This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/UoGs33ehV6v5YodhN8tTxiWVNtU.roa
File:                     UoGs33ehV6v5YodhN8tTxiWVNtU.roa (raw, json)
Hash identifier:          E9HM/q71F+Mpfbq04NVikW5FRuRd7qmapJHOZOvHtgo=
Subject key identifier:   52:81:AC:DF:77:A1:57:AB:F9:62:87:61:37:CB:53:C6:25:95:36:D5
Certificate issuer:       /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial:       019AA9FDD374797B402C80F45CD9AEEB1D93
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/UoGs33ehV6v5YodhN8tTxiWVNtU.roa
Signing time:             Sat 22 Nov 2025 05:16:15 +0000
ROA not before:           Sat 22 Nov 2025 05:16:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213727
IP address blocks:        178.239.144.0/24 maxlen: 24
                          178.239.156.0/24 maxlen: 24
                          178.239.159.0/24 maxlen: 24
                          185.26.33.0/24 maxlen: 24
                          185.26.34.0/24 maxlen: 24
                          185.26.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:a9:fd:d3:74:79:7b:40:2c:80:f4:5c:d9:ae:eb:1d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
        Validity
            Not Before: Nov 22 05:16:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5281acdf77a157abf962876137cb53c6259536d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2e:8a:4b:91:a6:34:82:f8:40:b9:5b:af:40:
                    a8:9d:be:01:6b:b2:c8:99:27:37:9d:b9:4a:22:63:
                    11:93:9f:ce:8b:b2:63:84:59:6a:8a:a6:cb:b6:bf:
                    9f:81:e2:66:3e:e5:80:f4:47:0f:fc:7d:45:f7:8f:
                    21:11:7c:f9:3d:e9:8e:78:75:71:eb:8e:01:0f:57:
                    cb:ef:32:85:f7:37:62:5c:98:b0:ca:ed:c0:08:e6:
                    ff:f5:38:aa:64:b4:a5:f5:b9:35:04:7e:69:e6:2a:
                    54:6b:a1:f0:65:cd:3f:4a:87:00:32:75:82:88:b8:
                    c3:1a:0a:0e:c2:c3:81:08:93:5d:bd:dc:5e:a0:f0:
                    27:5e:bb:d6:07:a4:06:60:90:68:01:e0:98:d9:a1:
                    90:d4:93:61:f5:5d:87:e9:2a:0d:07:7c:7d:f1:9a:
                    06:30:d1:47:d8:73:45:70:40:9a:b0:64:d1:bf:8f:
                    02:08:79:b5:5c:0b:d5:ea:27:52:eb:f5:34:e0:c7:
                    1b:cc:8c:5f:e0:87:cb:25:c3:6a:23:b3:00:e3:36:
                    f8:f0:e3:93:5c:13:6b:72:8c:e7:5e:20:ea:b9:b4:
                    fe:e7:e8:85:3f:c9:6c:26:6d:70:85:bf:14:df:64:
                    93:2b:e5:b1:0d:da:b1:be:5d:3d:2a:b8:d0:38:93:
                    c3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:81:AC:DF:77:A1:57:AB:F9:62:87:61:37:CB:53:C6:25:95:36:D5
            X509v3 Authority Key Identifier:
                keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/UoGs33ehV6v5YodhN8tTxiWVNtU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.239.144.0/24
                  178.239.156.0/24
                  178.239.159.0/24
                  185.26.33.0-185.26.35.255

    Signature Algorithm: sha256WithRSAEncryption
         35:60:2d:b6:68:b4:68:dc:dc:99:53:a9:2d:18:00:8f:09:85:
         9e:82:c6:ac:49:44:65:c4:ca:a9:cb:50:b5:94:0c:fe:23:60:
         40:bd:ba:a4:46:28:65:88:d8:a6:f7:93:0e:55:77:5e:09:39:
         b6:c2:fb:9f:32:4d:dd:a7:ab:8a:c9:8a:b0:d6:22:80:18:23:
         58:ab:f6:44:ba:7f:08:7d:34:c4:8d:22:16:d5:92:88:cc:14:
         af:70:57:5a:a5:45:08:bb:2f:22:e3:75:01:b8:4b:47:80:f2:
         b1:4e:49:fe:8b:43:5d:92:65:87:d6:76:40:40:12:1e:9a:7f:
         60:7d:7b:45:77:e4:7f:ee:f0:d4:d9:eb:b0:c8:73:bd:f0:0c:
         08:09:80:b2:d9:d6:f7:20:d3:ab:f7:1f:bb:bc:48:07:9a:c3:
         c2:31:8d:ff:59:ee:a7:8d:72:59:39:c6:bf:9b:58:08:8e:cc:
         4e:8f:99:39:a7:7c:f2:02:fc:97:4c:66:c4:bf:06:e5:fa:29:
         c0:3a:b2:96:6d:ef:3e:08:93:2d:43:b4:86:ae:b8:07:3b:86:
         c7:1e:e1:f5:aa:8d:5b:7d:74:75:f4:56:2a:cc:28:ce:46:a9:
         fd:8a:bf:5a:ee:15:eb:42:73:42:a0:5d:fc:e9:24:fc:c0:53:
         e0:e6:8f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 12:24:16 2025 by rpki-client