This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/Ux0GK8vhew9-6Io06jn8phMnWko.roa
File:                     Ux0GK8vhew9-6Io06jn8phMnWko.roa (raw, json)
Hash identifier:          nIk3ffbMCGpJ8s89KtcodgQ7duWnbnupf2+qt/z+NVY=
Subject key identifier:   53:1D:06:2B:CB:E1:7B:0F:7E:E8:8A:34:EA:39:FC:A6:13:27:5A:4A
Certificate issuer:       /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial:       019B7DC9E6382A92253CEA11E5D0F7CF7ACA
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/Ux0GK8vhew9-6Io06jn8phMnWko.roa
Signing time:             Fri 02 Jan 2026 08:19:02 +0000
ROA not before:           Fri 02 Jan 2026 08:19:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49265
IP address blocks:        94.230.76.0/22 maxlen: 22
                          94.230.76.0/24 maxlen: 24
                          94.230.77.0/24 maxlen: 24
                          94.230.78.0/24 maxlen: 24
                          94.230.79.0/24 maxlen: 24
                          109.104.240.0/22 maxlen: 22
                          109.104.240.0/24 maxlen: 24
                          109.104.241.0/24 maxlen: 24
                          109.104.242.0/24 maxlen: 24
                          109.104.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:c9:e6:38:2a:92:25:3c:ea:11:e5:d0:f7:cf:7a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
        Validity
            Not Before: Jan  2 08:19:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=531d062bcbe17b0f7ee88a34ea39fca613275a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:97:a8:d0:00:2b:e4:cb:43:ac:c4:cc:00:99:
                    15:85:fc:ff:24:c8:68:94:d0:c7:9d:f5:8c:e2:2f:
                    c0:7e:79:d7:d5:6b:54:ae:0f:80:9d:86:fc:f5:3e:
                    ac:77:43:4a:1d:54:be:15:a1:dc:3d:e0:b0:0c:75:
                    c6:7b:6e:81:43:ad:ad:89:82:19:f1:d6:3a:99:28:
                    43:25:9e:12:2f:af:a9:a6:3a:c2:77:a0:df:24:62:
                    ce:ad:4e:1c:4d:d2:60:06:60:5a:4c:2a:76:49:f4:
                    3a:ce:84:6f:88:80:ae:d4:8b:f8:f9:0a:d8:16:e6:
                    8e:49:e0:0e:61:c1:66:88:75:e3:d8:ec:b6:46:4e:
                    e1:0e:0f:03:c3:4c:bd:4d:8a:0e:ec:1d:7c:d0:78:
                    e7:70:93:14:66:a0:fb:8d:44:77:76:c8:4c:65:ca:
                    78:57:5c:79:98:83:d5:d7:54:95:7b:96:cc:15:15:
                    62:51:39:c5:38:a6:93:a9:d7:63:1c:63:9d:5e:d6:
                    13:bb:ca:61:51:22:9e:e6:d0:6a:b6:c3:23:15:7d:
                    81:12:40:38:64:4e:c8:b4:69:2a:80:5e:16:a6:a1:
                    05:59:42:ef:01:a2:2b:98:2e:04:2b:96:d9:66:f3:
                    5f:0a:11:8a:2f:93:bc:7a:45:67:1c:8c:60:f3:55:
                    0b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1D:06:2B:CB:E1:7B:0F:7E:E8:8A:34:EA:39:FC:A6:13:27:5A:4A
