This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uGgqRaD5XGrStlkDB659GSHW0pU.roa
File:                     uGgqRaD5XGrStlkDB659GSHW0pU.roa (raw, json)
Hash identifier:          6yK2YCJtLDyOTyXrxwsodgWJ01xvcx1J2snQ6i/NG4s=
Subject key identifier:   B8:68:2A:45:A0:F9:5C:6A:D2:B6:59:03:07:AE:7D:19:21:D6:D2:95
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       019B7C137481982249C988AAC0D29D6B7DBC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uGgqRaD5XGrStlkDB659GSHW0pU.roa
Signing time:             Fri 02 Jan 2026 00:20:08 +0000
ROA not before:           Fri 02 Jan 2026 00:20:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57974
IP address blocks:        185.108.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 19:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:74:81:98:22:49:c9:88:aa:c0:d2:9d:6b:7d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Jan  2 00:20:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b8682a45a0f95c6ad2b6590307ae7d1921d6d295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:90:39:ca:6e:84:19:13:81:d2:76:92:98:
                    c3:f6:17:b0:f6:af:9c:9a:05:ba:88:7d:a4:9d:d2:
                    33:6f:b5:04:69:8d:cc:4b:95:2c:33:8d:d4:9f:8a:
                    a6:2f:35:c7:e5:65:57:be:82:5d:3f:ec:79:2a:e5:
                    4e:8f:ab:20:3f:cf:5d:24:86:21:b1:b4:bc:17:44:
                    99:54:05:a6:3b:c3:d6:50:02:ae:0f:bf:de:fb:a1:
                    2a:98:fb:1a:1b:eb:58:6c:aa:db:27:17:16:24:d6:
                    67:98:35:90:50:e6:de:69:75:7f:77:1e:1a:17:dc:
                    1e:4a:c5:19:7b:83:9a:08:95:9a:25:ef:ca:fa:5a:
                    fe:5e:7c:5e:85:dc:ed:7f:83:b1:6b:9d:af:e7:86:
                    2c:31:ff:7b:e0:30:1d:de:c6:9b:7c:6c:21:b5:37:
                    7c:46:6e:7e:51:84:a2:30:12:5e:a4:dc:ea:7a:69:
                    b5:1a:af:48:c3:02:1e:86:3c:ee:43:28:14:98:eb:
                    57:0b:19:91:35:06:9e:46:de:fb:17:20:ce:37:5e:
                    7a:9b:3d:59:6f:93:b3:d0:48:e9:d2:38:08:55:91:
                    4e:3c:84:2e:f3:de:16:da:16:1f:ad:82:26:72:5f:
                    7d:d7:44:19:34:ce:5e:1a:f5:c9:5a:03:37:dd:b2:
                    35:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:68:2A:45:A0:F9:5C:6A:D2:B6:59:03:07:AE:7D:19:21:D6:D2:95
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uGgqRaD5XGrStlkDB659GSHW0pU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.108.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:b8:0c:11:39:88:dc:7d:1f:2e:83:1d:6e:59:2d:63:54:43:
         07:52:cf:1e:91:0e:f0:76:9a:4c:72:1c:f3:a8:ea:8b:bf:d4:
         da:db:4f:65:fc:ff:61:62:a7:bc:01:dd:34:e2:30:4d:3c:89:
         7a:99:84:74:42:37:b8:b1:9f:d0:31:a2:d8:a7:0a:72:72:2f:
         4c:c8:2b:22:fd:10:4b:eb:c4:4c:32:9e:a1:e4:34:da:c2:87:
         19:db:c3:b2:d2:db:1c:d6:0d:52:97:24:ae:24:94:84:d9:11:
         e6:86:21:a0:c7:74:82:2d:cc:9f:c5:20:83:3e:bd:e0:19:02:
         b7:4c:1a:19:57:d1:c2:03:ca:cf:2b:b3:99:86:7e:ee:77:13:
         55:37:93:16:1d:6a:55:be:e2:e1:b8:b5:ff:76:32:3e:e1:74:
         a5:95:b9:47:0c:da:ca:d8:d5:c6:64:55:e6:86:aa:32:ed:9e:
         a7:87:af:50:31:8a:30:06:48:e1:95:9a:59:16:07:d8:6d:87:
         32:18:56:b2:7c:95:f2:de:3f:bd:d3:81:ee:b6:69:cb:27:c1:
         b7:ad:75:3f:f5:44:9d:77:56:34:8e:93:10:37:4c:4e:a8:db:
         47:4e:4e:d8:2b:88:f9:31:fc:90:eb:92:ac:3b:e1:6b:de:0b:
         d5:f1:84:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 23:53:22 2026 by rpki-client