This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/UPdd3G2KcdZS3e0YMWJ1mdET7ug.roa
File:                     UPdd3G2KcdZS3e0YMWJ1mdET7ug.roa (raw, json)
Hash identifier:          fLa6myDFK6r7xHzOqHrp8ZBgZdrk6WJWWDhaOtDKTYI=
Subject key identifier:   50:F7:5D:DC:6D:8A:71:D6:52:DD:ED:18:31:62:75:99:D1:13:EE:E8
Certificate issuer:       /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial:       019B77C6EB81F1C41A4E2BBBE47366166F19
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/UPdd3G2KcdZS3e0YMWJ1mdET7ug.roa
Signing time:             Thu 01 Jan 2026 04:18:03 +0000
ROA not before:           Thu 01 Jan 2026 04:18:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208624
IP address blocks:        185.182.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:eb:81:f1:c4:1a:4e:2b:bb:e4:73:66:16:6f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
        Validity
            Not Before: Jan  1 04:18:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=50f75ddc6d8a71d652dded1831627599d113eee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:13:52:56:cf:15:be:c4:3e:13:ea:35:e8:
                    47:2c:a1:66:36:23:28:ec:80:f4:e9:f5:d9:f2:26:
                    e7:b2:73:e1:82:00:8b:58:54:75:b0:e0:b7:b5:be:
                    1e:51:91:ff:64:b5:74:bd:e3:e5:17:4d:38:57:75:
                    4d:33:c7:06:80:23:b0:17:7d:a2:64:45:07:ba:13:
                    ca:ad:ef:96:df:f5:1b:5e:a9:a1:cd:c6:f2:3d:b9:
                    55:9b:1c:e7:8e:1d:c5:c0:83:29:45:aa:01:7f:ab:
                    43:51:59:2e:81:f6:4c:b1:a5:59:d9:8e:08:87:b3:
                    97:ea:b1:d2:c2:f0:8c:85:ec:e0:a2:c8:ef:6c:65:
                    70:74:4f:0d:9e:93:93:e1:db:5c:bd:2d:dc:0d:18:
                    2d:e2:11:91:84:43:97:79:7e:17:bb:6f:61:99:c1:
                    68:89:42:4b:c7:a7:e4:bf:34:37:3d:09:cf:53:df:
                    78:6a:29:c2:17:32:c9:14:c5:d7:75:7c:c7:0e:af:
                    ab:83:fa:1b:4e:4a:25:bb:44:d8:bd:4c:61:9e:2d:
                    12:7c:04:f9:e7:5e:3b:ce:25:cb:1c:1a:6f:79:0b:
                    89:5d:6e:07:ef:17:8b:2d:2c:35:6d:5a:ca:37:f5:
                    00:7e:64:40:2e:98:a3:55:f3:a9:24:0b:32:25:5c:
                    d8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F7:5D:DC:6D:8A:71:D6:52:DD:ED:18:31:62:75:99:D1:13:EE:E8
            X509v3 Authority Key Identifier:
                keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/UPdd3G2KcdZS3e0YMWJ1mdET7ug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:06:39:70:8d:8e:a1:9d:65:16:fd:60:71:24:d4:d2:0a:01:
         2e:04:8f:f7:77:1e:16:7c:88:35:3c:fd:70:ed:06:6d:20:21:
         6e:4c:a9:7b:25:cc:28:ab:74:d1:92:80:f7:47:b0:ac:f9:de:
         ae:f2:9c:5b:f0:95:f2:23:5b:58:bc:99:7a:f2:9b:2b:e6:f2:
         9f:d8:26:dc:a7:15:5b:ec:03:e1:8a:8a:8c:3d:ab:2a:e4:83:
         5b:36:b6:b2:ae:5d:24:66:5f:c5:f2:3a:90:2c:ef:e7:ef:19:
         6f:e6:e7:f5:71:84:9d:3f:0d:39:bf:c0:c8:88:20:57:4e:26:
         c0:eb:ed:2b:b8:98:e8:50:9d:c3:43:cf:ce:18:8c:91:a5:79:
         f0:5d:58:cc:cd:20:22:f1:fc:bd:24:07:ee:cd:92:db:85:bb:
         c2:7a:a6:d4:ad:c8:bc:3a:b8:2f:cc:ed:a5:c3:66:76:35:ed:
         0e:45:b4:5a:0f:ae:d7:b2:2a:40:d2:0c:00:ea:30:69:94:db:
         83:36:00:8d:66:58:2a:35:44:11:68:43:3a:ff:0f:be:2c:cc:
         48:0f:c9:2a:0a:34:7e:27:9b:33:90:73:15:ce:98:28:4b:ef:
         e4:7c:70:cf:d5:a3:9d:45:31:8b:3c:0c:d9:63:ad:14:c9:ea:
         62:54:92:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3xuuB8cQaTiu75HNmFm8ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMjdkNDVmYzE4YmE5MTdhYjFlODlhMTdlZjBiNjM2MDk4
NDgyMjQwHhcNMjYwMTAxMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGY3NWRkYzZkOGE3MWQ2NTJkZGVkMTgzMTYyNzU5OWQxMTNlZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouoTUlbPFb7EPhPqNehHLKFmNiMo
7ID06fXZ8ibnsnPhggCLWFR1sOC3tb4eUZH/ZLV0vePlF004V3VNM8cGgCOwF32i
ZEUHuhPKre+W3/UbXqmhzcbyPblVmxznjh3FwIMpRaoBf6tDUVkugfZMsaVZ2Y4I
h7OX6rHSwvCMhezgosjvbGVwdE8NnpOT4dtcvS3cDRgt4hGRhEOXeX4Xu29hmcFo
iUJLx6fkvzQ3PQnPU994ainCFzLJFMXXdXzHDq+rg/obTkolu0TYvUxhni0SfAT5
5147ziXLHBpveQuJXW4H7xeLLSw1bVrKN/UAfmRALpijVfOpJAsyJVzY5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFD3XdxtinHWUt3tGDFidZnRE+7oMB8GA1UdIwQY
MBaAFK8n1F/Bi6kXqx6JoX7wtjYJhIIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnlmVVg4R0xxUmVySG9taGZ2QzJOZ21FZ2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80NDE3NTUtYjUyZi00ZmI2LWIzZWYt
N2FjYmM2YzlmOTg1LzEvVVBkZDNHMktjZFpTM2UwWU1XSjFtZEVUN3VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80NDE3NTUtYjUyZi00ZmI2LWIzZWYtN2FjYmM2YzlmOTg1
LzEvcnlmVVg4R0xxUmVySG9taGZ2QzJOZ21FZ2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuba8MA0G
CSqGSIb3DQEBCwUAA4IBAQAdBjlwjY6hnWUW/WBxJNTSCgEuBI/3dx4WfIg1PP1w
7QZtICFuTKl7Jcwoq3TRkoD3R7Cs+d6u8pxb8JXyI1tYvJl68psr5vKf2CbcpxVb
7APhioqMPasq5INbNrayrl0kZl/F8jqQLO/n7xlv5uf1cYSdPw05v8DIiCBXTibA
6+0ruJjoUJ3DQ8/OGIyRpXnwXVjMzSAi8fy9JAfuzZLbhbvCeqbUrci8OrgvzO2l
w2Z2Ne0ORbRaD67XsipA0gwA6jBplNuDNgCNZlgqNUQRaEM6/w++LMxID8kqCjR+
J5szkHMVzpgoS+/kfHDP1aOdRTGLPAzZY60UyepiVJIT
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:38 2026 by rpki-client