This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/uKa6FxImXf06YNSnlN4nrccJ9Cc.roa
File:                     uKa6FxImXf06YNSnlN4nrccJ9Cc.roa (raw, json)
Hash identifier:          ePdUA2mdutDGzHN2U8mQRRE7yoNYH9bgsLzTLHYrHtY=
Subject key identifier:   B8:A6:BA:17:12:26:5D:FD:3A:60:D4:A7:94:DE:27:AD:C7:09:F4:27
Certificate issuer:       /CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
Certificate serial:       019B7EA5297DA1516F850CC2F1211EA1A488
Authority key identifier: E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/uKa6FxImXf06YNSnlN4nrccJ9Cc.roa
Signing time:             Fri 02 Jan 2026 12:18:31 +0000
ROA not before:           Fri 02 Jan 2026 12:18:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41617
IP address blocks:        195.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a5:29:7d:a1:51:6f:85:0c:c2:f1:21:1e:a1:a4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
        Validity
            Not Before: Jan  2 12:18:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b8a6ba1712265dfd3a60d4a794de27adc709f427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:47:26:e5:0c:5c:9f:58:20:88:2d:5e:7a:4a:
                    58:1a:76:b4:64:0c:51:ca:78:2d:a6:ab:a2:d6:c9:
                    4a:07:b6:a1:f1:12:3f:df:12:48:2c:62:38:3e:f6:
                    00:5d:c5:c4:c8:99:b8:13:67:a7:51:4f:fc:c9:22:
                    be:40:c6:35:57:02:88:3e:de:18:8e:2a:ab:68:f4:
                    27:4c:84:cf:4a:40:99:d0:53:72:ba:b4:9c:8d:af:
                    d4:e7:af:b5:a5:f2:a8:3e:14:ee:ef:88:d4:3e:d3:
                    fd:b1:dc:d7:15:18:c4:96:ff:4f:56:a3:3d:08:11:
                    c4:21:80:03:8f:9b:5b:2f:42:ae:f9:a2:84:8f:e7:
                    c3:47:0a:0a:09:81:76:af:d0:59:5f:d0:83:0d:f2:
                    bf:69:ef:13:8d:eb:d4:0f:ce:f4:ab:ff:ab:35:05:
                    58:07:72:9a:0f:2b:16:1e:e8:40:c8:69:35:64:05:
                    b3:08:a9:e6:b2:4d:a8:40:6f:fb:40:c1:83:8f:d3:
                    30:a7:c0:c0:3b:b8:ae:5c:53:33:a6:ea:56:c5:01:
                    84:dc:92:6e:5f:ec:bf:63:11:e1:ab:e6:04:df:3a:
                    f1:18:ab:f3:7e:60:e3:42:bb:fb:30:f5:a2:de:d1:
                    b3:88:fa:d7:55:9d:f2:f3:62:47:e3:7c:26:d1:db:
                    0f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A6:BA:17:12:26:5D:FD:3A:60:D4:A7:94:DE:27:AD:C7:09:F4:27
            X509v3 Authority Key Identifier:
                keyid:E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/uKa6FxImXf06YNSnlN4nrccJ9Cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:fe:1e:fb:dc:21:0f:14:6b:90:9e:41:75:48:2b:56:37:75:
         bb:f5:14:28:d5:b4:dc:f1:88:d0:f6:7a:7d:cb:3f:1d:b5:1f:
         d0:64:89:e2:54:15:db:66:67:2d:58:78:c5:20:38:ed:b2:2b:
         dd:8b:ef:16:e7:93:43:e1:b5:ad:11:f5:38:f5:81:06:5c:39:
         4c:e0:1a:37:89:67:9d:60:85:91:5a:9e:75:a7:fc:f3:29:9d:
         16:0a:20:51:a2:e3:fe:49:fa:a9:b6:41:6a:31:80:c5:ba:d3:
         74:c2:e6:28:5e:78:49:27:d1:14:70:47:ba:37:fc:b9:fb:a2:
         7d:e0:3f:89:00:3a:91:8c:38:c5:0c:c4:13:de:98:4b:45:55:
         9b:07:23:6e:be:6f:bc:b3:a2:cf:6f:ba:ba:85:dc:23:80:6d:
         a6:b5:01:4d:23:f4:48:80:f5:c5:c7:f8:61:6b:b2:a3:bf:a9:
         67:33:fc:7b:a9:84:62:30:ab:05:49:cb:4b:2b:87:2b:e0:88:
         64:74:fb:25:89:cd:04:c7:3f:2d:a4:68:53:84:ca:a2:0e:1c:
         02:d3:e4:af:65:13:41:7d:05:fa:7e:6c:3d:b9:08:5a:34:d8:
         a2:dc:d5:eb:a3:ee:27:5d:a6:3c:80:b1:fb:7c:c6:b1:78:8e:
         0a:02:66:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+pSl9oVFvhQzC8SEeoaSIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NzE3MjZjNGMxMDNlMGViNDJjMmYwZThiNWRhODczM2Zh
N2VmZWQwHhcNMjYwMTAyMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGE2YmExNzEyMjY1ZGZkM2E2MGQ0YTc5NGRlMjdhZGM3MDlmNDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ucm5Qxcn1ggiC1eekpYGna0ZAxR
yngtpqui1slKB7ah8RI/3xJILGI4PvYAXcXEyJm4E2enUU/8ySK+QMY1VwKIPt4Y
jiqraPQnTITPSkCZ0FNyurScja/U56+1pfKoPhTu74jUPtP9sdzXFRjElv9PVqM9
CBHEIYADj5tbL0Ku+aKEj+fDRwoKCYF2r9BZX9CDDfK/ae8TjevUD870q/+rNQVY
B3KaDysWHuhAyGk1ZAWzCKnmsk2oQG/7QMGDj9Mwp8DAO7iuXFMzpupWxQGE3JJu
X+y/YxHhq+YE3zrxGKvzfmDjQrv7MPWi3tGziPrXVZ3y82JH43wm0dsP+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLimuhcSJl39OmDUp5TeJ63HCfQnMB8GA1UdIwQY
MBaAFOhxcmxMED4OtCwvDotdqHM/p+/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkhGeWJFd1FQZzYwTEM4T2kxMm9jei1uNy0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jZDVjODEtZDIwNS00MGRjLWE4NWIt
Zjc0NGZkYzgzY2Y1LzEvdUthNkZ4SW1YZjA2WU5TbmxONG5yY2NKOUNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9jZDVjODEtZDIwNS00MGRjLWE4NWItZjc0NGZkYzgzY2Y1
LzEvNkhGeWJFd1FQZzYwTEM4T2kxMm9jei1uNy0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4rSMA0G
CSqGSIb3DQEBCwUAA4IBAQDC/h773CEPFGuQnkF1SCtWN3W79RQo1bTc8YjQ9np9
yz8dtR/QZIniVBXbZmctWHjFIDjtsivdi+8W55ND4bWtEfU49YEGXDlM4Bo3iWed
YIWRWp51p/zzKZ0WCiBRouP+SfqptkFqMYDFutN0wuYoXnhJJ9EUcEe6N/y5+6J9
4D+JADqRjDjFDMQT3phLRVWbByNuvm+8s6LPb7q6hdwjgG2mtQFNI/RIgPXFx/hh
a7Kjv6lnM/x7qYRiMKsFSctLK4cr4IhkdPslic0Exz8tpGhThMqiDhwC0+SvZRNB
fQX6fmw9uQhaNNii3NXro+4nXaY8gLH7fMaxeI4KAmYD
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:17 2026 by rpki-client