This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/UKBFNmW-avu0y-ZELfNkwrzKuSM.roa
File:                     UKBFNmW-avu0y-ZELfNkwrzKuSM.roa (raw, json)
Hash identifier:          SdZuGRpwFqsC6fwO8VFNthsAajlBrQzgt1h1a3a0ulc=
Subject key identifier:   50:A0:45:36:65:BE:6A:FB:B4:CB:E6:44:2D:F3:64:C2:BC:CA:B9:23
Certificate issuer:       /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial:       019B7DCB12706FC4225564039815B9316AEC
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/UKBFNmW-avu0y-ZELfNkwrzKuSM.roa
Signing time:             Fri 02 Jan 2026 08:20:19 +0000
ROA not before:           Fri 02 Jan 2026 08:20:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62456
IP address blocks:        93.180.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 11:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:12:70:6f:c4:22:55:64:03:98:15:b9:31:6a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
        Validity
            Not Before: Jan  2 08:20:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=50a0453665be6afbb4cbe6442df364c2bccab923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:a5:35:1b:a5:53:b5:24:fa:98:58:b8:4d:
                    7a:81:ae:80:6f:2c:58:b7:01:0e:f0:ef:82:e3:1d:
                    14:23:5b:0f:c5:9a:1e:f8:2f:47:7d:af:9d:4f:25:
                    e5:ff:2f:cb:70:de:4f:f9:fa:9b:cb:b9:32:39:a8:
                    b7:b9:42:b5:a5:6d:62:d8:86:36:d5:6b:5d:d3:6b:
                    c8:46:5c:4c:ff:d4:1a:d3:4c:22:4b:81:5f:8f:59:
                    24:b2:a3:8a:41:dc:a4:18:20:1e:70:bb:33:03:dc:
                    c2:ba:55:12:8d:1b:e5:68:77:8e:c3:38:8c:60:b9:
                    86:31:90:47:4b:44:41:b3:1a:c4:a7:88:6c:6a:52:
                    ee:74:5e:2e:e0:3b:21:29:c7:4f:87:be:84:d0:3c:
                    b7:f7:4b:13:54:c1:0d:40:de:2c:b9:5f:e7:17:0b:
                    63:00:57:1c:1c:32:69:9d:04:76:a5:d5:b8:33:ef:
                    58:47:90:dd:42:74:05:a3:2a:aa:54:03:10:35:62:
                    f4:78:10:24:be:91:fb:22:8d:b7:0e:77:6f:48:b8:
                    49:d8:c6:77:ac:99:06:6b:27:8f:3e:38:d8:48:44:
                    b8:e8:49:4e:46:f6:cb:ef:26:26:82:be:01:94:c4:
                    ec:84:50:ca:04:01:13:ea:6b:c6:8b:0a:1d:ba:9e:
                    e4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A0:45:36:65:BE:6A:FB:B4:CB:E6:44:2D:F3:64:C2:BC:CA:B9:23
            X509v3 Authority Key Identifier:
                keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/UKBFNmW-avu0y-ZELfNkwrzKuSM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.180.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:3a:4b:5d:a8:87:28:76:f7:bd:34:fb:91:05:1b:de:d9:66:
         1b:83:2f:74:d2:cc:ec:50:b6:83:a8:b9:4b:6a:b3:c8:a3:40:
         a3:e1:6d:50:ea:1e:dc:b7:36:40:4b:26:6f:8c:4f:6d:99:43:
         51:15:0c:f4:62:d0:13:7a:fd:b3:b1:e2:d2:2a:ac:bb:21:23:
         bb:71:7b:a9:32:a3:04:42:40:5e:af:fd:20:a7:a4:10:f5:d3:
         be:f0:bb:5a:11:e5:8c:62:81:f2:78:91:b0:c7:4a:89:70:b5:
         83:2e:7a:73:41:d1:02:a7:54:fa:78:fb:41:aa:63:06:32:96:
         56:4d:8c:53:d2:f1:3b:a9:ec:af:5c:8e:3d:7c:be:35:93:b6:
         e0:53:72:23:6c:81:26:36:0d:1a:55:a2:cc:1c:26:c1:61:82:
         a7:f9:83:ce:87:e3:f8:7a:4a:67:48:d0:a8:1e:1a:e3:07:de:
         2a:3d:73:c5:2d:82:53:04:ba:d4:9f:7f:e9:59:2e:cd:eb:fb:
         3c:6a:43:3c:ff:4f:74:b8:97:ff:aa:30:51:19:c7:f0:03:b6:
         64:95:a7:70:a1:f5:0b:6d:8b:1b:23:88:03:07:a7:08:65:91:
         3f:eb:a1:e2:08:08:39:04:d3:e1:c2:ab:86:f3:f7:01:2b:a0:
         a4:83:3c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:02:13 2026 by rpki-client