:e4:08:ce:52:2d:41:47:09:15:
         31:52:5f:98:2e:d8:31:44:c4:ac:17:cc:ce:d2:47:27:93:b3:
         f3:91:4c:cc:65:20:52:c0:a9:43:e8:ae:4e:fb:5f:0a:9d:8e:
         7d:59:e0:34:0b:8b:8a:d1:cd:89:8a:c6:c9:fd:d1:2a:1e:34:
         c1:3b:e0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 12:07:21 2026 by rpki-client