This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/UJVP39MP0a98z-vs1ITaLznv-Ng.roa
File:                     UJVP39MP0a98z-vs1ITaLznv-Ng.roa (raw, json)
Hash identifier:          VF6p8kiAtBBS2svfl/i9xWe417imO3ZaV515/+Pjex8=
Subject key identifier:   50:95:4F:DF:D3:0F:D1:AF:7C:CF:EB:EC:D4:84:DA:2F:39:EF:F8:D8
Certificate issuer:       /CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Certificate serial:       019B7DC9880E6C90E074F3C768FCC498429E
Authority key identifier: 7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/UJVP39MP0a98z-vs1ITaLznv-Ng.roa
Signing time:             Fri 02 Jan 2026 08:18:38 +0000
ROA not before:           Fri 02 Jan 2026 08:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203239
IP address blocks:        146.247.46.0/24 maxlen: 24
                          2a0d:1e00::/48 maxlen: 48
                          2a0d:1e00:46::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:c9:88:0e:6c:90:e0:74:f3:c7:68:fc:c4:98:42:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
        Validity
            Not Before: Jan  2 08:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=50954fdfd30fd1af7ccfebecd484da2f39eff8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ac:f7:36:9b:b8:dd:5c:da:fa:bb:90:94:d6:
                    af:97:7f:8c:1a:d7:b1:eb:19:6e:b6:08:a1:c9:ff:
                    57:5f:fa:23:85:41:05:22:d0:56:d7:d9:34:14:24:
                    fd:8a:88:1b:2a:c4:ef:1b:96:2b:91:c7:cc:28:5e:
                    16:c9:fd:8c:19:2e:06:6b:23:73:50:f3:6f:2f:c7:
                    6d:1a:f7:82:ff:b5:e0:b4:7e:44:44:5e:2d:18:01:
                    5c:a6:0a:ab:8a:c0:c7:7c:32:c4:db:b0:e7:e9:29:
                    ad:7e:18:20:c6:60:6d:25:cc:c3:05:ab:cf:2f:43:
                    f4:27:33:0c:88:f8:61:9c:52:8a:3c:30:7a:ef:9e:
                    8a:b4:ef:06:b4:8a:73:04:9f:e7:f4:c8:ed:28:15:
                    14:ea:77:aa:ca:1a:82:5b:02:f6:9e:1d:1a:27:95:
                    4e:71:b5:5f:de:f1:df:4a:ac:e3:85:14:a9:0e:21:
                    da:59:7d:cf:c2:ab:3a:e9:80:a3:e6:dd:85:39:fa:
                    18:57:90:2b:43:89:bd:b9:30:57:3a:4d:f4:79:2b:
                    25:4b:24:c8:dd:ce:37:a5:c7:f7:ae:12:8e:1e:ab:
                    3c:35:da:8c:6f:58:f4:b8:2c:c1:bd:6b:b9:c2:0a:
                    e0:dd:db:97:c3:c3:cc:29:75:fe:2d:71:78:91:03:
                    d8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:95:4F:DF:D3:0F:D1:AF:7C:CF:EB:EC:D4:84:DA:2F:39:EF:F8:D8
            X509v3 Authority Key Identifier:
                keyid:7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/UJVP39MP0a98z-vs1ITaLznv-Ng.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.247.46.0/24
