This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/uUz_sLM3KsC9uXXY3-UTgKhMUC0.roa
File:                     uUz_sLM3KsC9uXXY3-UTgKhMUC0.roa (raw, json)
Hash identifier:          3lqaJbLuu76YzS5K2R73vb0E1obPhoOUMrSjJHQL5uU=
Subject key identifier:   B9:4C:FF:B0:B3:37:2A:C0:BD:B9:75:D8:DF:E5:13:80:A8:4C:50:2D
Certificate issuer:       /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial:       019B7BA4ADF5F93CF0E76EE2AD9DA2EA27E7
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/uUz_sLM3KsC9uXXY3-UTgKhMUC0.roa
Signing time:             Thu 01 Jan 2026 22:19:08 +0000
ROA not before:           Thu 01 Jan 2026 22:19:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     18046
IP address blocks:        87.192.88.0/21 maxlen: 24
                          87.192.208.0/21 maxlen: 24
                          87.232.144.0/20 maxlen: 24
                          87.232.200.0/21 maxlen: 24
                          87.232.208.0/20 maxlen: 24
                          87.232.226.0/23 maxlen: 24
                          87.232.232.0/21 maxlen: 24
                          87.232.240.0/21 maxlen: 24
                          87.232.248.0/23 maxlen: 24
                          89.124.246.0/23 maxlen: 24
                          139.84.64.0/19 maxlen: 24
                          157.239.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 15:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:ad:f5:f9:3c:f0:e7:6e:e2:ad:9d:a2:ea:27:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
        Validity
            Not Before: Jan  1 22:19:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b94cffb0b3372ac0bdb975d8dfe51380a84c502d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:73:5c:c7:e9:5f:bb:61:da:e1:3d:3d:a9:6f:
                    d1:20:73:d9:be:39:23:8d:df:2e:7c:e8:b4:a5:85:
                    d9:83:e9:ef:0c:64:0c:bb:e0:74:95:6e:a0:5b:ac:
                    a5:c6:1f:a8:31:ae:eb:d3:4b:50:2b:7b:b1:42:62:
                    93:88:97:04:c0:45:ea:e3:46:75:7c:ab:73:8b:30:
                    42:5f:b8:be:13:f0:f8:dd:d3:4e:37:83:e7:ef:d3:
                    07:28:ff:1a:35:f6:ef:1a:fb:f9:71:5f:ee:26:30:
                    6f:dd:b7:d3:4c:e0:f1:52:8e:50:be:c2:aa:c7:eb:
                    54:5e:82:f1:2c:d7:d6:3b:4f:ec:7e:d2:53:64:a4:
                    f1:e3:3f:ef:bc:7c:65:64:50:6c:9e:4f:9c:52:29:
                    f5:39:df:ad:08:9b:57:89:d1:5f:56:c2:0b:9c:13:
                    e4:e2:e1:87:3e:87:91:25:a3:b3:b8:9e:df:7b:a3:
                    79:70:88:16:b3:8e:75:1d:67:78:05:83:18:cc:c0:
                    2d:3d:bd:f0:1f:b0:9b:42:f7:2f:1a:85:77:d2:bc:
                    e2:82:87:98:b0:1f:ce:89:c9:f0:a4:a7:86:95:96:
                    79:69:b4:14:50:5b:b7:ee:a1:b1:3b:35:ca:7f:f2:
                    21:f1:4f:b7:ec:3e:4e:d5:4f:41:d6:df:da:12:4e:
                    2a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4C:FF:B0:B3:37:2A:C0:BD:B9:75:D8:DF:E5:13:80:A8:4C:50:2D
            X509v3 Authority Key Identifier:
                keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/uUz_sLM3KsC9uXXY3-UTgKhMUC0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.192.88.0/21
                  87.192.208.0/21
                  87.232.144.0/20
                  87.232.200.0-87.232.223.255
                  87.232.226.0/23
                  87.232.232.0-87.232.249.255
                  89.124.246.0/23
                  139.84.64.0/19
                  157.239.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0c:2a:31:e0:43:33:b0:ec:2a:1e:1a:1b:18:a4:71:13:9a:e5:
         e7:a1:f0:af:9f:3a:b0:28:71:2a:2a:6c:2f:9c:87:34:24:f7:
         77:1b:f5:3c:72:83:58:35:04:40:a9:46:f7:47:16:2b:35:a3:
         17:a4:3f:cf:59:37:a5:15:47:bd:66:bc:34:5c:f9:14:45:b6:
         04:61:26:5d:4e:30:26:ff:64:35:a0:7f:c1:c2:5e:18:b2:eb:
         c3:0a:91:38:1c:13:67:ee:29:1a:9e:82:c1:ba:15:38:9a:cf:
         06:0c:c1:a7:4d:4b:d2:85:a2:cf:63:a0:ac:ba:ed:7f:a1:83:
         b2:95:48:4b:b9:4b:53:d1:90:4e:98:64:2b:b3:77:72:ca:47:
         3b:9e:72:41:18:bd:e8:0c:87:41:77:04:ab:4d:e9:78:b7:4f:
         68:26:b9:64:99:b1:b4:55:44:6a:a2:dd:cf:ee:6e:3c:70:63:
         5a:d2:1d:13:f8:ce:f6:7e:07:f2:6a:33:04:fd:69:57:b7:ec:
         9c:5d:12:ca:af:c2:d6:02:1a:a2:c1:6c:16:26:ca:41:49:b1:
         3e:98:79:19:d6:37:7a:41:80:ce:6e:ce:64:01:a8:b1:e0:9f:
         54:eb:cd:02:8f:fc:cc:ef:a3:7f:45:7e:0f:99:1b:f5:3f:7d:
         bc:fe:91:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 00:08:33 2026 by rpki-client