This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/UwpamNLfVxzRkvSFFW9AtlKgwro.roa
File:                     UwpamNLfVxzRkvSFFW9AtlKgwro.roa (raw, json)
Hash identifier:          gACm/NCGRIJ7K8nc7hX0Ydqc4YIKSSniFsij+fOcodU=
Subject key identifier:   53:0A:5A:98:D2:DF:57:1C:D1:92:F4:85:15:6F:40:B6:52:A0:C2:BA
Certificate issuer:       /CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Certificate serial:       019B7B35CBFDB13E99DC9FA7C24098A3A78E
Authority key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/UwpamNLfVxzRkvSFFW9AtlKgwro.roa
Signing time:             Thu 01 Jan 2026 20:18:01 +0000
ROA not before:           Thu 01 Jan 2026 20:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        185.169.80.0/24 maxlen: 24
                          185.169.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:cb:fd:b1:3e:99:dc:9f:a7:c2:40:98:a3:a7:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
        Validity
            Not Before: Jan  1 20:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=530a5a98d2df571cd192f485156f40b652a0c2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9d:3d:cd:54:e9:f3:9d:ce:03:9b:67:b4:2a:
                    d7:9c:e7:b8:7f:f2:9e:63:92:c5:c3:1a:87:bd:20:
                    2c:38:f3:2c:1c:da:ea:e3:2d:02:57:32:4b:2c:ac:
                    a2:09:dd:fb:c3:a2:b2:db:1c:49:af:f9:f5:61:cc:
                    5e:c9:d8:f2:92:71:97:13:f8:f5:2d:ab:7b:80:69:
                    72:97:be:b0:11:ed:5b:83:e7:78:dd:cb:55:b0:6a:
                    7b:ef:df:92:03:72:b3:9b:ce:81:b6:96:b9:75:77:
                    c4:2a:2e:02:bf:b2:27:4a:3e:ff:39:c1:58:0f:c6:
                    73:6b:73:30:13:09:42:6e:4f:ca:ba:40:9f:47:ea:
                    98:24:50:55:d5:fc:15:1b:1b:3e:1d:ac:08:86:0e:
                    46:49:af:a8:9c:aa:0d:c5:e0:df:08:3d:38:64:84:
                    47:6a:4d:0e:c6:6f:53:03:33:f1:a9:86:68:1f:dd:
                    ef:40:b4:76:bc:cc:fa:4c:83:f8:05:af:68:07:6e:
                    4f:63:a7:d8:2f:28:f3:88:c9:b3:a1:83:dc:3b:33:
                    44:4b:5e:18:fa:f3:55:21:90:7e:85:6e:4b:44:df:
                    e0:eb:0d:9f:c6:64:87:7c:89:2e:43:88:a5:a7:d6:
                    9a:fd:9c:87:92:7e:a6:21:94:7d:7e:ac:07:38:97:
                    b5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0A:5A:98:D2:DF:57:1C:D1:92:F4:85:15:6F:40:B6:52:A0:C2:BA
            X509v3 Authority Key Identifier:
                keyid:F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/UwpamNLfVxzRkvSFFW9AtlKgwro.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:a3:0d:b5:a0:42:99:68:42:5f:45:6a:22:fa:55:38:93:c1:
         bd:93:c7:88:af:bb:77:9d:47:c8:2f:a3:a3:fb:52:ec:9b:97:
         d1:b7:06:f8:2e:30:70:b8:48:f1:56:08:77:f3:05:38:55:72:
         bd:39:3c:97:a9:e6:cb:dd:05:cd:15:d7:60:20:a9:07:b9:49:
         7e:fb:12:e1:19:e5:05:66:fc:2a:98:e2:58:38:3a:1c:50:55:
         fd:ea:8c:d0:ff:51:a3:d9:19:89:14:4b:6c:ff:6d:14:21:b9:
         85:92:f9:06:87:f0:32:fe:cc:38:ea:f2:f5:e8:af:ae:91:2d:
         f4:7d:aa:49:27:5c:b5:87:fa:a6:5b:48:a8:66:95:55:4a:81:
         bc:b5:52:50:5f:49:4a:5e:41:22:a3:7b:a7:57:5e:53:24:1a:
         93:38:9d:96:05:cd:1f:36:c0:cf:6e:3c:7c:ba:9f:63:43:4b:
         bb:1b:60:2f:09:db:72:fb:c3:a1:0f:27:3d:00:df:58:e0:70:
         68:bd:1e:d3:28:d1:bc:19:c4:84:12:0a:ee:16:cc:a4:31:3c:
         4b:ea:cc:14:e2:61:8c:73:9e:bf:c3:21:13:d6:99:65:80:de:
         36:0c:64:eb:cb:cd:64:5d:c0:5e:af:14:54:82:20:12:a4:2a:
         7a:f7:6e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:47:48 2026 by rpki-client