This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UcC2Y8zHvL_FDSURiolVRBuB8_g.roa
File:                     UcC2Y8zHvL_FDSURiolVRBuB8_g.roa (raw, json)
Hash identifier:          p3IzoT2nzG2oBklzpQ6gR/NCnzvpo3xyP/73GYhUd3g=
Subject key identifier:   51:C0:B6:63:CC:C7:BC:BF:C5:0D:25:11:8A:89:55:44:1B:81:F3:F8
Certificate issuer:       /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial:       019B79105C41080535D1296F9F55711108B9
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UcC2Y8zHvL_FDSURiolVRBuB8_g.roa
Signing time:             Thu 01 Jan 2026 10:17:53 +0000
ROA not before:           Thu 01 Jan 2026 10:17:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15404
IP address blocks:        185.234.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 07:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:5c:41:08:05:35:d1:29:6f:9f:55:71:11:08:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
        Validity
            Not Before: Jan  1 10:17:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=51c0b663ccc7bcbfc50d25118a8955441b81f3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:8e:2a:ff:e4:12:a7:88:91:74:59:3b:60:
                    15:01:7b:44:f1:a7:65:73:9d:e2:16:4d:0f:6e:6e:
                    ca:ec:d6:7d:da:1f:3b:c4:62:79:e6:7e:07:1d:57:
                    93:db:a7:b3:67:8f:92:1e:92:b1:92:16:6e:fe:d0:
                    e6:34:d7:b2:4a:45:3f:26:67:8f:e6:7d:dc:5a:75:
                    66:65:ff:ca:83:38:4b:d3:b2:66:11:e7:82:df:30:
                    df:29:47:87:86:da:59:65:43:44:c5:8f:de:0d:00:
                    c4:0b:93:7f:e5:f4:95:14:45:9e:25:18:c8:61:53:
                    65:43:3e:d1:0d:fa:78:fc:85:33:b5:05:e6:9f:cb:
                    e5:3f:19:c1:e2:2f:58:cb:ad:c1:7b:31:7e:ed:6d:
                    62:9a:0a:e3:c1:e2:9b:1e:1f:b6:f3:8d:26:93:9d:
                    89:4c:b3:93:bb:e7:00:96:2d:fa:77:1f:0a:bf:fe:
                    70:f4:3d:26:0e:96:29:7f:3c:9b:aa:e2:ab:53:75:
                    df:80:78:d8:fc:35:a5:b6:f5:f0:57:67:a3:b2:c0:
                    d3:07:41:4d:9b:9c:fd:71:cb:47:e5:a0:de:24:bf:
                    a7:34:91:25:47:f3:0e:a0:ee:4f:a9:ac:57:1c:2e:
                    2f:56:e6:27:32:59:1d:cf:92:ad:5f:f1:c4:62:38:
                    41:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C0:B6:63:CC:C7:BC:BF:C5:0D:25:11:8A:89:55:44:1B:81:F3:F8
            X509v3 Authority Key Identifier:
                keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UcC2Y8zHvL_FDSURiolVRBuB8_g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:8c:a2:04:cd:52:04:25:41:a6:0f:32:49:5b:30:45:24:87:
         84:45:29:34:2d:78:c4:ba:54:22:73:2b:ca:20:79:f5:d7:ce:
         cb:1e:84:44:b0:e4:f1:bc:a0:ab:75:3a:f3:23:b7:fe:5d:da:
         49:98:a7:5e:10:39:b2:24:4c:3d:d1:09:0c:9c:31:38:5f:49:
         23:ec:a3:de:e8:b6:25:ed:82:28:3a:0e:e4:6a:ce:81:97:24:
         14:f4:15:9a:58:80:a7:9c:0f:02:ba:c5:65:bc:48:a7:7b:66:
         90:bb:05:c5:bc:cd:69:f2:48:ca:b0:84:81:5b:e6:2b:9b:8f:
         e5:6b:ce:16:d2:a0:46:07:93:4c:7e:8c:75:fb:7a:c8:65:ac:
         03:28:83:e7:f6:a2:cc:a1:c2:b6:b7:1a:76:be:3f:f0:d5:7c:
         f8:50:ff:52:9d:20:4c:e0:9c:fa:fd:9f:9a:fd:a9:db:52:f4:
         db:98:56:be:11:ca:1c:23:f7:5d:d2:e2:7a:a3:ad:6d:c4:f9:
         3a:e8:96:41:37:ee:ae:c0:4e:e6:84:af:28:6f:58:51:50:b7:
         51:c2:62:7c:e5:5d:82:3d:de:af:b2:71:77:66:09:e7:13:f6:
         e2:2e:bd:f4:c3:5d:21:6c:1c:6a:bf:37:75:75:36:55:44:23:
         e6:c9:ac:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:18:03 2026 by rpki-client