This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/uk1yMuIhfj_AsU2-6fURODr1PYs.roa
File:                     uk1yMuIhfj_AsU2-6fURODr1PYs.roa (raw, json)
Hash identifier:          ePtxN4aYsDdUgFwDOmPVrOtc3Cuxql4t3PTGL5OYLMI=
Subject key identifier:   BA:4D:72:32:E2:21:7E:3F:C0:B1:4D:BE:E9:F5:11:38:3A:F5:3D:8B
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       019AC6BB81E33FE01C7ED5B8DE610887FD06
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/uk1yMuIhfj_AsU2-6fURODr1PYs.roa
Signing time:             Thu 27 Nov 2025 19:12:48 +0000
ROA not before:           Thu 27 Nov 2025 19:12:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     216341
IP address blocks:        185.39.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:c6:bb:81:e3:3f:e0:1c:7e:d5:b8:de:61:08:87:fd:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Nov 27 19:12:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ba4d7232e2217e3fc0b14dbee9f511383af53d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fd:9f:4f:46:b2:1d:34:f5:e2:4a:65:24:e2:
                    ff:b2:4d:f9:c4:69:b7:32:19:46:7b:14:7f:b4:42:
                    59:c2:94:4e:7c:d7:ef:33:2d:ad:2d:91:e7:2d:39:
                    99:3a:b8:2c:30:2d:aa:e1:a8:ea:31:af:59:b5:fb:
                    b2:71:45:47:76:39:97:6a:7d:9c:2e:8e:0d:2c:50:
                    dc:34:03:22:9b:4f:5c:17:c0:ce:00:03:bf:0b:de:
                    9f:11:9e:a2:e3:80:03:da:cb:0c:c4:96:08:d4:7f:
                    63:9b:61:87:7e:8f:b2:26:dc:d6:79:87:ff:05:01:
                    75:c6:a8:06:22:63:c4:9e:b6:df:1e:b5:3b:1a:26:
                    73:a0:9d:1b:d9:bb:64:be:bf:12:e3:38:cd:87:42:
                    60:66:6b:0f:16:52:cc:36:6f:ce:6b:82:52:54:07:
                    1e:d0:70:f2:0c:99:e5:fe:34:73:3a:16:0a:25:ba:
                    fa:9c:ca:e2:c5:9b:8c:a6:2d:4b:bf:10:16:c3:5e:
                    6a:01:38:ac:32:e6:44:c0:0e:3d:8d:e8:54:11:66:
                    e1:d8:57:a7:45:3a:c1:ec:54:1e:9e:68:f9:74:54:
                    77:3d:79:42:9a:3b:0c:64:fb:87:b0:c5:da:ba:1c:
                    b4:8d:aa:b4:b4:7e:c9:a6:95:36:79:5a:bd:b8:0d:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4D:72:32:E2:21:7E:3F:C0:B1:4D:BE:E9:F5:11:38:3A:F5:3D:8B
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/uk1yMuIhfj_AsU2-6fURODr1PYs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.39.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:8b:d2:db:d1:1b:4b:91:20:3f:43:7a:ef:68:9e:00:8b:2a:
         99:6c:58:e5:ad:34:e1:c1:5e:7c:78:17:04:97:1a:d2:89:ed:
         32:08:08:96:2c:0a:73:9d:5c:c3:81:ce:e5:0c:31:34:24:b4:
         15:f2:19:08:32:87:dc:06:f4:9f:bc:a2:fa:20:b8:07:71:32:
         a4:cc:9f:99:06:00:30:ae:51:56:70:a2:42:c8:a7:72:06:de:
         0c:d7:e1:31:0f:dd:de:f8:37:23:b8:1e:43:ba:4a:66:8b:0a:
         9f:94:01:47:64:a0:9b:32:dc:24:3c:cc:5d:95:14:62:a8:66:
         30:a4:62:2f:81:2d:c7:2f:24:37:41:5e:da:c8:a4:d6:67:16:
         a5:a9:97:cd:a3:e5:5f:bd:54:b4:ae:34:83:8e:93:77:41:b4:
         e6:35:6d:3a:ea:fa:af:d8:92:b5:f8:f4:b6:d3:57:96:2f:1e:
         03:38:1c:22:bd:a0:e7:e4:76:31:ec:4b:97:e9:ae:22:7a:96:
         e0:87:66:38:c6:bb:e6:2d:33:87:5d:ad:87:f7:94:b8:7d:29:
         82:9c:af:81:cd:1e:db:c4:0e:8d:b6:ed:69:7a:16:b5:27:de:
         ec:50:50:15:38:4e:69:cb:19:c3:ce:0d:78:70:6f:4d:d9:49:
         e9:f0:36:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZrGu4HjP+AcftW43mEIh/0GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjUxMTI3MTkxMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTRkNzIzMmUyMjE3ZTNmYzBiMTRkYmVlOWY1MTEzODNhZjUzZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5f2fT0ayHTT14kplJOL/sk35xGm3
MhlGexR/tEJZwpROfNfvMy2tLZHnLTmZOrgsMC2q4ajqMa9ZtfuycUVHdjmXan2c
Lo4NLFDcNAMim09cF8DOAAO/C96fEZ6i44AD2ssMxJYI1H9jm2GHfo+yJtzWeYf/
BQF1xqgGImPEnrbfHrU7GiZzoJ0b2btkvr8S4zjNh0JgZmsPFlLMNm/Oa4JSVAce
0HDyDJnl/jRzOhYKJbr6nMrixZuMpi1LvxAWw15qATisMuZEwA49jehUEWbh2Fen
RTrB7FQenmj5dFR3PXlCmjsMZPuHsMXauhy0jaq0tH7JppU2eVq9uA2uVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLpNcjLiIX4/wLFNvun1ETg69T2LMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvdWsxeU11SWhmal9Bc1UyLTZmVVJPRHIxUFlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuScTMA0G
CSqGSIb3DQEBCwUAA4IBAQA3i9Lb0RtLkSA/Q3rvaJ4AiyqZbFjlrTThwV58eBcE
lxrSie0yCAiWLApznVzDgc7lDDE0JLQV8hkIMofcBvSfvKL6ILgHcTKkzJ+ZBgAw
rlFWcKJCyKdyBt4M1+ExD93e+DcjuB5DukpmiwqflAFHZKCbMtwkPMxdlRRiqGYw
pGIvgS3HLyQ3QV7ayKTWZxalqZfNo+VfvVS0rjSDjpN3QbTmNW066vqv2JK1+PS2
01eWLx4DOBwivaDn5HYx7EuX6a4iepbgh2Y4xrvmLTOHXa2H95S4fSmCnK+BzR7b
xA6Ntu1peha1J97sUFAVOE5pyxnDzg14cG9N2Unp8Dal
-----END CERTIFICATE-----
Generated at Fri Dec 5 20:11:33 2025 by rpki-client