This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/UA7MZYc-czHZyAm_jTZP6uIdkoc.roa
File:                     UA7MZYc-czHZyAm_jTZP6uIdkoc.roa (raw, json)
Hash identifier:          y/+93xNILFZI2eCu1XR1bZH6lI5t/EYB1r4ioe1Vzp8=
Subject key identifier:   50:0E:CC:65:87:3E:73:31:D9:C8:09:BF:8D:36:4F:EA:E2:1D:92:87
Certificate issuer:       /CN=580ee73b1e6a89b4ef515bc67dc9817296a4d8ab
Certificate serial:       019BD09F99326CA01C2D458330A1CFB35099
Authority key identifier: 58:0E:E7:3B:1E:6A:89:B4:EF:51:5B:C6:7D:C9:81:72:96:A4:D8:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/UA7MZYc-czHZyAm_jTZP6uIdkoc.roa
Signing time:             Sun 18 Jan 2026 10:21:18 +0000
ROA not before:           Sun 18 Jan 2026 10:21:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3356
IP address blocks:        91.227.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Jan 2026 04:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d0:9f:99:32:6c:a0:1c:2d:45:83:30:a1:cf:b3:50:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580ee73b1e6a89b4ef515bc67dc9817296a4d8ab
        Validity
            Not Before: Jan 18 10:21:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=500ecc65873e7331d9c809bf8d364feae21d9287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ed:6f:c7:cf:4b:19:03:0c:ca:4d:5d:59:51:
                    69:6c:e0:38:09:33:f9:7e:28:ae:67:b9:7f:90:42:
                    a2:cd:b5:8c:2c:71:de:9c:60:2f:71:db:68:92:8c:
                    c6:f5:c9:15:bd:64:26:79:25:ca:4c:f2:0e:46:d7:
                    b1:ad:08:7d:a4:3e:fc:bc:ae:db:d5:c5:ef:bf:43:
                    61:c2:70:30:fb:7e:ec:29:74:cd:dc:d5:e6:fc:87:
                    c8:e6:6c:97:89:b1:b6:ff:1f:ef:06:8d:c6:23:d3:
                    a2:68:6e:c0:a9:0f:2c:02:c7:73:b1:8a:ec:04:56:
                    5b:81:3b:02:3b:71:fb:ca:b5:f0:f1:88:84:a2:19:
                    85:7a:ea:d4:83:49:a8:92:35:d3:65:dd:62:13:a0:
                    2e:93:2b:23:b4:e9:21:7e:6c:6a:72:db:16:2e:33:
                    7b:71:3d:76:b1:c7:92:6f:82:b5:d8:37:15:76:ba:
                    92:4c:65:e4:3d:ab:94:ce:f7:6b:4b:7a:c5:58:23:
                    83:e9:3a:23:59:f1:5b:20:25:0c:cf:43:43:f4:10:
                    90:60:3b:f2:69:30:f8:1d:4e:b0:36:45:28:86:b0:
                    5a:a5:0a:e1:fa:c1:8a:a4:75:7f:bc:b4:4c:47:68:
                    ea:f8:43:de:ed:53:3c:ba:27:61:49:3c:07:c6:bc:
                    b9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0E:CC:65:87:3E:73:31:D9:C8:09:BF:8D:36:4F:EA:E2:1D:92:87
            X509v3 Authority Key Identifier:
                keyid:58:0E:E7:3B:1E:6A:89:B4:EF:51:5B:C6:7D:C9:81:72:96:A4:D8:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/UA7MZYc-czHZyAm_jTZP6uIdkoc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.227.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:f5:63:41:8c:53:0a:f3:5d:e2:f1:a1:a6:3b:48:16:fa:41:
         2f:a7:6a:a6:b1:61:e4:b4:bf:36:9a:d5:a0:26:19:8c:7e:e8:
         6a:5d:3f:0c:2f:87:ae:b9:49:93:ff:0c:15:fd:8f:6a:10:2a:
         b6:6d:63:79:c1:c5:1a:bd:64:ab:f0:49:2c:0b:b9:27:39:42:
         10:60:e7:cd:ad:f7:b5:af:94:0a:38:c6:a1:ac:7a:17:ef:a7:
         63:ba:99:18:da:f4:92:95:8e:c3:95:7b:1f:75:f7:30:91:b1:
         51:d6:88:16:60:60:ae:58:73:16:e0:11:23:a0:73:2b:d4:23:
         a6:40:01:83:be:b3:50:17:2b:f6:a7:b1:e8:d2:cc:b3:4e:11:
         9b:40:10:7d:56:5c:49:9f:d8:f0:54:9a:e1:56:54:6d:8b:2b:
         41:e3:25:f6:84:91:bc:7a:d7:94:33:6a:c4:be:01:85:11:a2:
         8a:71:f2:da:b0:5a:af:59:64:dd:ec:61:ac:b0:e7:c9:16:8a:
         c4:f5:8b:a9:8f:5d:f7:95:b3:37:ef:d1:ae:7b:53:36:03:80:
         c9:3e:75:80:10:3e:d1:ba:b7:2f:d2:0e:04:83:73:91:c7:c2:
         23:3c:44:d9:dd:65:3d:7d:af:23:1b:a3:16:8a:d1:4b:e3:05:
         f6:47:9c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 12:48:36 2026 by rpki-client