This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/UVqvYO52B_mDbYpTXh7tiRMFdiw.roa
File:                     UVqvYO52B_mDbYpTXh7tiRMFdiw.roa (raw, json)
Hash identifier:          dr+1/4Wpnd9WCKYo0XBHvqSgnCOs5Ovx5Q+q94HABKA=
Subject key identifier:   51:5A:AF:60:EE:76:07:F9:83:6D:8A:53:5E:1E:ED:89:13:05:76:2C
Certificate issuer:       /CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Certificate serial:       019B7D5C0A57ADE734597969A415CF3B0C46
Authority key identifier: 4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/UVqvYO52B_mDbYpTXh7tiRMFdiw.roa
Signing time:             Fri 02 Jan 2026 06:19:02 +0000
ROA not before:           Fri 02 Jan 2026 06:19:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35524
IP address blocks:        193.84.77.0/24 maxlen: 24
                          195.200.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:0a:57:ad:e7:34:59:79:69:a4:15:cf:3b:0c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
        Validity
            Not Before: Jan  2 06:19:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=515aaf60ee7607f9836d8a535e1eed891305762c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d5:f7:12:b2:e3:7d:f3:fe:83:ac:c3:cd:dc:
                    e8:5d:c2:a2:af:fa:e8:c7:71:ac:47:e6:4c:2e:52:
                    d9:aa:98:a2:76:fe:a5:37:bb:af:8b:e7:cc:9f:7d:
                    d8:50:e7:38:c4:14:28:34:8b:d1:4f:b7:2b:f0:4e:
                    69:a9:c1:75:1c:32:4b:03:4d:e7:b3:53:a4:75:09:
                    1c:d2:53:e5:02:3d:00:b8:74:db:07:b5:bc:b5:21:
                    d8:4f:fb:ae:be:18:0c:bd:2f:4f:47:e7:a4:0f:64:
                    e1:9f:56:47:3e:d9:37:eb:c4:40:2a:c1:20:84:00:
                    02:8a:8c:74:21:71:12:70:32:eb:09:10:ef:2e:06:
                    03:85:61:70:67:89:74:e9:65:e0:7c:2c:11:a3:d6:
                    88:c7:1f:b0:37:7c:15:5a:92:4c:b3:13:72:46:30:
                    6a:10:6c:44:db:8d:68:dc:79:9d:0e:65:ca:e6:43:
                    b7:04:61:22:08:0e:75:1a:03:2d:1b:96:0d:1d:1d:
                    ed:a6:92:7a:6a:ce:ef:fc:19:0a:82:6e:de:a2:10:
                    c9:c8:49:56:c9:ec:e8:80:e3:c7:bd:c5:ef:25:08:
                    9d:09:64:3e:ee:9d:58:c7:21:39:2f:83:f7:a0:a1:
                    15:c9:66:02:6a:4c:ed:92:c2:f7:40:df:de:5f:f8:
                    54:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5A:AF:60:EE:76:07:F9:83:6D:8A:53:5E:1E:ED:89:13:05:76:2C
            X509v3 Authority Key Identifier:
                keyid:4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/UVqvYO52B_mDbYpTXh7tiRMFdiw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.77.0/24
