This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/XuITUG_nXLtJk8wz6ifMhssSuak.roa
File:                     XuITUG_nXLtJk8wz6ifMhssSuak.roa (raw, json)
Hash identifier:          5aV6yd72Tpn0oei/wl6ltB44f+OFtaPnyUmZaPxlolc=
Subject key identifier:   5E:E2:13:50:6F:E7:5C:BB:49:93:CC:33:EA:27:CC:86:CB:12:B9:A9
Certificate issuer:       /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial:       019B78A322E8021C45FC24CC8ABB6D2AE6A3
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/XuITUG_nXLtJk8wz6ifMhssSuak.roa
Signing time:             Thu 01 Jan 2026 08:18:35 +0000
ROA not before:           Thu 01 Jan 2026 08:18:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44486
IP address blocks:        193.33.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:22:e8:02:1c:45:fc:24:cc:8a:bb:6d:2a:e6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
        Validity
            Not Before: Jan  1 08:18:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5ee213506fe75cbb4993cc33ea27cc86cb12b9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f4:32:e9:d4:f9:e8:16:8c:e4:dd:f4:21:90:
                    d6:b5:0b:02:c4:3f:6e:8b:d8:06:a4:d7:bb:d6:30:
                    29:dd:3b:39:c8:d3:fe:ea:7b:f1:5a:67:ff:73:6b:
                    87:7f:95:83:b3:8f:67:4a:dd:94:11:9f:98:7c:af:
                    1b:5d:a2:df:c0:5b:02:32:8a:3f:f8:d3:c9:97:39:
                    dc:61:58:af:f2:f2:8a:51:b2:d8:f9:90:2f:2b:b8:
                    c3:aa:ac:55:e7:33:7f:d0:ac:35:da:fa:a7:6a:e0:
                    f0:a0:ae:30:c2:70:6f:15:3e:79:eb:1d:77:14:6e:
                    1e:51:2e:ff:4d:33:19:c2:cd:f3:28:08:a4:87:f6:
                    25:58:e4:62:bb:ce:dc:9e:ab:34:cb:f9:0c:d0:3e:
                    da:0b:17:ea:5d:12:a5:14:c1:47:cd:a1:dd:3b:61:
                    57:79:c1:e2:2c:d3:53:c0:d7:69:aa:d7:7c:34:45:
                    50:56:6d:58:a6:3b:22:a2:92:4c:02:32:ef:b0:8f:
                    7a:d7:70:83:19:63:56:83:9e:03:8d:ef:e2:3a:5d:
                    4f:7f:d4:40:8f:d7:bf:1d:bf:75:a8:3f:ac:74:86:
                    7d:3a:54:02:a8:62:d4:57:81:36:7f:62:60:6a:90:
                    c6:e0:9f:29:67:12:63:4f:ff:75:64:14:25:6d:62:
                    ea:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E2:13:50:6F:E7:5C:BB:49:93:CC:33:EA:27:CC:86:CB:12:B9:A9
            X509v3 Authority Key Identifier:
                keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/XuITUG_nXLtJk8wz6ifMhssSuak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.33.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:9c:4c:ae:72:bb:12:86:79:89:59:f8:f3:87:35:6e:a1:77:
         74:f9:c4:1d:f6:61:06:bb:84:46:5d:63:50:c0:85:45:85:1e:
         27:69:21:55:1b:07:04:76:b6:ea:6b:00:87:24:41:a0:9e:a8:
         dc:d1:5d:43:de:50:f8:76:90:78:52:f4:1d:0d:ff:d8:46:df:
         de:0e:84:c8:3c:39:1f:5e:76:74:49:84:b8:6c:8d:85:4d:32:
         0f:a6:80:7f:ff:bc:8b:98:f2:9a:a6:cb:e6:a1:0e:2d:7e:b1:
         b6:b2:ac:50:d0:18:11:32:11:12:30:e5:af:7b:ed:1f:13:44:
         01:79:71:7d:db:a2:50:c7:63:de:52:dd:f0:a7:14:58:24:42:
         09:fe:bb:b3:47:79:48:60:f9:cd:7d:8c:0d:a4:c3:4b:0a:df:
         c4:dc:e4:b5:66:f0:db:3c:e3:9a:30:71:fe:2f:5f:aa:3f:0e:
         cb:e1:e1:fa:ea:51:a1:80:f1:1d:04:4b:a0:0b:0f:da:ba:a0:
         a3:59:bc:0f:dc:4c:d9:27:61:9b:3e:c9:e1:38:39:79:c2:0a:
         07:7e:c2:fd:5f:dc:b6:12:0f:b5:be:1e:01:d9:ef:dc:db:ef:
         0d:4a:16:78:73:05:08:2d:2d:81:d0:de:8d:f0:32:24:fd:bc:
         c7:e7:12:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4oyLoAhxF/CTMirttKuajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYTgwYzQ4MzM3YmYyN2RiMmZkMDgzYzE3MmM2YTFjYzVk
MWQxN2MwHhcNMjYwMTAxMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWUyMTM1MDZmZTc1Y2JiNDk5M2NjMzNlYTI3Y2M4NmNiMTJiOWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fQy6dT56BaM5N30IZDWtQsCxD9u
i9gGpNe71jAp3Ts5yNP+6nvxWmf/c2uHf5WDs49nSt2UEZ+YfK8bXaLfwFsCMoo/
+NPJlzncYViv8vKKUbLY+ZAvK7jDqqxV5zN/0Kw12vqnauDwoK4wwnBvFT556x13
FG4eUS7/TTMZws3zKAikh/YlWORiu87cnqs0y/kM0D7aCxfqXRKlFMFHzaHdO2FX
ecHiLNNTwNdpqtd8NEVQVm1YpjsiopJMAjLvsI9613CDGWNWg54Dje/iOl1Pf9RA
j9e/Hb91qD+sdIZ9OlQCqGLUV4E2f2JgapDG4J8pZxJjT/91ZBQlbWLqJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF7iE1Bv51y7SZPMM+onzIbLErmpMB8GA1UdIwQY
MBaAFPOoDEgze/J9sv0IPBcsahzF0dF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjkt
MjY2NGRhY2U5NTgwLzEvWHVJVFVHX25YTHRKazh3ejZpZk1oc3NTdWFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjktMjY2NGRhY2U5NTgw
LzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSGnMA0G
CSqGSIb3DQEBCwUAA4IBAQBwnEyucrsShnmJWfjzhzVuoXd0+cQd9mEGu4RGXWNQ
wIVFhR4naSFVGwcEdrbqawCHJEGgnqjc0V1D3lD4dpB4UvQdDf/YRt/eDoTIPDkf
XnZ0SYS4bI2FTTIPpoB//7yLmPKapsvmoQ4tfrG2sqxQ0BgRMhESMOWve+0fE0QB
eXF926JQx2PeUt3wpxRYJEIJ/ruzR3lIYPnNfYwNpMNLCt/E3OS1ZvDbPOOaMHH+
L1+qPw7L4eH66lGhgPEdBEugCw/auqCjWbwP3EzZJ2GbPsnhODl5wgoHfsL9X9y2
Eg+1vh4B2e/c2+8NShZ4cwUILS2B0N6N8DIk/bzH5xK0
-----END CERTIFICATE-----
Generated at Sun Jan 18 08:35:26 2026 by rpki-client