This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UevaTpNi-6j_3DIa8ipP8nTcE5k.roa
File:                     UevaTpNi-6j_3DIa8ipP8nTcE5k.roa (raw, json)
Hash identifier:          XYxXnOTGaB/mdePclM2Gz8Ul5ohbpJTrslNPur4BPMc=
Subject key identifier:   51:EB:DA:4E:93:62:FB:A8:FF:DC:32:1A:F2:2A:4F:F2:74:DC:13:99
Certificate issuer:       /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial:       019B7F144DA615BCABDFA0B72B7397ABBC78
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UevaTpNi-6j_3DIa8ipP8nTcE5k.roa
Signing time:             Fri 02 Jan 2026 14:19:55 +0000
ROA not before:           Fri 02 Jan 2026 14:19:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     52000
IP address blocks:        193.233.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 14:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:4d:a6:15:bc:ab:df:a0:b7:2b:73:97:ab:bc:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
        Validity
            Not Before: Jan  2 14:19:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=51ebda4e9362fba8ffdc321af22a4ff274dc1399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9b:d8:f0:c6:70:2f:41:17:b0:04:46:18:10:
                    1a:7b:57:d6:1a:bd:7c:19:6b:97:02:16:a9:63:29:
                    a4:a0:86:4e:3e:31:03:9b:c3:0a:a4:62:27:08:94:
                    59:0a:17:7a:f0:8a:57:a1:43:e9:b8:30:e8:68:4f:
                    37:bb:4f:d4:94:2f:bb:bc:ac:66:e0:01:2c:32:45:
                    99:8b:87:29:b7:a5:64:d9:7b:35:a1:b1:70:96:9b:
                    06:bf:9e:91:c2:b0:2b:f0:ea:b7:c6:d0:5c:57:5e:
                    4d:7f:76:6a:98:19:84:d6:f0:00:78:5f:d8:9a:a0:
                    76:c7:9c:ae:45:19:2b:37:5f:91:f1:35:a0:c6:6a:
                    1b:74:fd:8a:80:7b:e8:0b:d0:62:06:f1:49:16:0c:
                    c5:c1:f8:46:3d:89:35:74:a4:93:eb:15:6e:94:05:
                    03:84:d4:c0:7c:00:f5:f7:f6:e2:12:f2:1f:d2:59:
                    c8:fe:78:78:e3:3c:a1:7f:8b:db:8d:1c:e7:7a:d3:
                    c9:7a:72:2d:6f:f9:2e:fa:89:dc:27:32:56:6e:95:
                    3d:b7:b0:a4:8e:5d:24:e7:7a:ef:95:1d:4c:49:e8:
                    f7:4c:d7:b2:fb:cc:63:f9:15:26:7d:65:26:5a:8e:
                    22:eb:ea:1b:50:03:f5:6e:ef:cc:1b:85:ba:4f:8c:
                    b2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EB:DA:4E:93:62:FB:A8:FF:DC:32:1A:F2:2A:4F:F2:74:DC:13:99
            X509v3 Authority Key Identifier:
                keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UevaTpNi-6j_3DIa8ipP8nTcE5k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.233.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:89:e3:da:e2:be:e5:58:09:10:02:eb:32:01:9e:9d:22:fa:
         c6:cc:a6:24:5d:78:1f:f2:f0:f7:b1:6d:d0:b8:5c:15:4c:97:
         56:3f:e0:2e:03:7d:67:ef:33:08:8b:8f:3e:bd:34:56:17:de:
         f5:63:d6:93:a5:53:b0:9f:e3:29:0d:61:bb:ca:ed:02:ee:42:
         bd:78:b7:69:70:a1:56:f6:e6:fb:08:af:30:66:a2:c2:f4:ce:
         f5:68:09:e7:41:0f:80:0d:45:90:ef:35:97:41:2c:f7:0b:72:
         51:2c:74:96:75:a8:11:1a:92:2e:1a:e9:dd:d9:58:62:0e:01:
         a2:4d:6d:0c:ee:88:65:54:1c:30:61:9e:bc:b1:11:8a:0e:75:
         6a:02:27:df:af:96:fe:6d:c1:50:5c:4a:bc:21:41:5a:87:6a:
         11:70:7b:3a:82:af:d2:39:f7:95:4b:57:a1:ff:1d:a2:3e:98:
         1d:35:6f:07:a2:ae:45:c1:d6:b8:77:a7:25:90:43:be:11:b3:
         98:b1:c3:87:c7:08:98:14:4d:b4:3a:81:90:9d:c9:ec:a8:d1:
         d2:8b:9c:5f:f3:56:3f:92:3c:af:93:ad:e5:15:4a:af:1a:e3:
         39:35:12:9b:5b:63:38:75:1c:73:8c:03:37:f3:bc:3b:66:c8:
         db:27:b7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 23:54:41 2026 by rpki-client