This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/UB6s7CmMOtswxn98ROn4ig7vXNc.roa
File:                     UB6s7CmMOtswxn98ROn4ig7vXNc.roa (raw, json)
Hash identifier:          /qiCV/72s937dMEO7sUwjJZUa0JO5HvdoJ9oTmFqF+s=
Subject key identifier:   50:1E:AC:EC:29:8C:3A:DB:30:C6:7F:7C:44:E9:F8:8A:0E:EF:5C:D7
Certificate issuer:       /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial:       019B7EA70BC953EC5DD39B52262F91A15914
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/UB6s7CmMOtswxn98ROn4ig7vXNc.roa
Signing time:             Fri 02 Jan 2026 12:20:35 +0000
ROA not before:           Fri 02 Jan 2026 12:20:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41872
IP address blocks:        185.244.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a7:0b:c9:53:ec:5d:d3:9b:52:26:2f:91:a1:59:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
        Validity
            Not Before: Jan  2 12:20:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=501eacec298c3adb30c67f7c44e9f88a0eef5cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7a:fb:51:30:e8:4a:14:d9:7e:1f:f2:3f:96:
                    a3:5e:7e:9e:61:7f:47:1d:fb:38:8c:45:81:b5:2e:
                    a2:ff:32:52:40:bf:af:c8:8d:13:1c:f0:0e:69:1f:
                    65:95:be:3a:16:09:33:13:11:83:99:2a:9f:1e:9d:
                    ee:59:7c:26:8c:04:ca:b5:66:95:cd:1f:c4:12:5d:
                    08:fc:11:b3:db:91:3e:29:df:9b:d0:da:bb:ba:04:
                    60:78:e4:42:e1:2d:7d:89:fc:76:60:13:ee:01:80:
                    1f:22:d8:6c:01:e9:a7:62:48:1e:03:72:07:ab:2b:
                    b7:aa:9c:d5:db:b4:42:ba:aa:4f:b2:0f:61:18:d7:
                    56:77:a9:65:cd:dd:d2:23:af:44:5a:86:5f:e0:12:
                    06:e1:8f:78:72:d8:5b:80:a9:85:1e:3e:3f:96:4b:
                    d2:7e:44:c9:8a:18:b6:d6:a6:b4:e2:2b:c2:53:ce:
                    12:e3:19:db:ef:fa:56:44:0a:d2:fd:a7:96:88:f9:
                    e5:95:fd:cb:fe:03:8c:bb:18:52:cd:c9:cc:12:0c:
                    88:af:66:3b:be:64:b9:ad:64:40:ad:69:ef:85:49:
                    1f:ab:b4:bd:ca:24:b0:00:20:d1:52:bd:ad:a1:72:
                    27:76:af:42:78:38:c5:0c:86:23:52:e0:f3:c0:5d:
                    6e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1E:AC:EC:29:8C:3A:DB:30:C6:7F:7C:44:E9:F8:8A:0E:EF:5C:D7
            X509v3 Authority Key Identifier:
                keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/UB6s7CmMOtswxn98ROn4ig7vXNc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.244.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:88:f7:ec:1e:74:66:e8:75:49:ae:4f:74:e5:15:ff:11:86:
         1e:b2:05:53:62:b2:d0:b8:5a:e2:c3:fe:5e:53:a5:de:37:87:
         12:4e:13:01:d1:db:fd:26:cc:5b:77:61:90:d0:9f:71:49:44:
         c6:78:32:7c:82:3b:95:ec:0f:57:7c:76:76:88:87:86:3b:33:
         62:7e:82:d6:e2:f6:32:e7:ae:55:da:4f:fa:07:85:7c:68:64:
         88:b9:b3:3e:78:54:de:2c:49:bf:41:36:d8:46:29:3e:c5:c5:
         40:fb:1f:06:e8:25:79:89:bd:f2:af:ca:96:da:e2:e3:e6:43:
         9a:6a:34:7e:3e:02:4c:d8:59:39:6c:37:0e:0a:70:45:f5:da:
         09:64:3f:42:51:09:4a:c2:07:62:cd:bf:b6:fe:5f:4b:05:d6:
         8a:ba:7f:17:2c:1f:e3:24:5b:15:18:c4:b4:6f:f0:4a:e1:91:
         a2:ea:69:b9:fb:3f:4f:a4:9c:1b:c3:ea:62:bb:14:d6:29:7d:
         e8:ee:5f:8f:69:5f:f6:2a:60:0d:4c:97:1e:3f:45:76:ae:0b:
         c2:0b:31:c5:2d:1c:ed:72:12:71:97:3a:d2:fb:a3:67:9f:49:
         1b:81:29:b5:81:05:ec:55:2d:cf:c6:d0:21:1e:f1:55:e8:4a:
         d9:fa:b9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:29:15 2026 by rpki-client