This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/uu4RDU_XEe_o-xgd8iKxunLsRRk.roa
File:                     uu4RDU_XEe_o-xgd8iKxunLsRRk.roa (raw, json)
Hash identifier:          WSVYyW0VsPbEh7XSoefAa4skPLabJDbbiTqZspuhAAA=
Subject key identifier:   BA:EE:11:0D:4F:D7:11:EF:E8:FB:18:1D:F2:22:B1:BA:72:EC:45:19
Certificate issuer:       /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial:       019B7FF2610844B41507A6FCD92D439D874E
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/uu4RDU_XEe_o-xgd8iKxunLsRRk.roa
Signing time:             Fri 02 Jan 2026 18:22:29 +0000
ROA not before:           Fri 02 Jan 2026 18:22:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213238
IP address blocks:        193.30.81.0/24 maxlen: 24
                          2a02:1161:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f2:61:08:44:b4:15:07:a6:fc:d9:2d:43:9d:87:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
        Validity
            Not Before: Jan  2 18:22:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=baee110d4fd711efe8fb181df222b1ba72ec4519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:29:25:5e:a2:81:7a:ff:f3:c5:09:85:41:e8:
                    ae:4e:02:07:1c:30:6f:89:f4:8c:63:15:81:66:e2:
                    10:1f:50:41:16:a6:05:f0:ee:1e:d8:65:c4:be:ec:
                    fa:bf:ed:14:11:df:1e:c9:2f:c1:92:ba:c2:ac:0f:
                    d2:97:d9:06:89:9e:c7:b2:53:30:56:b9:a6:d7:0e:
                    d5:91:61:ad:db:67:c5:26:9a:2b:b3:25:49:50:c6:
                    05:47:93:85:ab:0c:0d:69:02:62:5b:e9:94:35:d8:
                    7d:10:ae:5d:0e:08:7b:91:8d:6c:1d:0c:01:0d:e3:
                    80:a6:0f:7f:af:46:1b:80:66:c1:be:30:7d:d2:44:
                    4c:2e:8a:2a:ad:30:fb:ce:20:eb:91:32:20:60:aa:
                    eb:03:90:41:96:1f:28:aa:81:66:03:cb:70:5c:83:
                    17:bc:fd:2b:d5:64:e9:1a:2b:88:83:c5:28:c4:91:
                    0e:79:1b:7e:e0:27:e6:68:0b:a7:1d:b8:9b:55:24:
                    42:11:0c:5d:0a:9c:f2:a7:54:94:30:fe:a5:4c:d7:
                    56:67:fa:24:dc:44:81:91:e0:13:ca:81:6c:0e:01:
                    21:03:87:69:ec:ef:05:1d:f6:fc:76:92:e1:2e:9f:
                    5b:de:77:8d:1e:06:e9:6c:da:53:37:82:e1:73:c2:
                    bf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EE:11:0D:4F:D7:11:EF:E8:FB:18:1D:F2:22:B1:BA:72:EC:45:19
            X509v3 Authority Key Identifier:
                keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/uu4RDU_XEe_o-xgd8iKxunLsRRk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.81.0/24
                IPv6:
                  2a02:1161:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:eb:b9:92:15:37:34:62:7e:63:2d:0c:63:0e:fe:0a:90:7f:
         35:61:ee:02:57:58:1f:f4:ea:43:f0:39:c5:9a:63:bb:0a:97:
         d4:22:77:aa:c5:85:e7:f3:4f:ea:53:d5:22:3f:dc:aa:35:bd:
         c8:d4:65:b2:e6:96:94:49:58:8a:5a:e4:24:61:8d:1b:62:9b:
         7a:f9:36:a9:2e:c7:bf:b7:a9:8b:7b:0f:d5:63:4f:12:dd:57:
         34:b8:65:e4:10:86:5c:01:8d:92:ee:c3:a5:63:bd:34:45:8f:
         44:92:cb:11:65:07:6f:ed:0c:a8:20:df:81:00:2b:19:f3:47:
         48:47:79:97:35:79:1e:a4:3b:b5:4a:7f:c0:b0:5e:38:1a:b3:
         84:65:cb:c0:e8:02:13:5b:15:ce:ed:ac:e1:ea:05:71:5b:30:
         cd:bb:41:00:2e:8a:d0:e0:78:46:6b:4c:ed:b7:b5:fc:74:dd:
         3d:50:8f:a3:96:b2:68:0e:a1:7c:63:fd:fd:6a:60:91:e3:b3:
         b6:bf:20:78:ca:c8:18:90:5e:ef:fe:e1:e7:25:25:5c:65:35:
         02:64:43:08:b9:5b:88:f1:96:92:29:be:94:77:4c:9b:62:eb:
         80:ea:e3:9b:9c:f4:83:b1:d9:60:2e:84:f7:bf:8f:fc:a3:be:
         86:74:3e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:08:01 2026 by rpki-client