This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/UbPR__GWgCOIAb3NQc0qlqrppxU.roa
File:                     UbPR__GWgCOIAb3NQc0qlqrppxU.roa (raw, json)
Hash identifier:          lTQfU6TbcxSvADq8zAUFbLRCThmdnW+zAxZAvDh4gWQ=
Subject key identifier:   51:B3:D1:FF:F1:96:80:23:88:01:BD:CD:41:CD:2A:96:AA:E9:A7:15
Certificate issuer:       /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial:       019B791052B6467E3047F797BA255C572522
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/UbPR__GWgCOIAb3NQc0qlqrppxU.roa
Signing time:             Thu 01 Jan 2026 10:17:51 +0000
ROA not before:           Thu 01 Jan 2026 10:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8220
IP address blocks:        193.134.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 07:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:52:b6:46:7e:30:47:f7:97:ba:25:5c:57:25:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
        Validity
            Not Before: Jan  1 10:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=51b3d1fff19680238801bdcd41cd2a96aae9a715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:d4:63:60:5b:9c:47:68:d0:82:a7:21:c3:
                    7f:00:e3:98:2c:e5:02:f5:5a:d7:7f:34:68:80:20:
                    ef:0f:c3:a2:ec:f6:c5:1d:ab:7d:c8:8b:95:1c:84:
                    19:2a:24:49:17:fc:5e:61:97:0b:47:50:f1:a5:0a:
                    26:de:f8:81:11:81:57:a0:10:c8:62:04:0a:ed:c0:
                    88:83:2d:a5:3c:4f:50:df:15:ed:c1:bc:ab:37:a1:
                    88:66:f1:b9:9d:1c:d2:fe:72:b5:90:30:08:43:7a:
                    7a:34:b2:fa:d8:fd:15:52:a7:8f:fd:07:87:12:95:
                    78:fa:c1:14:f1:ca:97:43:69:d9:64:59:97:da:65:
                    c3:ec:74:dc:64:bd:c9:49:b2:17:51:e8:73:d1:e1:
                    45:59:b3:42:f8:bc:fc:37:d1:e1:cb:56:19:0d:2a:
                    aa:0e:ae:9d:97:0f:91:7d:89:96:d5:2b:37:f9:2b:
                    10:57:40:a4:b3:08:d9:3d:9e:ac:bc:0d:04:ea:1b:
                    3c:bb:35:53:a7:40:4c:31:ba:ee:cc:25:be:f8:ed:
                    e3:e9:3f:62:11:bd:33:75:d3:73:4d:89:15:7b:58:
                    2c:ff:08:e7:15:6d:42:99:91:7b:e2:e9:8a:6c:a5:
                    e6:01:b6:83:7b:d6:46:88:47:9a:a0:1a:33:21:f1:
                    5f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B3:D1:FF:F1:96:80:23:88:01:BD:CD:41:CD:2A:96:AA:E9:A7:15
            X509v3 Authority Key Identifier:
                keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/UbPR__GWgCOIAb3NQc0qlqrppxU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.134.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:81:ee:24:6d:28:4f:8a:2d:3d:a6:1b:a5:ed:b8:1b:57:15:
         1f:ab:3f:ab:e5:61:01:97:0e:6a:8d:91:8d:cd:a0:07:61:c2:
         f1:2f:e8:c7:86:38:af:34:e5:41:fb:dd:25:04:fb:cc:22:26:
         79:ad:5a:e0:39:d7:6f:3a:c5:6e:f5:b1:cb:f9:de:0f:42:44:
         69:44:25:df:6c:02:af:d4:8f:36:23:3f:2f:18:be:4a:2b:7d:
         95:22:a7:12:2e:87:d7:5c:e1:d3:ef:8e:7a:23:61:99:04:ba:
         69:77:dc:f0:9a:d1:d1:78:0c:44:38:70:32:c3:2a:4a:85:fe:
         49:98:9f:c2:a6:3e:53:b0:52:20:1d:20:0b:55:99:d9:44:2b:
         42:bf:eb:84:17:64:2b:97:d4:04:2e:eb:76:85:95:58:17:ee:
         75:d7:10:c7:23:49:09:52:9d:2d:79:80:5c:7b:bf:eb:a7:d5:
         dc:ba:e9:0f:46:56:ed:d2:da:ce:d5:70:87:94:b8:c6:90:26:
         8e:e7:ae:6b:ec:17:ee:c5:d4:55:7c:b6:16:5b:6f:c5:a0:67:
         e9:2f:e1:ea:87:6d:e5:28:b0:b7:e4:0c:8b:b5:3b:e5:52:d5:
         01:5c:4f:29:05:bb:9d:f3:00:c9:d4:46:a2:b4:c0:4c:9d:16:
         59:96:4c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:20:21 2026 by rpki-client