This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ui1XoNaPxz8-p5XZplhrSemq19s.roa
File:                     ui1XoNaPxz8-p5XZplhrSemq19s.roa (raw, json)
Hash identifier:          xDI7nArGgOImdaoYpHejOKVey1Ck4HW7im+5TYH91KA=
Subject key identifier:   BA:2D:57:A0:D6:8F:C7:3F:3E:A7:95:D9:A6:58:6B:49:E9:AA:D7:DB
Certificate issuer:       /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial:       019BD0606E2226DAB31A2AEA58B8E6EB5B09
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ui1XoNaPxz8-p5XZplhrSemq19s.roa
Signing time:             Sun 18 Jan 2026 09:12:19 +0000
ROA not before:           Sun 18 Jan 2026 09:12:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215898
IP address blocks:        185.157.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 15:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d0:60:6e:22:26:da:b3:1a:2a:ea:58:b8:e6:eb:5b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
        Validity
            Not Before: Jan 18 09:12:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ba2d57a0d68fc73f3ea795d9a6586b49e9aad7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:89:9e:71:6a:be:4a:de:ad:ab:ff:3a:81:da:
                    98:c3:21:ec:cf:2b:ed:0d:07:f2:28:01:e0:28:f2:
                    88:55:53:42:7b:16:ba:45:51:c7:45:d5:8b:01:82:
                    22:42:7e:f8:28:9c:58:1a:9f:17:b2:07:63:5f:02:
                    43:78:ab:c4:51:8e:3b:81:88:10:50:a4:11:1e:0a:
                    79:1c:a2:66:2a:42:25:3b:26:8f:fe:57:63:03:e3:
                    b2:38:ef:f1:83:22:e7:c6:e2:0d:01:35:a6:41:a4:
                    ba:e5:42:f8:c4:84:78:80:5b:3f:41:9b:84:3e:19:
                    6c:ab:ec:9f:c6:ee:11:c1:a3:14:d1:06:2a:6c:55:
                    75:13:99:f6:06:6d:97:f5:73:48:a6:0a:f2:0a:f8:
                    0b:51:c0:31:d4:c2:ef:15:cf:2b:c3:da:dd:49:3b:
                    9b:a8:10:76:0c:21:54:15:b9:e5:ce:2f:06:48:a2:
                    45:8d:51:11:f2:3a:bb:23:4c:70:c6:c6:5f:37:08:
                    99:4f:52:dc:45:83:0d:ed:31:4c:9c:69:60:25:6c:
                    f1:1d:7b:b6:39:43:0d:21:52:f7:27:34:e6:db:98:
                    93:58:02:7a:27:83:44:e3:87:06:ca:fd:f9:2a:91:
                    33:70:15:68:a9:05:c1:76:0d:d1:2f:d2:40:c5:89:
                    ae:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2D:57:A0:D6:8F:C7:3F:3E:A7:95:D9:A6:58:6B:49:E9:AA:D7:DB
            X509v3 Authority Key Identifier:
                keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ui1XoNaPxz8-p5XZplhrSemq19s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.157.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:a9:25:3b:33:13:b3:f1:61:bc:15:eb:3d:d7:94:63:51:a3:
         c2:4d:ec:0c:2e:0f:26:ae:93:31:04:80:0b:ad:97:e8:99:e6:
         f0:f2:10:ec:f7:d3:6c:81:33:cb:67:6a:ca:9b:9c:a9:99:d7:
         70:6c:ad:8c:6c:4d:23:62:94:66:09:07:90:d5:76:03:62:2f:
         f7:67:91:17:1a:fd:a9:44:21:46:3b:ac:cc:e5:37:cb:d9:3a:
         93:5f:6f:48:08:76:c2:a5:40:7a:c3:c0:b4:ac:27:88:db:8f:
         7d:18:32:d5:bf:69:0b:48:65:f2:b7:21:34:5b:97:f4:1a:16:
         13:84:0b:f6:2f:4c:ed:c8:3d:0b:72:72:76:07:7f:0e:df:55:
         38:b4:06:eb:ba:a1:46:42:54:8f:c7:55:9c:81:c2:29:32:33:
         38:f2:2a:be:b3:db:89:7e:1e:be:60:0e:d4:a9:3e:b1:88:59:
         73:b1:a6:74:51:56:98:ed:ef:7a:b6:b5:5f:bc:ef:78:9b:a0:
         3e:cc:94:45:b1:0e:62:68:af:9b:6e:16:6a:ee:9b:9a:de:f1:
         4b:9c:2f:5d:3e:a4:4b:18:40:38:a0:fa:8c:06:f2:c0:7a:d3:
         06:f7:4b:bd:13:e9:00:82:83:0d:77:13:88:22:4b:04:65:5f:
         e4:70:8e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 18:50:21 2026 by rpki-client