This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/1-uUbewaA737Ti2Wi8o8SjK77aHc.roa
File:                     1-uUbewaA737Ti2Wi8o8SjK77aHc.roa (raw, json)
Hash identifier:          QlD9Cd20i+8EHA8BtB471vZBbtNQcm716KVmHTOuPJ0=
Subject key identifier:   FA:E5:1B:7B:06:80:EF:7E:D3:8B:65:A2:F2:8F:12:8C:AE:FB:68:77
Certificate issuer:       /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial:       019A82F09A9613D90A801888C11B58BF5C4A
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/1-uUbewaA737Ti2Wi8o8SjK77aHc.roa
Signing time:             Fri 14 Nov 2025 15:16:37 +0000
ROA not before:           Fri 14 Nov 2025 15:16:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     16276
IP address blocks:        168.222.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Nov 2025 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:82:f0:9a:96:13:d9:0a:80:18:88:c1:1b:58:bf:5c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
        Validity
            Not Before: Nov 14 15:16:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fae51b7b0680ef7ed38b65a2f28f128caefb6877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7d:f9:02:7e:a4:fb:4b:98:38:da:22:da:be:
                    ca:d6:ff:41:95:6d:9d:0c:a7:6e:9d:de:f7:df:d3:
                    24:d1:91:26:2f:66:21:c2:ad:39:d8:ba:05:7d:9f:
                    f3:86:83:17:61:62:46:a8:e2:14:68:7b:34:fb:1b:
                    56:f2:3d:d8:64:c9:4b:1f:f2:4a:72:27:ac:7b:ba:
                    89:20:1f:32:b2:bc:5f:2e:b3:73:0a:18:64:0f:42:
                    f3:a4:5b:9b:d1:5f:19:ed:46:27:c7:d6:6f:26:f0:
                    12:c0:44:54:21:cc:4c:cd:1f:f0:97:3d:ea:47:70:
                    4e:3a:f8:8c:5b:36:98:34:66:8f:54:1e:25:56:67:
                    e8:6b:83:3d:95:0c:92:d7:f1:0b:54:ca:e3:45:8d:
                    b7:0f:a7:aa:9a:d4:ab:bc:78:bf:25:5d:d6:87:7c:
                    f6:2d:3b:04:ee:e4:f1:05:bc:53:bb:92:b4:0b:bf:
                    bf:70:08:22:84:bd:6a:ef:37:0f:b4:cd:60:56:2f:
                    35:10:50:6d:e2:7c:bc:9d:00:ad:8d:15:19:2b:60:
                    4c:65:d7:24:91:db:7b:93:85:65:df:fc:75:64:50:
                    31:0e:25:27:6a:69:f3:80:c9:e6:b9:ff:aa:1b:a7:
                    2d:0d:fb:b0:d0:5e:e1:31:f1:a3:b5:84:14:f1:c0:
                    28:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E5:1B:7B:06:80:EF:7E:D3:8B:65:A2:F2:8F:12:8C:AE:FB:68:77
            X509v3 Authority Key Identifier:
                keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/1-uUbewaA737Ti2Wi8o8SjK77aHc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.222.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:70:dc:9c:a6:8a:dc:1f:70:3a:2e:da:7a:5a:27:8f:81:2b:
         d3:83:69:0f:7d:0d:e1:83:6c:b7:8c:f3:7d:59:0d:ce:71:e8:
         9d:4b:56:26:59:fb:58:90:72:cd:40:34:80:e1:36:07:38:df:
         93:e0:ba:29:12:10:b2:97:63:c0:c8:95:22:66:dc:d8:ec:2a:
         a8:18:6c:68:1e:2f:9d:66:2d:93:d8:2e:71:7c:e8:3d:aa:db:
         43:f3:fc:03:80:c1:35:f7:e6:6b:40:c0:64:ab:51:06:c5:55:
         8f:67:5d:f9:a0:c3:51:31:66:a7:78:e5:a5:4f:38:d0:6d:45:
         37:43:85:5b:0f:5f:2c:de:85:1c:63:bb:f3:2a:7f:07:70:cb:
         04:2b:40:2f:dc:80:ad:0c:49:90:0c:a8:24:e1:ef:cd:a6:ce:
         ea:7c:f8:de:81:b8:99:f6:a5:8e:54:49:9d:f2:22:05:a9:b9:
         4e:79:0b:79:bd:0b:98:49:9e:72:b2:13:25:b2:83:d7:b8:46:
         6d:cd:f7:ff:f1:51:f6:10:32:34:64:dd:3e:13:dd:d3:42:c0:
         af:58:66:97:56:74:a9:f3:3d:8b:25:ac:f9:06:08:93:8d:64:
         cc:89:b5:fb:9b:bf:31:b5:f5:6f:b2:ca:a4:98:6a:9c:ae:fe:
         38:5e:d0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:10:36 2025 by rpki-client