This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/UGG7nCe5Tg7AyoLNIcopGHO0Rk4.roa
File:                     UGG7nCe5Tg7AyoLNIcopGHO0Rk4.roa (raw, json)
Hash identifier:          zdgHHW48oZ9vfOTrEj6QuMLBdMpir+2/kj2S654tj68=
Subject key identifier:   50:61:BB:9C:27:B9:4E:0E:C0:CA:82:CD:21:CA:29:18:73:B4:46:4E
Certificate issuer:       /CN=ee3be768d28668f490afb74e9aefe41e03495d7a
Certificate serial:       019B797E9CE93F12AE69FCAE4EB924CC48F8
Authority key identifier: EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/UGG7nCe5Tg7AyoLNIcopGHO0Rk4.roa
Signing time:             Thu 01 Jan 2026 12:18:19 +0000
ROA not before:           Thu 01 Jan 2026 12:18:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212579
IP address blocks:        185.19.224.0/22 maxlen: 24
                          185.243.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 15:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:9c:e9:3f:12:ae:69:fc:ae:4e:b9:24:cc:48:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee3be768d28668f490afb74e9aefe41e03495d7a
        Validity
            Not Before: Jan  1 12:18:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5061bb9c27b94e0ec0ca82cd21ca291873b4464e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:8f:e3:83:2d:f6:8d:71:27:9f:f7:e8:83:
                    be:b7:3a:47:05:f8:bb:0d:5a:f8:c6:54:5b:e6:f7:
                    30:62:18:04:6b:5e:25:d8:29:62:de:49:b1:ba:1a:
                    f1:72:04:f6:ba:4c:6b:8e:f5:86:01:3c:24:65:43:
                    e0:51:e8:e0:3d:0a:6a:6f:42:e4:01:74:7e:21:6f:
                    40:b6:a5:45:79:30:8e:00:a0:cf:1c:b3:39:a0:82:
                    0f:23:9d:0f:af:aa:e7:ca:3e:95:0a:1e:7b:92:99:
                    52:e8:07:65:b4:10:1e:4b:6a:e8:3a:7d:f5:65:ea:
                    54:9d:3d:51:bc:43:b4:ff:a2:ca:d0:30:e4:34:44:
                    fd:bb:02:b8:d2:ac:19:37:89:b7:54:12:30:41:2b:
                    08:13:35:d0:26:72:34:8d:22:2e:94:31:4f:a8:44:
                    5d:7d:2c:50:75:a5:f1:8b:67:ed:37:7b:b6:58:c1:
                    8d:08:fb:5f:f5:8a:c6:a8:15:e0:80:72:6a:cc:c7:
                    7a:38:67:f3:06:08:f8:c6:51:46:3a:7d:58:7a:2f:
                    80:ef:b3:76:f7:71:f8:d5:6a:44:2e:29:79:3b:c9:
                    f9:bf:2f:c8:2d:f2:a5:42:8a:12:7d:37:41:63:bc:
                    b8:d9:c4:d9:7b:c1:c0:9f:8e:0c:da:06:7b:38:4c:
                    54:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:61:BB:9C:27:B9:4E:0E:C0:CA:82:CD:21:CA:29:18:73:B4:46:4E
            X509v3 Authority Key Identifier:
                keyid:EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/UGG7nCe5Tg7AyoLNIcopGHO0Rk4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.19.224.0/22
                  185.243.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:01:67:20:8e:01:67:50:ee:0f:cf:2c:aa:fb:44:8f:15:9e:
         da:45:5b:09:3d:ea:88:4c:af:93:ed:04:67:18:e0:9a:af:41:
         54:75:04:0f:ae:94:ea:8f:90:7a:b3:36:bf:2a:56:27:08:21:
         37:da:20:81:ae:c0:d0:23:a8:e6:74:39:b0:fd:65:74:65:29:
         25:7e:33:de:65:df:54:b1:5b:55:39:fe:8a:3c:dc:a3:27:70:
         32:f0:5a:15:74:bd:15:4a:a3:22:e3:73:73:07:d1:82:e6:95:
         44:6b:1b:4d:f9:2b:e0:0b:fa:e6:b1:97:45:91:17:e6:70:e0:
         73:85:24:c9:9b:73:c6:84:5c:eb:eb:8e:6a:0b:47:3c:48:8c:
         d1:d0:92:ed:15:c0:c5:a8:7a:7e:f7:f3:f9:41:32:86:93:c0:
         85:64:e3:00:e9:82:f2:91:7f:3a:9f:60:3d:d6:07:c9:24:98:
         b2:f8:ef:eb:0f:cb:55:53:39:0f:3c:2b:d8:6d:3d:a4:0c:50:
         e7:5d:b6:a0:32:5e:5f:b2:51:1b:df:36:8d:9b:7e:53:2f:67:
         70:e2:46:18:90:fb:1f:95:82:cf:f2:5d:94:7d:8e:ae:50:15:
         7c:be:bc:4c:53:0c:a8:5f:06:e3:d9:45:7f:98:fb:b3:f0:f3:
         46:ba:28:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 00:51:54 2026 by rpki-client