This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/u1U0vqodwoJEkUOEBkgZTYTajtY.roa
File:                     u1U0vqodwoJEkUOEBkgZTYTajtY.roa (raw, json)
Hash identifier:          7KWvi0THi97QClEL8gxGIx4mPMywIoHzr+MsAscg8xA=
Subject key identifier:   BB:55:34:BE:AA:1D:C2:82:44:91:43:84:06:48:19:4D:84:DA:8E:D6
Certificate issuer:       /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial:       019BBCF1741C086C0569ECDEF7B52B04D346
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/u1U0vqodwoJEkUOEBkgZTYTajtY.roa
Signing time:             Wed 14 Jan 2026 14:38:19 +0000
ROA not before:           Wed 14 Jan 2026 14:38:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25198
IP address blocks:        178.210.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:bc:f1:74:1c:08:6c:05:69:ec:de:f7:b5:2b:04:d3:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
        Validity
            Not Before: Jan 14 14:38:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bb5534beaa1dc282449143840648194d84da8ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3e:2f:53:a6:c4:be:96:72:ad:6d:3a:af:f5:
                    d5:7a:50:99:73:4b:f6:cb:dd:17:98:56:ec:20:cd:
                    62:c3:dc:41:b2:e7:42:80:de:68:26:ce:95:ad:d1:
                    15:43:04:50:59:e7:0c:6c:d7:c8:0e:5e:f7:9f:9c:
                    26:52:f5:14:a7:69:35:44:7a:ee:ca:af:d8:66:3a:
                    e4:02:f3:82:f1:11:59:08:9f:c7:e5:f2:44:2f:ba:
                    13:a2:92:7e:39:55:ee:93:9d:8d:84:56:a7:d3:55:
                    02:4e:4f:09:9b:d8:e9:21:d3:26:fd:ea:d2:aa:79:
                    f9:4d:d5:09:f6:d1:5a:6f:f1:79:dd:39:b2:75:da:
                    5d:a2:6f:de:96:79:5c:f6:9d:61:0c:b6:c5:90:a1:
                    62:d5:0c:c9:94:a6:18:44:ec:4d:ce:5e:c0:3d:9b:
                    c1:29:2b:a4:d5:cd:fd:96:55:44:fc:1a:ff:72:ef:
                    bb:04:40:3a:f9:48:0a:41:69:49:06:06:f4:63:5f:
                    3e:26:cf:ac:6b:31:4d:f5:aa:32:97:8a:ab:47:8f:
                    e6:c1:d4:80:10:69:b7:9f:84:2f:10:25:55:b1:43:
                    d5:59:1b:e7:71:6b:81:6b:7c:1c:3d:dc:fa:df:61:
                    1d:59:31:08:27:10:11:48:fe:c8:a2:99:6c:fd:d1:
                    9a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:55:34:BE:AA:1D:C2:82:44:91:43:84:06:48:19:4D:84:DA:8E:D6
            X509v3 Authority Key Identifier:
                keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/u1U0vqodwoJEkUOEBkgZTYTajtY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.210.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:f4:ba:b1:50:1d:69:72:dd:d7:43:92:31:eb:04:22:18:2f:
         38:39:54:54:31:90:9e:f2:33:fe:20:a4:46:71:4f:ee:0c:e0:
         68:e8:57:0e:24:da:0d:8c:be:9a:7f:71:c4:fb:aa:fa:55:d3:
         01:09:e2:df:77:ac:c1:e2:70:c2:d6:ad:ee:cf:ec:0f:ac:15:
         67:f1:20:55:5b:78:e3:b9:ea:3d:ee:86:b3:e6:d0:13:3a:ef:
         4d:51:23:cf:52:7a:0d:37:0e:c2:6e:52:70:c1:40:50:05:37:
         44:99:b9:6b:89:1b:28:a6:9c:50:fe:7d:05:34:61:91:98:52:
         7d:90:c2:84:9b:31:71:94:00:30:d2:c6:d8:2f:71:09:54:3f:
         8a:af:36:a1:58:42:5d:49:5c:c0:90:c7:58:f1:8b:29:9a:4f:
         f4:09:b7:70:d8:af:e7:40:59:3b:62:2e:f5:0d:27:b0:c7:b6:
         3c:de:ce:e9:77:73:e0:27:0a:8f:95:c7:5f:5a:55:e3:13:8d:
         0e:1b:eb:d1:0b:87:76:dd:17:92:74:bd:59:9e:4d:03:8c:27:
         17:eb:e9:4d:28:31:26:45:2b:66:24:ec:66:6a:ca:d8:41:a9:
         66:a8:5e:d0:c9:2b:35:92:68:af:f1:dc:d9:e2:ea:64:22:a9:
         cf:b0:77:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:55:25 2026 by rpki-client