This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/uNdZurNlGvzblt7cOT0TXlmz1qg.roa
File:                     uNdZurNlGvzblt7cOT0TXlmz1qg.roa (raw, json)
Hash identifier:          Lqq02/rAZp7YJsqEVziXP2UZSzM4V9uMFACxpPbuhg8=
Subject key identifier:   B8:D7:59:BA:B3:65:1A:FC:DB:96:DE:DC:39:3D:13:5E:59:B3:D6:A8
Certificate issuer:       /CN=304e59a223f4bcb823492fb1096c3a82310c03da
Certificate serial:       019B77C6C13A2AE176BB6FC0B35936D4B465
Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/uNdZurNlGvzblt7cOT0TXlmz1qg.roa
Signing time:             Thu 01 Jan 2026 04:17:52 +0000
ROA not before:           Thu 01 Jan 2026 04:17:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57166
IP address blocks:        185.119.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:c1:3a:2a:e1:76:bb:6f:c0:b3:59:36:d4:b4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da
        Validity
            Not Before: Jan  1 04:17:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b8d759bab3651afcdb96dedc393d135e59b3d6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:6a:f0:07:01:68:e3:62:59:e6:c5:4a:02:
                    35:91:11:57:57:61:8a:de:8a:19:34:9d:62:14:97:
                    3d:cb:8f:02:02:bf:2b:1d:e2:75:d2:0a:a5:64:8f:
                    33:7c:c4:ce:7e:e2:79:01:d3:66:0b:7a:32:cf:d3:
                    0a:f2:b1:be:7f:a8:86:fa:b1:32:37:6d:32:58:60:
                    be:4b:2f:92:63:23:36:8f:ee:25:0e:12:fa:42:3f:
                    b7:dd:f2:ea:ec:ae:a1:a7:e2:43:95:29:2e:1e:9c:
                    2e:f4:71:32:2e:8a:a4:f6:95:ef:1a:4c:3c:76:d1:
                    5f:70:97:d8:eb:0d:da:28:07:05:8b:9a:1f:00:42:
                    35:ce:11:22:99:23:14:61:12:48:68:15:c7:75:21:
                    ae:92:81:ae:7a:2f:71:d4:45:2e:5e:49:28:72:91:
                    65:eb:b2:d4:9d:f6:64:ef:3a:e5:61:b1:5c:7d:7a:
                    72:d1:9f:9f:ff:53:4f:6a:7f:12:9b:8c:91:80:ec:
                    40:f6:5c:5a:a8:7a:ea:76:a6:c3:79:e9:44:66:26:
                    dc:36:5e:4e:df:fe:8d:f2:0f:83:09:80:e2:6c:30:
                    d6:5d:77:dd:fa:0c:71:fe:0f:9f:57:9f:0d:41:bf:
                    c9:cb:56:88:64:b9:4e:2b:63:bf:63:b0:df:96:b1:
                    6b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D7:59:BA:B3:65:1A:FC:DB:96:DE:DC:39:3D:13:5E:59:B3:D6:A8
            X509v3 Authority Key Identifier:
                keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/uNdZurNlGvzblt7cOT0TXlmz1qg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.119.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:31:23:7e:b6:b1:c8:3d:91:5b:cf:34:a4:ac:87:33:eb:3c:
         1f:f5:85:48:8e:15:bd:0e:5f:d1:6a:41:7a:ed:3a:32:02:fe:
         30:56:0a:ff:e4:61:8d:f9:48:fe:d4:ef:41:83:d2:ca:66:35:
         62:53:68:a3:37:33:df:9b:fc:4f:6f:17:9b:30:84:ed:f8:3a:
         b7:2a:60:7f:b8:57:6e:e6:07:79:c3:8b:55:b0:54:cf:c9:06:
         40:41:1b:8a:57:11:04:38:c0:1d:c3:19:d7:4b:df:3e:d5:f0:
         a3:56:a7:1c:86:c4:54:37:c6:2f:d8:33:81:f0:e8:0f:94:e2:
         5d:a9:5d:03:f1:78:0b:7a:1a:e1:14:1e:b9:b0:24:f0:57:58:
         56:24:db:30:82:4e:c1:bf:0e:ae:4d:1a:a1:49:9c:cf:b2:27:
         80:a1:cc:65:65:32:07:a2:c2:70:68:c5:cd:a6:d5:14:e6:12:
         a9:bd:19:3b:ac:98:6b:9d:9e:1d:71:14:7a:e9:a5:59:4a:52:
         d7:44:98:bd:a7:ab:dc:76:cc:1c:e7:5a:c4:62:20:f1:38:76:
         ea:a9:06:24:42:0c:9e:20:5c:ce:cf:7e:9c:40:83:c1:1c:68:
         69:1d:d1:c6:41:4d:af:5e:bd:a5:ba:4d:26:e7:c0:d9:99:fa:
         e8:c7:0d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:16:58 2026 by rpki-client