                IPv6:
                  2a0d:1e00::/48
                  2a0d:1e00:46::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:b1:d6:c2:05:78:3c:50:c6:03:be:17:d9:d2:e0:49:93:f8:
         e8:0b:d8:61:08:fa:2f:70:98:cd:bf:c2:f3:df:00:e6:d8:cb:
         f9:0c:43:7c:11:86:46:c9:ef:7d:e2:f8:7f:18:65:e4:88:40:
         18:de:35:8e:69:dc:2d:69:99:a4:45:5d:bf:b6:dd:37:df:69:
         6e:a4:66:6f:ab:13:62:c5:01:9a:fe:ba:2c:88:5e:8e:c8:5b:
         c2:d0:e3:8c:cc:04:71:6a:a6:3f:fe:65:33:ff:2e:bb:44:46:
         1c:7a:36:ea:34:32:72:43:81:f3:78:63:dc:08:33:64:ce:80:
         99:c0:96:43:3f:b4:42:ca:28:fe:ff:f4:b1:6e:e1:f0:04:90:
         4b:12:f9:c4:8a:cf:8c:56:90:84:51:64:13:3d:9c:e3:65:ef:
         a9:e2:a7:a1:21:82:f1:af:af:e9:33:ad:01:c1:a9:2d:a5:01:
         d4:29:bd:ea:5f:23:27:34:b8:dc:c2:56:33:df:23:58:d7:2d:
         d6:ca:bc:8d:07:2c:00:2f:5e:fd:fc:a7:57:74:f9:18:31:9d:
         ad:74:fe:82:57:d7:a0:bd:dc:d8:be:0c:9a:e3:21:97:af:79:
         75:81:b9:26:d0:a3:f3:c2:aa:6d:9b:25:76:0c:0f:55:e0:cc:
         bb:81:3a:5a
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZt9yYgObJDgdPPHaPzEmEKeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmYzk1NmE1MmI3MzUwNGE0ZjFmZjM0NTQ3MTk5Mjk3YTdm
NWRlOWQwHhcNMjYwMTAyMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDk1NGZkZmQzMGZkMWFmN2NjZmViZWNkNDg0ZGEyZjM5ZWZmOGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqz3Npu43Vza+ruQlNavl3+MGtex
6xlutgihyf9XX/ojhUEFItBW19k0FCT9iogbKsTvG5YrkcfMKF4Wyf2MGS4GayNz
UPNvL8dtGveC/7XgtH5ERF4tGAFcpgqrisDHfDLE27Dn6SmtfhggxmBtJczDBavP
L0P0JzMMiPhhnFKKPDB6756KtO8GtIpzBJ/n9MjtKBUU6neqyhqCWwL2nh0aJ5VO
cbVf3vHfSqzjhRSpDiHaWX3Pwqs66YCj5t2FOfoYV5ArQ4m9uTBXOk30eSslSyTI
3c43pcf3rhKOHqs8NdqMb1j0uCzBvWu5wgrg3duXw8PMKXX+LXF4kQPYQwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFFCVT9/TD9GvfM/r7NSE2i857/jYMB8GA1UdIwQY
MBaAFH/JVqUrc1BKTx/zRUcZkpen9d6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQt
YmI1N2E0ZWY3MTUzLzEvVUpWUDM5TVAwYTk4ei12czFJVGFMem52LU5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQtYmI1N2E0ZWY3MTUz
LzEvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAkvcuMBgE
AgACMBIDBwAqDR4AAAADBwAqDR4AAEYwDQYJKoZIhvcNAQELBQADggEBAHix1sIF
eDxQxgO+F9nS4EmT+OgL2GEI+i9wmM2/wvPfAObYy/kMQ3wRhkbJ733i+H8YZeSI
QBjeNY5p3C1pmaRFXb+23TffaW6kZm+rE2LFAZr+uiyIXo7IW8LQ44zMBHFqpj/+
ZTP/LrtERhx6Nuo0MnJDgfN4Y9wIM2TOgJnAlkM/tELKKP7/9LFu4fAEkEsS+cSK
z4xWkIRRZBM9nONl76nip6EhgvGvr+kzrQHBqS2lAdQpvepfIyc0uNzCVjPfI1jX
LdbKvI0HLAAvXv38p1d0+Rgxna10/oJX16C93Ni+DJrjIZeveXWBuSbQo/PCqm2b
JXYMD1XgzLuBOlo=
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:48:50 2026 by rpki-client