This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/uBozqFCRP6q6-fMqqEdxvia5s2w.roa
File:                     uBozqFCRP6q6-fMqqEdxvia5s2w.roa (raw, json)
Hash identifier:          7my1TEAY49gz3OCc/3WBB7kXgHGx+R9z5VTiKjlGzfs=
Subject key identifier:   B8:1A:33:A8:50:91:3F:AA:BA:F9:F3:2A:A8:47:71:BE:26:B9:B3:6C
Certificate issuer:       /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial:       019B7BA3CF57953C5528E2487F92EB089A04
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/uBozqFCRP6q6-fMqqEdxvia5s2w.roa
Signing time:             Thu 01 Jan 2026 22:18:11 +0000
ROA not before:           Thu 01 Jan 2026 22:18:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197320
IP address blocks:        195.20.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:cf:57:95:3c:55:28:e2:48:7f:92:eb:08:9a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
        Validity
            Not Before: Jan  1 22:18:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b81a33a850913faabaf9f32aa84771be26b9b36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:e3:90:9c:71:33:4e:4a:7d:dc:d8:fe:8d:
                    13:25:1a:6b:8a:b1:01:0e:6d:2e:9e:8b:5c:ae:c3:
                    d7:38:93:b2:b0:d9:53:25:ea:ac:c2:cd:75:b7:b2:
                    f9:39:80:4b:cd:5a:6d:ba:bb:f6:91:c7:8e:ec:04:
                    03:a3:41:2c:3c:b5:77:9c:8b:4f:55:e2:ce:ac:85:
                    24:4d:e2:04:02:6e:b0:7a:ff:76:43:4b:08:b2:cc:
                    84:1d:02:e2:4f:ad:f5:a1:3e:61:8e:93:a6:8a:61:
                    d0:f0:b2:1f:1b:fe:ee:4e:65:86:45:bf:d4:0f:ef:
                    3f:d8:d7:33:35:01:a1:84:29:78:d7:6a:b4:d2:d5:
                    ea:4f:f5:72:9a:0c:e5:67:ec:5e:cc:2e:5c:f1:d6:
                    6d:6e:dd:0c:a7:52:bb:df:30:e5:68:55:be:44:bc:
                    2d:2a:c4:2a:d1:1e:4b:86:46:f7:6d:f2:fe:27:72:
                    bb:dc:7b:d4:5e:5c:33:81:bf:46:5a:8b:29:01:d7:
                    df:5d:a2:fe:44:cd:00:25:18:b7:ca:55:15:d3:5d:
                    89:ea:e6:b3:06:e0:ee:21:25:0c:fd:65:6e:ef:43:
                    0e:3c:62:35:06:3b:85:18:0d:f0:82:67:a1:7d:08:
                    15:c0:b9:95:f2:a7:e8:c9:16:2f:de:b0:34:b0:e2:
                    70:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1A:33:A8:50:91:3F:AA:BA:F9:F3:2A:A8:47:71:BE:26:B9:B3:6C
            X509v3 Authority Key Identifier:
                keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/uBozqFCRP6q6-fMqqEdxvia5s2w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.20.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:ac:3a:54:89:e5:06:6c:b2:86:f6:55:11:c7:d9:4f:24:8c:
         9e:d0:52:cc:40:a6:5b:43:41:ac:21:9c:52:e1:fb:c6:6e:f6:
         af:4e:cc:5f:62:6e:40:66:01:91:f0:ce:4c:54:00:39:9c:8a:
         77:0c:57:d9:76:14:49:cc:51:2d:54:30:6b:23:42:09:0d:0e:
         96:85:a4:08:16:b8:67:43:b8:3c:07:61:97:2c:ce:4e:5f:21:
         0d:b6:46:02:2b:d0:c2:56:5d:f3:15:b8:5a:67:ff:0c:67:05:
         25:da:47:7d:06:e4:21:53:73:a8:f4:84:72:03:1a:f0:9b:da:
         c2:a3:73:38:79:e1:62:5f:a0:ca:4d:12:8c:34:36:44:81:a3:
         df:ad:78:6f:37:a9:7c:7a:b0:09:7a:61:57:86:f6:a1:d0:cb:
         ee:7e:13:4a:35:93:85:3b:45:f4:ae:28:dd:a0:7d:87:f5:44:
         6b:17:80:dd:f4:82:91:b3:ab:2f:67:31:56:54:40:78:ea:44:
         61:25:c2:32:de:3d:15:55:b3:f5:3f:07:7d:ca:28:37:57:89:
         78:6e:4b:20:df:cc:24:24:fb:bc:58:bf:93:93:4e:41:60:90:
         2f:cf:b9:9d:22:6d:da:40:33:14:ce:1c:84:99:10:55:0c:6c:
         a6:48:70:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:17 2026 by rpki-client