This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/UdPU06tWsslWme0iVMjyU2yJ5Pk.roa
File:                     UdPU06tWsslWme0iVMjyU2yJ5Pk.roa (raw, json)
Hash identifier:          OE2dFscWkfAIBKPdDEPxzCQoZqYxSqMqaViDHDVP+iA=
Subject key identifier:   51:D3:D4:D3:AB:56:B2:C9:56:99:ED:22:54:C8:F2:53:6C:89:E4:F9
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       019B7F15A43AC7D68AFA1789C2D2846F03C0
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/UdPU06tWsslWme0iVMjyU2yJ5Pk.roa
Signing time:             Fri 02 Jan 2026 14:21:23 +0000
ROA not before:           Fri 02 Jan 2026 14:21:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49882
IP address blocks:        93.191.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 07:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:a4:3a:c7:d6:8a:fa:17:89:c2:d2:84:6f:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: Jan  2 14:21:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=51d3d4d3ab56b2c95699ed2254c8f2536c89e4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:99:4b:85:51:45:1a:5f:85:c1:cd:19:69:7f:
                    18:75:d8:4e:ff:43:05:b5:92:7c:76:37:d8:71:04:
                    20:e9:27:68:03:58:0d:0e:22:46:de:94:5c:06:82:
                    40:82:df:41:32:f1:88:45:6d:f2:e7:27:75:a5:44:
                    67:02:aa:fa:11:70:ab:78:2c:5a:a4:fb:a6:d8:60:
                    26:8d:90:7e:7c:01:79:fb:d3:ee:9a:6e:41:7b:8f:
                    eb:36:a2:ae:68:90:ec:7e:0a:94:a6:0d:15:26:70:
                    48:0e:11:ba:17:44:3c:c8:16:22:ce:c3:6d:a8:d1:
                    b0:5f:a0:59:05:5a:0b:40:a5:87:b3:55:30:bc:37:
                    8c:05:32:83:d0:c4:e1:d9:2b:bb:48:19:e4:b2:e9:
                    2b:1e:18:f8:de:88:bf:80:f0:e1:e2:ea:36:9c:aa:
                    59:c7:66:cb:a1:a6:0c:f0:04:63:d6:f0:f4:7e:68:
                    60:e6:82:d1:59:6e:32:dc:a6:bf:f5:d0:a2:9b:4c:
                    c1:3f:a6:50:9e:13:14:97:f9:88:8c:cd:8a:d4:ce:
                    9b:96:13:ad:7d:f8:1a:01:89:93:53:95:bf:83:17:
                    40:7b:c7:2f:96:ad:58:bf:0b:93:86:0b:c9:45:82:
                    02:05:99:fe:21:a1:03:11:ce:40:84:c3:06:62:07:
                    17:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D3:D4:D3:AB:56:B2:C9:56:99:ED:22:54:C8:F2:53:6C:89:E4:F9
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/UdPU06tWsslWme0iVMjyU2yJ5Pk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.191.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:5d:f3:ca:02:c9:4a:56:a5:04:c5:c3:a0:9a:4e:43:f6:d3:
         f5:c9:cd:77:d6:16:a7:a2:9f:92:6a:8b:75:a9:88:5a:74:0e:
         f6:10:54:30:93:d1:c9:c0:d7:5d:c0:51:f5:d3:07:d6:c6:ff:
         f8:0e:6a:ce:02:35:22:ec:b3:fc:f6:31:ff:c0:00:58:c3:c6:
         34:e9:6c:1e:16:72:0d:1e:02:31:6f:64:70:78:2d:4d:f8:6c:
         fc:a7:50:ce:c7:72:8f:73:97:8e:c6:d1:6a:3b:58:6a:49:58:
         15:94:c1:0a:c6:f3:a4:d2:96:d2:6f:15:26:25:4f:73:a2:7f:
         10:b4:70:c1:3d:7f:e9:6a:43:4e:9a:f7:8e:72:1d:68:37:46:
         54:f5:33:32:05:a9:1e:30:cc:d6:e1:62:4b:21:2b:04:de:70:
         8a:66:d7:1d:87:dc:a1:76:36:af:bb:8c:a9:7e:98:95:5e:df:
         09:30:3f:c4:2f:81:4c:85:89:4f:6b:db:ed:d1:17:da:e1:cc:
         50:94:b4:a8:dd:76:99:27:7b:64:02:07:7b:77:47:94:98:2a:
         d3:88:46:90:5c:bb:2e:18:c1:bd:2a:87:47:36:a9:8a:32:23:
         20:83:b4:95:82:4b:f7:84:c3:b1:cc:8b:c6:21:b4:0b:8e:b9:
         8d:37:83:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:28:37 2026 by rpki-client