This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/H0U-QwhyM4f-LroxZSMHz-CzAPY.roa
File:                     H0U-QwhyM4f-LroxZSMHz-CzAPY.roa (raw, json)
Hash identifier:          MhaU73mm5gvH2KHOTeU3CA7DM/8hD7ZaBXh+Nkvn0g4=
Subject key identifier:   1F:45:3E:43:08:72:33:87:FE:2E:BA:31:65:23:07:CF:E0:B3:00:F6
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       019B7E38AD43ACECBD5920039B40ED3EDB63
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/H0U-QwhyM4f-LroxZSMHz-CzAPY.roa
Signing time:             Fri 02 Jan 2026 10:20:02 +0000
ROA not before:           Fri 02 Jan 2026 10:20:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201813
IP address blocks:        195.178.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:ad:43:ac:ec:bd:59:20:03:9b:40:ed:3e:db:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jan  2 10:20:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1f453e4308723387fe2eba31652307cfe0b300f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c5:b7:d1:95:95:58:f8:31:84:7f:67:17:3a:
                    34:0e:1f:fa:40:db:25:23:13:4e:e9:4f:e7:1d:3e:
                    c0:8d:f7:8a:b0:bd:db:4d:ec:b7:e6:17:0c:0c:db:
                    87:af:24:5e:a4:c7:d8:75:05:7f:73:33:e7:90:12:
                    d2:c3:32:7e:c5:06:53:3a:bd:bb:d9:9b:f3:5b:0a:
                    eb:24:91:f3:49:06:5b:3c:e6:57:4f:18:83:fc:be:
                    13:f4:71:db:ab:01:d1:29:b3:ea:f6:39:1f:10:4a:
                    9e:96:47:7d:e3:5e:0f:8d:03:af:bc:8c:b9:58:2a:
                    7a:a1:9c:8c:42:91:c1:0d:d1:0b:1b:28:40:61:b1:
                    28:e5:92:59:79:3e:97:70:16:f2:37:68:be:75:80:
                    94:c7:25:7f:1e:2b:99:92:26:12:cf:17:44:d3:26:
                    64:5e:de:91:45:92:3e:64:1e:87:39:0d:90:4b:4e:
                    af:ac:dc:ee:67:ef:d9:8d:01:00:10:10:47:5f:02:
                    29:e0:38:30:61:f5:eb:1c:37:21:5f:8c:46:cb:d6:
                    18:61:d1:eb:f6:8b:d7:9c:ce:d6:9e:93:db:62:7d:
                    50:93:87:9a:f3:9f:45:7d:54:a8:54:12:77:d7:f3:
                    e2:04:8b:f1:c1:23:a9:b9:d4:ad:4b:10:82:43:13:
                    08:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:45:3E:43:08:72:33:87:FE:2E:BA:31:65:23:07:CF:E0:B3:00:F6
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/H0U-QwhyM4f-LroxZSMHz-CzAPY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:04:52:e2:24:74:4e:40:2b:17:df:b3:4d:9a:2c:3a:a1:45:
         b6:54:4e:7a:fb:84:c5:68:e8:b7:bb:e6:9d:15:ff:0f:c7:f8:
         56:1f:03:f4:a4:ca:a0:62:b9:68:d3:bf:6c:a9:34:92:fd:e6:
         31:4f:65:ae:08:eb:d3:fd:b4:32:92:50:9c:59:39:ae:22:2a:
         6d:1c:a3:69:36:52:29:2a:94:13:c1:57:51:55:09:c7:58:e8:
         8e:43:51:de:3a:b1:b3:5b:d9:35:34:e8:4e:85:63:7b:cd:95:
         73:27:56:52:3b:de:2a:16:ee:e1:ff:c5:b5:9f:d9:0b:70:ef:
         da:47:a7:93:4b:ba:f0:57:90:b6:2b:38:28:37:d0:1b:a8:24:
         96:26:9c:1b:b7:1c:b9:b7:be:84:8d:65:96:e8:97:b8:c6:71:
         7e:65:1e:e7:79:81:e8:b1:a4:3f:89:6f:61:3a:91:3c:dc:1c:
         1f:91:5f:04:1a:ea:6b:92:2b:ca:73:bb:48:1c:c6:2c:92:ae:
         6e:c8:e2:05:b1:8f:e8:d8:8e:58:fc:ad:c1:f7:8a:e3:1e:28:
         bc:51:38:8f:3d:05:e8:3d:bd:23:bf:26:f8:4b:54:d5:5b:94:
         83:23:10:12:09:f6:66:f0:9e:8f:2a:2e:bd:f1:2b:70:6c:e5:
         f7:39:73:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:58:12 2026 by rpki-client