                  195.200.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:d6:8c:45:ed:1c:a9:ee:4f:f4:1a:b1:ea:9e:1f:27:94:08:
         12:92:4b:1b:94:e5:db:a1:93:f6:ae:4c:d6:f6:1f:b9:25:b0:
         7f:02:93:2a:37:dd:08:a1:5c:c0:f9:4f:9c:51:14:d4:5e:8c:
         2a:e9:2c:83:a0:a2:f4:fe:e0:65:dc:2b:2b:34:ad:56:52:a7:
         a3:28:7d:d7:e2:50:c3:6d:91:e9:56:73:1f:d3:41:cf:05:bc:
         e3:68:5f:7e:c6:8c:a7:c2:15:5c:9c:d1:76:4e:fb:d8:7b:3a:
         4a:d4:b0:c6:15:e3:a8:fa:01:f0:3a:4c:40:68:b3:35:98:d8:
         ee:ec:dd:8b:3f:c9:c6:84:ac:3f:c4:62:9b:fa:09:d3:fb:f7:
         55:8c:25:b1:a1:29:5e:e4:0d:e3:2a:15:01:54:9e:ac:bd:03:
         46:e1:b2:4b:f4:ec:62:a6:35:d9:cd:43:25:a6:fb:d0:40:b8:
         42:5f:e9:d7:28:6e:59:bd:37:ba:b0:5a:e2:93:ce:4c:21:7e:
         20:de:41:d2:2d:44:38:d7:16:be:00:6c:46:f1:a7:c3:85:07:
         6d:38:dc:17:49:6d:28:1b:0f:50:e3:ae:1d:fa:a1:d3:91:e1:
         71:d8:04:1c:3e:f6:ac:22:dd:c7:12:df:3e:e0:7e:e6:20:6e:
         55:82:da:62
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt9XApXrec0WXlppBXPOwxGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTNjNmExMGQxNDFmMDBhZWZhZGUwMWJjZDM0OTJmNzU0
ZjRlODMwHhcNMjYwMTAyMDYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTVhYWY2MGVlNzYwN2Y5ODM2ZDhhNTM1ZTFlZWQ4OTEzMDU3NjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltX3ErLjffP+g6zDzdzoXcKir/ro
x3GsR+ZMLlLZqpiidv6lN7uvi+fMn33YUOc4xBQoNIvRT7cr8E5pqcF1HDJLA03n
s1OkdQkc0lPlAj0AuHTbB7W8tSHYT/uuvhgMvS9PR+ekD2Thn1ZHPtk368RAKsEg
hAACiox0IXEScDLrCRDvLgYDhWFwZ4l06WXgfCwRo9aIxx+wN3wVWpJMsxNyRjBq
EGxE241o3HmdDmXK5kO3BGEiCA51GgMtG5YNHR3tppJ6as7v/BkKgm7eohDJyElW
yezogOPHvcXvJQidCWQ+7p1YxyE5L4P3oKEVyWYCakztksL3QN/eX/hUTwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFFar2Dudgf5g22KU14e7YkTBXYsMB8GA1UdIwQY
MBaAFEuTxqENFB8ArvreAbzTSS91T06DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVQR29RMFVId0N1LXQ0QnZOTkpMM1ZQVG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8yODg0YTEtYzEyNC00NTY1LWI4NDEt
ZTEwNGM5ODJkN2EwLzEvVVZxdllPNTJCX21EYllwVFhoN3RpUk1GZGl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8yODg0YTEtYzEyNC00NTY1LWI4NDEtZTEwNGM5ODJkN2Ew
LzEvUzVQR29RMFVId0N1LXQ0QnZOTkpMM1ZQVG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwVRNAwQB
w8haMA0GCSqGSIb3DQEBCwUAA4IBAQBF1oxF7Ryp7k/0GrHqnh8nlAgSkksblOXb
oZP2rkzW9h+5JbB/ApMqN90IoVzA+U+cURTUXowq6SyDoKL0/uBl3CsrNK1WUqej
KH3X4lDDbZHpVnMf00HPBbzjaF9+xoynwhVcnNF2TvvYezpK1LDGFeOo+gHwOkxA
aLM1mNju7N2LP8nGhKw/xGKb+gnT+/dVjCWxoSle5A3jKhUBVJ6svQNG4bJL9Oxi
pjXZzUMlpvvQQLhCX+nXKG5ZvTe6sFrik85MIX4g3kHSLUQ41xa+AGxG8afDhQdt
ONwXSW0oGw9Q464d+qHTkeFx2AQcPvasIt3HEt8+4H7mIG5Vgtpi
-----END CERTIFICATE-----
Generated at Tue Feb 10 07:30:47 2026 by rpki-client