This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/uGHVRNRL_tLrHeYc2ab2IcKFN0o.roa
File:                     uGHVRNRL_tLrHeYc2ab2IcKFN0o.roa (raw, json)
Hash identifier:          Rgrpa9BFgykqaCEIzp1M6C8GB9BsKEtf6xgAPY/or1E=
Subject key identifier:   B8:61:D5:44:D4:4B:FE:D2:EB:1D:E6:1C:D9:A6:F6:21:C2:85:37:4A
Certificate issuer:       /CN=9944078b40772b172c7046e7446204980ceae139
Certificate serial:       019B797F3A92A7CA907670E87896D53CC2F6
Authority key identifier: 99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/uGHVRNRL_tLrHeYc2ab2IcKFN0o.roa
Signing time:             Thu 01 Jan 2026 12:18:59 +0000
ROA not before:           Thu 01 Jan 2026 12:18:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43210
IP address blocks:        195.95.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:3a:92:a7:ca:90:76:70:e8:78:96:d5:3c:c2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9944078b40772b172c7046e7446204980ceae139
        Validity
            Not Before: Jan  1 12:18:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b861d544d44bfed2eb1de61cd9a6f621c285374a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:26:bd:a6:a2:e4:29:92:26:e4:01:d3:05:4c:
                    cf:bd:d5:f7:de:fc:7e:70:78:b9:60:f3:4e:b4:64:
                    a4:69:49:2b:82:33:2e:52:54:ef:6a:02:37:56:4b:
                    fd:37:f1:c9:1c:27:50:af:ef:c5:27:62:0d:a9:e8:
                    de:7c:6b:6e:2b:e1:cd:36:7b:74:c0:ef:fb:a0:91:
                    1b:fd:0d:eb:b7:11:11:19:03:ca:af:5c:42:86:95:
                    65:77:bb:74:34:b8:bc:b4:23:c0:4f:c8:a7:f6:75:
                    9f:15:b3:47:7c:c3:89:7f:fa:23:13:80:21:97:71:
                    c0:b5:6a:6a:78:6d:b5:67:e5:c9:10:1c:d1:73:ec:
                    d6:0d:fa:ee:8c:71:15:77:43:e2:6b:92:ce:6a:10:
                    67:2f:58:62:82:44:e2:b8:65:e0:6d:e9:79:de:40:
                    b8:4c:38:0e:0e:a2:47:b5:40:74:e8:cc:d0:37:11:
                    87:a8:29:4f:c4:0e:3d:72:ee:02:f1:26:75:22:7f:
                    06:48:42:ba:9f:60:83:89:2d:1d:5d:56:86:ec:29:
                    83:c6:bb:45:23:c0:87:b2:61:0e:6d:0c:d8:61:ca:
                    dc:4c:63:f1:b6:26:bc:0c:e5:ac:9c:6b:7a:dc:bf:
                    36:19:c2:ad:d6:21:b5:ca:5e:6e:3f:fb:40:64:cd:
                    7d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:61:D5:44:D4:4B:FE:D2:EB:1D:E6:1C:D9:A6:F6:21:C2:85:37:4A
            X509v3 Authority Key Identifier:
                keyid:99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/uGHVRNRL_tLrHeYc2ab2IcKFN0o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.95.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:ba:70:c4:bb:7a:f1:1e:2a:6b:51:f9:73:e6:63:b3:77:b1:
         30:57:f7:35:da:00:4b:cd:05:eb:36:c2:77:76:6a:2f:de:1b:
         80:00:8e:77:38:1d:b5:18:2b:5d:8e:c3:0e:70:76:19:6e:4e:
         05:c4:04:65:e2:6d:ba:bf:62:79:63:7d:f9:8a:24:c4:59:c7:
         27:16:59:6a:d8:68:fd:0b:4e:3a:10:80:06:02:06:38:6b:37:
         f4:34:2b:c3:5a:04:48:50:f8:aa:30:70:ef:77:a1:69:28:c2:
         57:10:56:b0:82:3a:31:87:cd:64:88:df:ed:9e:c7:8a:ae:a0:
         c2:96:72:35:c8:67:f4:af:cf:50:bb:71:b8:ec:3a:50:35:9e:
         0b:1f:fe:c5:14:e5:06:fd:d0:cf:a0:26:df:8e:55:94:f4:cb:
         25:68:3e:d7:aa:aa:55:68:9c:6f:44:33:da:69:a9:9e:cd:9b:
         97:38:9a:23:99:2b:34:0a:0f:ac:8e:1a:8e:3f:c8:6c:f9:73:
         9c:86:54:04:9c:18:1c:26:26:ca:2b:bd:dd:28:a5:97:9b:da:
         0d:7a:2b:60:15:1f:ce:ae:c3:6c:d0:c2:12:69:14:f6:51:91:
         ce:22:04:da:5f:d2:6a:62:03:e4:f9:57:21:84:ce:ac:8f:27:
         ca:2e:ed:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:06 2026 by rpki-client