This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Ufaw4xTK7uyebklAkBE7u-HQ5W4.roa
File:                     Ufaw4xTK7uyebklAkBE7u-HQ5W4.roa (raw, json)
Hash identifier:          L7Xrc3Nrlu7bCFQOPd71D/IM9rLp1qF1EPoiG40JKBE=
Subject key identifier:   51:F6:B0:E3:14:CA:EE:EC:9E:6E:49:40:90:11:3B:BB:E1:D0:E5:6E
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       019B76EAB3645A8CE92240A898C260D5DE39
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Ufaw4xTK7uyebklAkBE7u-HQ5W4.roa
Signing time:             Thu 01 Jan 2026 00:17:31 +0000
ROA not before:           Thu 01 Jan 2026 00:17:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        85.208.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:b3:64:5a:8c:e9:22:40:a8:98:c2:60:d5:de:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Jan  1 00:17:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=51f6b0e314caeeec9e6e494090113bbbe1d0e56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1e:eb:a3:dd:d4:41:50:15:7c:a1:7b:7f:40:
                    86:65:ed:b6:a5:6f:68:34:68:45:a0:1c:43:00:e6:
                    64:46:c2:2a:dd:5c:6f:58:d8:80:8c:f2:4e:fd:5c:
                    39:71:05:95:84:fe:a7:a7:46:df:36:e9:48:68:0f:
                    c3:cd:ce:43:6a:ca:a2:c3:68:e4:a6:a0:f3:b9:39:
                    e1:ec:4c:6d:1d:7e:92:79:0c:f2:c5:bd:2f:3b:8a:
                    1a:33:e2:e5:40:08:56:6f:09:65:df:4f:04:92:59:
                    57:1b:60:3b:4f:39:a1:66:bc:ef:99:70:98:1e:81:
                    46:fa:61:38:9d:11:a5:9b:cd:18:19:92:b3:c2:4f:
                    61:21:0e:5d:8e:32:77:df:7c:5e:e9:d4:44:9b:72:
                    f3:d9:c0:03:7f:ff:1d:bb:bd:ce:6c:a5:39:2c:e5:
                    b5:bc:e8:1d:1c:c6:8e:db:ba:d1:50:87:a7:9f:c9:
                    60:12:8a:21:61:52:e8:40:97:c6:6e:a9:1e:77:50:
                    66:1c:3b:1b:b2:52:37:e7:2f:ee:cc:84:71:03:f2:
                    c1:35:f3:fe:97:91:17:2f:71:e5:6d:77:75:73:ef:
                    67:08:3b:cf:ca:b0:7b:03:8a:7a:ae:ae:55:e9:fb:
                    23:c8:9b:64:36:4f:5d:6b:d1:ed:4e:2e:41:a6:ad:
                    af:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F6:B0:E3:14:CA:EE:EC:9E:6E:49:40:90:11:3B:BB:E1:D0:E5:6E
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Ufaw4xTK7uyebklAkBE7u-HQ5W4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:8e:4f:39:6b:28:21:05:aa:f1:6c:a6:40:9c:89:f4:e6:3a:
         a7:01:5f:35:50:1e:28:5f:10:b0:4c:fc:5d:c3:59:5c:de:d0:
         e2:c4:8a:64:f6:fd:64:68:a7:d7:14:58:8a:1f:99:38:11:8e:
         db:8e:30:b4:9a:bf:df:c0:42:1a:e6:00:7a:41:ab:f0:75:d5:
         df:ba:88:55:d3:7f:7e:16:ea:3f:13:da:7f:02:60:84:04:01:
         a6:e9:1e:ab:08:3c:4e:1f:16:65:8d:03:c8:54:52:34:3c:e7:
         fb:c4:95:85:87:5f:05:7f:e2:76:e0:75:2c:ae:bf:3c:a1:f9:
         90:dc:f8:a7:b5:f3:5b:de:e0:f9:c3:8b:d8:75:cf:8b:10:b3:
         67:62:db:63:b6:7e:da:6b:1a:19:1c:f6:83:ec:16:e6:f4:50:
         bd:6b:96:48:bc:ba:5b:a9:a2:61:3c:95:bb:86:a9:0d:1c:60:
         04:49:06:f0:7a:f2:39:e9:62:77:53:f7:68:8a:83:a4:f3:70:
         c8:7a:63:4c:7f:ab:80:a7:8b:5a:f0:9a:5c:e0:75:e4:91:e4:
         d4:36:e2:ed:8d:32:fd:4a:09:78:40:e2:02:0b:46:10:67:f5:
         15:71:6b:9d:c5:ee:5e:41:06:02:ba:d8:fb:f0:89:7f:91:2c:
         ec:d1:90:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:47:50 2026 by rpki-client