This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UHuOitU_ovyQZbxR3ALXxb9sVLw.roa
File:                     UHuOitU_ovyQZbxR3ALXxb9sVLw.roa (raw, json)
Hash identifier:          /nrJ/pNHnxE3APAGXBFN60ORyIWduLtEM0eSK0mwsK8=
Subject key identifier:   50:7B:8E:8A:D5:3F:A2:FC:90:65:BC:51:DC:02:D7:C5:BF:6C:54:BC
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019C62AD2D88B67C18717B39BD1AEC287002
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UHuOitU_ovyQZbxR3ALXxb9sVLw.roa
Signing time:             Sun 15 Feb 2026 19:00:42 +0000
ROA not before:           Sun 15 Feb 2026 19:00:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56755
IP address blocks:        45.131.184.0/24 maxlen: 24
                          45.148.118.0/23 maxlen: 24
                          94.177.122.0/24 maxlen: 24
                          139.28.98.0/24 maxlen: 24
                          139.28.99.0/24 maxlen: 24
                          194.50.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Feb 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:62:ad:2d:88:b6:7c:18:71:7b:39:bd:1a:ec:28:70:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 15 19:00:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=507b8e8ad53fa2fc9065bc51dc02d7c5bf6c54bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:b6:8e:98:c6:75:49:96:41:f1:3e:4c:dc:
                    a8:cc:26:77:3d:77:58:bc:b2:06:ef:06:91:0c:cc:
                    8c:6e:44:1e:e1:f5:54:17:b9:74:d5:01:0c:81:46:
                    74:03:3e:bf:31:02:f1:60:45:cd:e4:40:de:75:14:
                    74:d5:61:af:bf:e5:c8:7c:bd:0f:69:ed:06:36:4f:
                    4d:9d:cb:be:88:a4:7f:0e:a6:1e:bb:5b:8f:31:4d:
                    34:d8:cd:0e:27:72:60:ba:bc:0d:9d:c3:98:f1:86:
                    e9:77:2a:71:de:73:51:83:19:38:d6:2e:db:5e:ea:
                    57:c5:44:43:a5:c7:22:a0:fc:c0:a9:13:55:ed:35:
                    2c:f1:97:ea:15:98:e7:2e:10:fb:b2:6d:f4:e9:09:
                    32:ef:fa:a1:25:d6:d1:a9:8e:9d:75:fc:3d:32:0f:
                    05:95:a3:e8:64:e4:1c:dc:e3:4f:d7:4b:57:f8:23:
                    02:23:71:b9:a5:a2:3a:1d:fa:cf:95:42:dc:ef:d8:
                    e0:85:c6:da:cb:16:8a:d0:0d:4b:b5:65:e1:07:37:
                    30:fe:b3:c9:ff:81:23:b0:c8:5d:c3:96:28:61:01:
                    9d:d6:ce:12:c7:71:88:dd:01:32:51:bf:02:6e:d4:
                    44:22:90:36:5c:92:c1:86:1e:f4:8d:97:71:6a:66:
                    55:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7B:8E:8A:D5:3F:A2:FC:90:65:BC:51:DC:02:D7:C5:BF:6C:54:BC
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UHuOitU_ovyQZbxR3ALXxb9sVLw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.131.184.0/24
                  45.148.118.0/23
                  94.177.122.0/24
                  139.28.98.0/23
                  194.50.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:82:c1:2f:e8:a3:11:22:2c:05:9a:0d:6b:35:12:a3:fe:a8:
         b4:38:ba:52:2b:44:2b:15:44:ec:c4:42:b0:34:fa:df:84:ce:
         05:e8:e6:2e:0d:e7:f2:53:56:f3:63:43:36:78:f4:e3:aa:b2:
         9e:3a:50:94:dd:ea:4c:a0:2b:f7:a9:cb:c2:9b:95:f9:ee:c9:
         e8:cb:77:41:39:e5:d7:35:4b:e6:84:be:84:2e:a7:db:a3:ba:
         fb:46:71:85:5f:33:81:4b:a3:65:3c:60:17:ec:81:41:3f:ad:
         c1:19:78:1c:38:25:5f:27:5e:b7:92:ae:3b:67:20:bd:cc:e2:
         90:01:d5:23:05:8f:fa:02:93:2b:06:8a:fc:65:03:82:64:a2:
         33:d7:33:aa:23:ee:23:ad:b2:88:69:24:78:ef:67:c5:4a:2c:
         20:01:da:11:c2:2c:58:f0:35:56:ce:39:6d:43:5d:f6:68:f0:
         83:68:c9:e0:60:4a:7c:39:8f:6f:88:b5:9c:d6:7e:54:59:31:
         2b:db:01:62:1e:b3:ad:9c:57:a0:48:b6:17:7e:d3:28:7f:e0:
         23:69:0a:43:3b:b1:08:82:2e:d1:bb:69:c7:51:21:a6:6f:12:
         d3:2a:ab:e9:d4:3c:f3:58:b2:dc:09:fc:74:3c:9e:01:5b:a8:
         0c:ba:79:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 04:50:36 2026 by rpki-client