This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/adUL-7OOAjcdBX5RrzTepBljTT4.roa
File:                     adUL-7OOAjcdBX5RrzTepBljTT4.roa (raw, json)
Hash identifier:          RNu5RRYe89/6gk+/c0+VzYn4CsgoO0xW1+RglYzvNqc=
Subject key identifier:   69:D5:0B:FB:B3:8E:02:37:1D:05:7E:51:AF:34:DE:A4:19:63:4D:3E
Certificate issuer:       /CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Certificate serial:       019B7CECC43D6921483C6406E69B0532D65C
Authority key identifier: 55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/adUL-7OOAjcdBX5RrzTepBljTT4.roa
Signing time:             Fri 02 Jan 2026 04:17:30 +0000
ROA not before:           Fri 02 Jan 2026 04:17:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56911
IP address blocks:        195.234.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ec:c4:3d:69:21:48:3c:64:06:e6:9b:05:32:d6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
        Validity
            Not Before: Jan  2 04:17:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d50bfbb38e02371d057e51af34dea419634d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a2:9c:f9:ba:3b:5b:95:a0:ed:db:11:11:ba:
                    f7:b1:58:61:37:ed:d3:de:a6:ef:a2:84:60:1a:76:
                    91:72:37:91:0a:b5:77:0c:22:8e:1c:ed:9c:de:52:
                    89:14:6d:af:fc:c1:69:03:80:61:d8:99:95:91:78:
                    f7:1e:7b:1a:92:21:0a:5f:b1:f0:5c:d7:4c:c7:f3:
                    1a:2d:9b:a1:0e:7a:ab:07:05:1a:5d:3f:0e:fe:9a:
                    b5:06:11:6a:a9:06:22:9a:d0:d6:87:5f:de:30:0f:
                    9c:c7:50:4d:31:85:c1:68:79:10:0a:7d:b8:a1:94:
                    fe:cd:c2:15:a9:ef:ac:5f:df:1a:1e:1d:95:31:82:
                    72:d7:16:13:bb:e8:10:e5:1a:63:48:82:91:d2:79:
                    67:7c:54:c2:f3:f9:6c:78:8e:a4:92:dd:72:5e:5b:
                    99:db:1b:f4:d8:69:15:9d:24:48:24:ad:7e:c3:4b:
                    38:e7:c2:be:70:4d:9a:0b:47:f2:c3:e4:7a:69:9e:
                    0e:b7:c0:40:d0:13:1f:ea:7b:2c:bf:46:92:95:4a:
                    c3:39:ea:d0:4f:47:e9:59:2a:47:7c:77:69:3a:68:
                    e7:d1:a1:b0:be:20:42:a1:61:bd:f6:76:32:a7:0d:
                    40:21:5a:4d:ae:a8:3e:28:a9:0c:d2:23:5e:dc:13:
                    5c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D5:0B:FB:B3:8E:02:37:1D:05:7E:51:AF:34:DE:A4:19:63:4D:3E
            X509v3 Authority Key Identifier:
                keyid:55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/adUL-7OOAjcdBX5RrzTepBljTT4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.234.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:61:ad:01:b4:79:75:fd:b9:04:17:b2:6e:88:7f:b2:6c:31:
         36:38:49:67:92:1a:d2:d5:14:0a:bf:90:fd:34:28:aa:97:75:
         41:2c:62:65:a9:89:e4:43:67:4d:bc:b2:b1:8b:ea:61:fd:cd:
         bb:57:fa:fb:1b:88:4d:ec:a4:4d:2a:b4:13:d0:b0:d6:b7:4a:
         d0:36:43:0d:a3:d1:ba:73:88:9c:7d:82:eb:74:da:d4:cb:85:
         08:dd:f9:b8:2d:8b:2a:64:50:c9:4a:0d:4e:bb:18:3c:b3:0f:
         bd:6f:39:ec:d2:5a:18:56:6b:1f:b7:dc:9e:dd:9f:d9:37:ab:
         52:a8:d7:a6:3a:96:20:82:9c:4b:ce:42:2f:3e:13:f3:15:4d:
         ac:e8:28:e3:68:c3:8a:12:30:bd:f4:58:06:4b:37:bd:32:91:
         0a:f1:61:c4:62:fe:ad:40:b6:9b:24:bd:5d:c8:49:d7:bf:4e:
         54:85:57:af:ca:6b:75:4e:8e:b8:51:90:67:55:fc:fb:04:17:
         60:f6:a7:4c:7a:86:1c:3d:ad:2e:a8:7d:ff:24:68:39:f2:fe:
         e2:7f:6b:ca:35:bf:47:1b:90:ab:2a:7e:98:ff:cd:1e:2b:b9:
         e8:30:5b:c2:4d:20:35:24:44:8f:97:e2:e6:6c:db:1d:cb:37:
         2d:22:4d:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87MQ9aSFIPGQG5psFMtZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NjEwYTU5ZGRmZmJkMjRlZTRiMjk5ZTliMjRiMWJmMDM2
ZjhlNDMwHhcNMjYwMTAyMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWQ1MGJmYmIzOGUwMjM3MWQwNTdlNTFhZjM0ZGVhNDE5NjM0ZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aKc+bo7W5Wg7dsREbr3sVhhN+3T
3qbvooRgGnaRcjeRCrV3DCKOHO2c3lKJFG2v/MFpA4Bh2JmVkXj3HnsakiEKX7Hw
XNdMx/MaLZuhDnqrBwUaXT8O/pq1BhFqqQYimtDWh1/eMA+cx1BNMYXBaHkQCn24
oZT+zcIVqe+sX98aHh2VMYJy1xYTu+gQ5RpjSIKR0nlnfFTC8/lseI6kkt1yXluZ
2xv02GkVnSRIJK1+w0s458K+cE2aC0fyw+R6aZ4Ot8BA0BMf6nssv0aSlUrDOerQ
T0fpWSpHfHdpOmjn0aGwviBCoWG99nYypw1AIVpNrqg+KKkM0iNe3BNc2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGnVC/uzjgI3HQV+Ua803qQZY00+MB8GA1UdIwQY
MBaAFFVhClnd/70k7kspnpsksb8Db45DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVldFS1dkM192U1R1U3ltZW15U3h2d052amtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xN2EzYmQtNzU0YS00NTkzLWI1MWUt
OWZiNDE1YjA5YjVlLzEvYWRVTC03T09BamNkQlg1UnJ6VGVwQmxqVFQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xN2EzYmQtNzU0YS00NTkzLWI1MWUtOWZiNDE1YjA5YjVl
LzEvVldFS1dkM192U1R1U3ltZW15U3h2d052amtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+pdMA0G
CSqGSIb3DQEBCwUAA4IBAQArYa0BtHl1/bkEF7JuiH+ybDE2OElnkhrS1RQKv5D9
NCiql3VBLGJlqYnkQ2dNvLKxi+ph/c27V/r7G4hN7KRNKrQT0LDWt0rQNkMNo9G6
c4icfYLrdNrUy4UI3fm4LYsqZFDJSg1Ouxg8sw+9bzns0loYVmsft9ye3Z/ZN6tS
qNemOpYggpxLzkIvPhPzFU2s6CjjaMOKEjC99FgGSze9MpEK8WHEYv6tQLabJL1d
yEnXv05UhVevymt1To64UZBnVfz7BBdg9qdMeoYcPa0uqH3/JGg58v7if2vKNb9H
G5CrKn6Y/80eK7noMFvCTSA1JESPl+LmbNsdyzctIk0X
-----END CERTIFICATE-----
Generated at Mon Jan 26 09:23:05 2026 by rpki-client