This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/Ul8b11My9gvvpOwu_4T6lfCZjCI.roa
File:                     Ul8b11My9gvvpOwu_4T6lfCZjCI.roa (raw, json)
Hash identifier:          ihknx/rKkWDFephobjW9oz0pq89+mPfWzCnTBwHVamY=
Subject key identifier:   52:5F:1B:D7:53:32:F6:0B:EF:A4:EC:2E:FF:84:FA:95:F0:99:8C:22
Certificate issuer:       /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Certificate serial:       019B78353F17CF8BF2BA39B7448640F7F930
Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/Ul8b11My9gvvpOwu_4T6lfCZjCI.roa
Signing time:             Thu 01 Jan 2026 06:18:34 +0000
ROA not before:           Thu 01 Jan 2026 06:18:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41038
IP address blocks:        194.30.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:3f:17:cf:8b:f2:ba:39:b7:44:86:40:f7:f9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
        Validity
            Not Before: Jan  1 06:18:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=525f1bd75332f60befa4ec2eff84fa95f0998c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:72:18:30:c0:7a:3a:2f:81:00:e2:f7:ca:
                    ce:50:04:8f:d0:24:07:28:a2:7f:9a:b3:97:0d:c9:
                    bd:90:37:ed:f1:ff:6d:d2:8f:f9:7f:35:68:17:8a:
                    0a:d0:bb:71:21:8a:62:e7:16:c7:e9:ec:55:6b:27:
                    76:83:93:15:28:71:99:28:44:a2:a8:35:fe:23:9f:
                    ee:ab:56:16:dc:09:7b:4d:4d:ec:8a:96:9b:b3:1c:
                    1f:59:94:93:38:10:e7:ce:93:99:f9:f5:41:db:b4:
                    cb:d1:07:98:e3:94:f1:5c:4e:d4:06:f7:e4:d4:46:
                    43:a8:a9:fe:8f:70:46:35:31:15:b1:56:a5:08:b4:
                    af:7f:e2:ac:a3:8c:85:5e:e6:4e:18:8b:07:4c:c3:
                    f3:c0:e2:3f:25:70:08:df:b5:4a:4d:7e:5d:8c:a0:
                    cc:ce:75:8b:7c:44:0f:05:5d:bc:0c:7e:5d:af:b6:
                    60:39:eb:dc:4d:ee:98:0c:e0:1b:fb:2c:6c:6e:e6:
                    6c:b0:a6:c9:78:4a:d7:d4:17:32:a4:35:5e:65:d5:
                    ea:e8:1d:41:47:b7:cd:d2:5b:5f:d9:92:23:e7:bf:
                    53:9d:1a:08:5e:52:94:81:79:8f:f2:b2:e1:11:0b:
                    c2:f2:6e:3e:2c:cb:c7:a7:08:b2:0d:1a:2f:9a:2c:
                    a5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5F:1B:D7:53:32:F6:0B:EF:A4:EC:2E:FF:84:FA:95:F0:99:8C:22
            X509v3 Authority Key Identifier:
                keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/Ul8b11My9gvvpOwu_4T6lfCZjCI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.30.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:38:40:1b:ab:6b:fe:1e:86:f3:d0:e2:43:f0:90:f3:cf:ee:
         cc:b6:b4:72:f4:89:72:61:92:ce:3f:c1:28:b9:18:a3:45:f3:
         56:40:6e:a9:2d:41:50:6d:b3:ea:bf:98:e7:26:46:54:d7:04:
         e3:af:2c:4e:81:09:82:0d:e4:d0:c2:04:85:08:7f:1b:67:65:
         c9:53:84:53:16:e6:a4:06:95:40:e5:32:53:52:b2:a2:0b:cf:
         de:d9:f6:80:ca:59:a4:2d:58:ff:09:da:d1:8c:2b:ac:d0:b0:
         d8:87:02:df:bc:1c:8c:96:33:52:45:0c:f8:57:d4:56:dd:76:
         eb:a3:df:82:12:68:9b:19:1e:a3:63:9a:95:fe:96:1d:14:14:
         0d:24:ec:ed:0f:8c:ba:d7:79:60:a8:e1:51:f7:63:cf:22:2e:
         90:0c:d6:f6:c0:d0:fb:d3:84:38:7e:90:e3:f5:29:a7:79:e8:
         05:98:3f:91:17:58:ae:7d:96:76:18:ef:45:7d:42:39:f2:ce:
         8b:22:52:c6:72:0f:65:16:1f:1b:db:e3:b1:94:0e:63:3f:77:
         d7:bc:a0:84:21:d6:dd:92:d3:91:d7:2c:55:21:41:e5:53:4f:
         3c:42:84:47:92:65:57:0d:fd:14:0d:d9:30:d5:ba:d8:50:43:
         78:d4:80:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NT8Xz4vyujm3RIZA9/kwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzZkMmY0M2VjMTdkZmM4MDVjZGIwNWYwMDBhMTU3OTg5
ZWQ0NDgwHhcNMjYwMTAxMDYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjVmMWJkNzUzMzJmNjBiZWZhNGVjMmVmZjg0ZmE5NWYwOTk4YzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+5yGDDAejovgQDi98rOUASP0CQH
KKJ/mrOXDcm9kDft8f9t0o/5fzVoF4oK0LtxIYpi5xbH6exVayd2g5MVKHGZKESi
qDX+I5/uq1YW3Al7TU3sipabsxwfWZSTOBDnzpOZ+fVB27TL0QeY45TxXE7UBvfk
1EZDqKn+j3BGNTEVsValCLSvf+Kso4yFXuZOGIsHTMPzwOI/JXAI37VKTX5djKDM
znWLfEQPBV28DH5dr7ZgOevcTe6YDOAb+yxsbuZssKbJeErX1BcypDVeZdXq6B1B
R7fN0ltf2ZIj579TnRoIXlKUgXmP8rLhEQvC8m4+LMvHpwiyDRovmiylwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFJfG9dTMvYL76TsLv+E+pXwmYwiMB8GA1UdIwQY
MBaAFNx20vQ+wX38gFzbBfAAoVeYntRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hiUzlEN0JmZnlBWE5zRjhBQ2hWNWllMUVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jNjFlNDAtYWMwOS00NzU2LTk0ZWYt
OTNjNjQ1N2NhZjMzLzEvVWw4YjExTXk5Z3Z2cE93dV80VDZsZkNaakNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9jNjFlNDAtYWMwOS00NzU2LTk0ZWYtOTNjNjQ1N2NhZjMz
LzEvM0hiUzlEN0JmZnlBWE5zRjhBQ2hWNWllMUVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh62MA0G
CSqGSIb3DQEBCwUAA4IBAQBCOEAbq2v+Hobz0OJD8JDzz+7MtrRy9IlyYZLOP8Eo
uRijRfNWQG6pLUFQbbPqv5jnJkZU1wTjryxOgQmCDeTQwgSFCH8bZ2XJU4RTFuak
BpVA5TJTUrKiC8/e2faAylmkLVj/CdrRjCus0LDYhwLfvByMljNSRQz4V9RW3Xbr
o9+CEmibGR6jY5qV/pYdFBQNJOztD4y613lgqOFR92PPIi6QDNb2wND704Q4fpDj
9SmneegFmD+RF1iufZZ2GO9FfUI58s6LIlLGcg9lFh8b2+OxlA5jP3fXvKCEIdbd
ktOR1yxVIUHlU088QoRHkmVXDf0UDdkw1brYUEN41IDU
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:55:55 2026 by rpki-client