            X509v3 Authority Key Identifier:
                keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/Ux0GK8vhew9-6Io06jn8phMnWko.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.230.76.0/22
                  109.104.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:f0:ed:35:49:15:7b:c7:0b:c1:ec:97:c2:59:80:e1:b4:e1:
         91:02:05:b9:22:b8:29:b7:31:cc:d7:09:b9:06:93:ee:b3:43:
         2b:09:8a:2d:3f:28:54:6e:fa:89:a7:1d:db:52:47:46:bf:dd:
         e6:26:0d:d0:41:b5:28:80:8b:a9:82:8f:c4:4b:52:8c:ed:b8:
         c5:53:18:db:27:8c:cf:b5:5e:1e:b9:7f:01:53:0d:97:5a:d9:
         a7:6a:b4:80:fd:47:6b:86:aa:9e:ff:8d:71:b5:7c:36:4f:6e:
         06:f5:ae:c5:fa:90:c8:24:e7:d2:27:49:de:fa:f9:22:d0:27:
         86:f0:f3:b4:cf:33:5c:9d:bf:48:a5:ff:d1:3b:53:35:c1:15:
         b1:aa:3e:87:b2:9c:61:cd:16:c6:fc:3a:20:60:bd:1d:ad:4e:
         86:45:5c:aa:ba:d1:77:b7:b5:ad:b2:e1:51:f2:87:62:8f:bb:
         39:0b:4a:c0:8a:c4:0d:27:31:bc:86:33:c1:a4:37:86:4c:20:
         dd:25:bd:b4:2c:8b:94:77:a9:04:1d:7a:8e:2c:2b:63:c3:ac:
         3e:72:da:65:e9:d2:e7:44:51:ee:2d:b3:0d:86:1c:a0:01:bc:
         d2:d5:26:8b:0c:81:19:bb:ab:d6:02:46:03:78:9e:6f:61:b3:
         9b:f8:90:40
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt9yeY4KpIlPOoR5dD3z3rKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzUwZDAyNGFmMDFmOGVhZjEyNTcxN2NhYTAzYWFmYWQx
ODRlMWQwHhcNMjYwMTAyMDgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzFkMDYyYmNiZTE3YjBmN2VlODhhMzRlYTM5ZmNhNjEzMjc1YTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5eo0AAr5MtDrMTMAJkVhfz/JMho
lNDHnfWM4i/AfnnX1WtUrg+AnYb89T6sd0NKHVS+FaHcPeCwDHXGe26BQ62tiYIZ
8dY6mShDJZ4SL6+ppjrCd6DfJGLOrU4cTdJgBmBaTCp2SfQ6zoRviICu1Iv4+QrY
FuaOSeAOYcFmiHXj2Oy2Rk7hDg8Dw0y9TYoO7B180HjncJMUZqD7jUR3dshMZcp4
V1x5mIPV11SVe5bMFRViUTnFOKaTqddjHGOdXtYTu8phUSKe5tBqtsMjFX2BEkA4
ZE7ItGkqgF4WpqEFWULvAaIrmC4EK5bZZvNfChGKL5O8ekVnHIxg81ULfQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFMdBivL4XsPfuiKNOo5/KYTJ1pKMB8GA1UdIwQY
MBaAFHo1DQJK8B+OrxJXF8qgOq+tGE4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi83OTY2YWUtOWM4OC00M2U5LWI4OTkt
ZDAwM2U1NmZlNzUzLzEvVXgwR0s4dmhldzktNklvMDZqbjhwaE1uV2tvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi83OTY2YWUtOWM4OC00M2U5LWI4OTktZDAwM2U1NmZlNzUz
LzEvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXuZMAwQC
bWjwMA0GCSqGSIb3DQEBCwUAA4IBAQAg8O01SRV7xwvB7JfCWYDhtOGRAgW5Irgp
tzHM1wm5BpPus0MrCYotPyhUbvqJpx3bUkdGv93mJg3QQbUogIupgo/ES1KM7bjF
UxjbJ4zPtV4euX8BUw2XWtmnarSA/Udrhqqe/41xtXw2T24G9a7F+pDIJOfSJ0ne
+vki0CeG8PO0zzNcnb9Ipf/RO1M1wRWxqj6HspxhzRbG/DogYL0drU6GRVyqutF3
t7WtsuFR8odij7s5C0rAisQNJzG8hjPBpDeGTCDdJb20LIuUd6kEHXqOLCtjw6w+
ctpl6dLnRFHuLbMNhhygAbzS1SaLDIEZu6vWAkYDeJ5vYbOb+JBA
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:47:47 2026 by rpki-client