This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ULoG52Txj0gcrDNZkQkV62rnjIA.roa
File:                     ULoG52Txj0gcrDNZkQkV62rnjIA.roa (raw, json)
Hash identifier:          bgRb93i0nVm1dL85oVOlBTvkhT7oDzr0z/2LDHDAuSk=
Subject key identifier:   50:BA:06:E7:64:F1:8F:48:1C:AC:33:59:91:09:15:EB:6A:E7:8C:80
Certificate issuer:       /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial:       019B7F146E2EA51DE028A77016F63B4E2214
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ULoG52Txj0gcrDNZkQkV62rnjIA.roa
Signing time:             Fri 02 Jan 2026 14:20:03 +0000
ROA not before:           Fri 02 Jan 2026 14:20:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216127
IP address blocks:        147.45.65.0/24 maxlen: 24
                          147.45.196.0/24 maxlen: 24
                          147.45.197.0/24 maxlen: 24
                          147.45.222.0/24 maxlen: 24
                          147.45.223.0/24 maxlen: 24
                          193.233.16.0/24 maxlen: 24
                          193.233.85.0/24 maxlen: 24
                          193.233.171.0/24 maxlen: 24
                          193.233.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:6e:2e:a5:1d:e0:28:a7:70:16:f6:3b:4e:22:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
        Validity
            Not Before: Jan  2 14:20:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=50ba06e764f18f481cac3359910915eb6ae78c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:ad:b5:12:a3:cd:8c:b9:b9:8b:7e:83:20:
                    38:ae:a3:60:86:36:cb:1c:f3:22:32:43:6f:8f:7b:
                    a9:5a:9e:46:3e:cf:79:93:37:ee:d7:cd:37:d2:31:
                    0f:a8:a8:d2:a1:9c:7d:3e:22:34:1c:72:4f:1c:5e:
                    77:26:03:7c:d7:3a:bc:17:de:2d:ae:39:0c:7c:72:
                    8f:9a:14:b9:82:ce:8f:2a:4e:89:a2:79:a1:e5:25:
                    c4:85:dd:fc:c8:94:9b:e3:63:a6:e7:a1:31:83:ab:
                    c2:cd:fa:dd:c0:88:4f:89:67:f4:39:69:56:9f:aa:
                    4c:b9:37:1e:6b:85:47:7c:e6:02:3c:64:9f:72:67:
                    c8:78:1b:18:30:20:3b:a1:c1:bd:e4:bb:33:d3:9a:
                    fe:44:7f:2f:4e:2a:d6:e3:c0:c6:3f:d5:b4:25:c0:
                    e7:6c:47:a9:93:88:03:4b:c8:07:39:06:21:62:a7:
                    f0:b2:7c:2f:69:0e:83:93:5f:6f:92:0e:01:c2:36:
                    59:2b:c8:26:2b:19:91:05:48:87:2b:f8:1a:ae:b3:
                    74:70:ee:91:5e:3b:79:10:5e:72:03:09:18:56:78:
                    27:48:ea:1f:0a:bf:4c:5e:df:85:c3:da:77:21:4a:
                    2c:68:db:de:66:ac:8c:56:de:81:73:d8:c5:68:82:
                    41:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BA:06:E7:64:F1:8F:48:1C:AC:33:59:91:09:15:EB:6A:E7:8C:80
            X509v3 Authority Key Identifier:
                keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ULoG52Txj0gcrDNZkQkV62rnjIA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.45.65.0/24
                  147.45.196.0/23
                  147.45.222.0/23
                  193.233.16.0/24
                  193.233.85.0/24
                  193.233.171.0/24
                  193.233.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:33:f4:49:6b:3f:e6:1a:8b:71:23:4c:f5:61:a1:c5:33:4d:
         dd:70:01:4a:dc:6a:f0:0d:f4:a6:e6:ae:6b:46:b6:3d:a3:ff:
         e6:56:cb:d5:71:c7:aa:f0:b1:f2:fa:6d:81:6e:89:53:e6:a8:
         15:a5:60:02:75:e3:24:dd:04:82:07:5e:1b:50:c0:d2:af:08:
         17:4e:34:63:af:23:ef:3b:7e:87:8c:ce:ed:e2:0d:1b:98:48:
         29:15:cb:4d:3c:14:ee:76:1b:28:2f:50:c6:05:82:a6:9f:16:
         f7:b5:c3:93:97:f3:eb:ce:6a:f7:fe:ef:03:86:d9:c7:6a:1e:
         6a:31:51:14:21:3e:be:ce:33:09:52:41:88:b7:12:2b:b9:fd:
         8e:74:fa:9e:8d:a9:0f:6e:e0:8a:ac:22:1e:e1:fe:cc:c3:79:
         21:6e:7c:b1:4f:53:f6:45:0f:54:eb:59:b3:78:4c:e8:2d:ec:
         8d:d2:3f:e8:42:1a:84:51:b3:4b:87:a0:f9:f7:1d:f1:59:e1:
         31:af:51:2a:f4:af:7b:e8:a6:d7:74:ba:7d:13:7d:18:17:af:
         21:ce:88:d7:79:4f:9b:c1:ac:81:05:94:e9:d3:2b:72:50:0f:
         cb:08:0e:46:f4:63:ac:3c:be:b9:60:09:fc:6f:ce:60:97:09:
         c5:57:b1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 11:09:46 2026 by rpki-client