This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/uyPsvPgIvPS5O758u-adAV114bQ.roa
File:                     uyPsvPgIvPS5O758u-adAV114bQ.roa (raw, json)
Hash identifier:          o/1mmqu2HkUejFBpUvCA+s68Qp2PonwMujUvG+NC+ho=
Subject key identifier:   BB:23:EC:BC:F8:08:BC:F4:B9:3B:BE:7C:BB:E6:9D:01:5D:75:E1:B4
Certificate issuer:       /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial:       019B7D5B0620A46E352811D845E42552DD80
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/uyPsvPgIvPS5O758u-adAV114bQ.roa
Signing time:             Fri 02 Jan 2026 06:17:55 +0000
ROA not before:           Fri 02 Jan 2026 06:17:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204603
IP address blocks:        93.113.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 12:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:06:20:a4:6e:35:28:11:d8:45:e4:25:52:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
        Validity
            Not Before: Jan  2 06:17:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bb23ecbcf808bcf4b93bbe7cbbe69d015d75e1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d4:26:77:57:bf:ba:97:77:98:a8:b5:72:cf:
                    68:6c:9d:34:5b:7f:44:5c:15:63:a5:6f:eb:a0:d2:
                    eb:bb:2b:72:2f:04:72:eb:ab:41:d0:8e:98:1d:94:
                    81:04:51:c2:e4:e3:b1:a7:7f:43:c5:f5:dd:6d:9c:
                    bd:61:7d:17:bd:c8:a7:d2:b9:e9:40:2a:cc:bf:53:
                    bc:3e:b3:f5:6a:79:69:1c:16:7f:30:0e:a8:17:f0:
                    24:ad:4c:5a:21:4f:79:35:a1:66:43:34:62:e3:ca:
                    9e:0d:4a:96:db:cb:e9:7a:07:b6:f5:b4:1f:19:fc:
                    20:2a:0e:4b:e6:b5:0b:1b:53:88:f8:78:1e:f7:60:
                    ef:66:84:4f:d6:79:19:ff:64:ed:5a:2e:a2:dc:7e:
                    b9:42:23:63:7e:5a:49:77:07:46:c2:28:4c:09:e3:
                    43:dc:a9:a4:95:ae:9c:71:64:e0:9e:fa:08:8f:d7:
                    d4:7c:22:48:42:34:f0:ae:84:59:f0:eb:6b:ba:b9:
                    91:2a:3c:ed:9a:6f:e5:a4:3d:c5:fe:39:3e:8a:85:
                    73:ca:83:dc:b0:06:ce:9a:c7:46:4d:40:8b:9e:1b:
                    e3:f0:b0:ab:c2:73:96:18:11:e9:74:75:81:17:81:
                    28:f2:b7:a3:00:1a:bf:43:68:58:7c:33:3c:1e:51:
                    39:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:23:EC:BC:F8:08:BC:F4:B9:3B:BE:7C:BB:E6:9D:01:5D:75:E1:B4
            X509v3 Authority Key Identifier:
                keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/uyPsvPgIvPS5O758u-adAV114bQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:b6:e8:dc:28:86:28:24:2a:48:37:fc:dd:97:98:b6:23:32:
         32:85:14:3c:79:b0:c9:8c:b0:62:41:4d:a0:a9:3a:96:a8:7f:
         d5:26:db:c6:54:8c:2d:27:2c:d2:c7:2c:b1:d2:48:a0:a8:3f:
         ae:8b:90:d3:0b:6b:e7:27:87:a7:e9:fd:ac:b4:34:63:75:91:
         cf:e7:29:48:b1:e2:a2:f6:ef:e4:73:7b:42:ad:40:e8:9f:d8:
         55:29:7d:6e:69:27:8f:3b:d2:78:09:b0:5a:d0:ec:60:5d:bd:
         3f:85:e7:5c:5b:a6:e9:e6:b8:f1:88:84:da:c5:b3:ac:6f:43:
         a2:19:74:7b:e6:65:25:91:40:48:40:73:eb:e3:69:48:9a:4a:
         a8:26:5d:12:d0:cc:e3:d7:8e:14:9e:f1:28:6d:c4:87:98:93:
         f3:5c:83:0f:7e:af:7e:b1:8b:9e:f3:f4:6c:35:31:fe:de:91:
         a8:e5:8f:f8:5d:11:94:4e:7c:34:89:97:23:2c:ae:27:1a:40:
         50:c2:09:af:9f:3b:db:04:21:e9:81:bb:b3:4f:fc:64:03:fb:
         19:00:59:7e:03:cc:aa:5f:97:75:f3:51:db:b6:61:96:a6:ea:
         8a:85:5c:7e:4b:86:e7:17:0b:f5:86:27:73:b6:04:e1:4a:54:
         93:f1:79:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:56:38 2026 by rpki-client