This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/uqfoqdlzGoN9et6fzb7necnZYIw.roa
File:                     uqfoqdlzGoN9et6fzb7necnZYIw.roa (raw, json)
Hash identifier:          SgUL7vkTjwn861S4CAyK+tSlBEkUYJUvaZzrQyQfimE=
Subject key identifier:   BA:A7:E8:A9:D9:73:1A:83:7D:7A:DE:9F:CD:BE:E7:79:C9:D9:60:8C
Certificate issuer:       /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial:       019B130BABB088231DB47FC79CEC6F504E1E
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/uqfoqdlzGoN9et6fzb7necnZYIw.roa
Signing time:             Fri 12 Dec 2025 14:51:30 +0000
ROA not before:           Fri 12 Dec 2025 14:51:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211177
IP address blocks:        185.228.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:13:0b:ab:b0:88:23:1d:b4:7f:c7:9c:ec:6f:50:4e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
        Validity
            Not Before: Dec 12 14:51:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=baa7e8a9d9731a837d7ade9fcdbee779c9d9608c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:18:aa:48:8e:b0:c8:48:ba:66:79:f4:6b:e7:
                    cd:95:7c:7b:87:38:61:f2:92:d8:8f:b7:8e:44:76:
                    9b:a2:23:05:b1:18:91:a7:45:3e:8c:99:6f:50:d4:
                    44:fb:cd:25:e9:16:40:70:53:4a:c7:e9:7a:ce:3f:
                    2c:e6:a9:8a:3a:4f:ad:bb:e8:6a:6e:38:46:6d:94:
                    41:d7:0f:69:85:a8:67:ed:54:cf:c7:61:fd:f7:8d:
                    57:98:30:9d:76:83:c4:2a:a7:0e:5f:cf:cd:ba:3b:
                    e1:7f:24:de:73:a0:84:07:7b:b1:7d:91:7b:34:dc:
                    62:a5:e5:c7:c9:77:5e:aa:64:b0:8d:df:f2:8b:02:
                    2c:dd:09:d9:a1:23:70:9d:f4:07:ee:01:c2:6b:b0:
                    ae:a6:9b:f9:98:fb:4e:e7:39:cf:2c:ff:f0:6d:ec:
                    d1:f6:0d:5c:57:68:dd:22:79:df:f2:4b:16:45:2e:
                    7a:a5:07:19:ac:73:e4:09:52:20:8e:2b:fc:47:c8:
                    73:8c:c5:20:d8:5c:67:5c:4f:1d:a2:f6:cc:54:ef:
                    6a:53:f8:20:dc:9f:08:da:62:1b:b5:0a:ee:bd:39:
                    31:42:43:c9:a6:15:76:ed:50:c3:40:36:32:a1:8a:
                    ef:3f:e2:cc:b9:e9:32:b9:5a:c4:3b:aa:7c:cf:fd:
                    5c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A7:E8:A9:D9:73:1A:83:7D:7A:DE:9F:CD:BE:E7:79:C9:D9:60:8C
            X509v3 Authority Key Identifier:
                keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/uqfoqdlzGoN9et6fzb7necnZYIw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.228.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:a2:7e:6b:da:eb:e8:d6:8e:43:ce:12:e5:14:7f:e1:f0:62:
         24:bf:72:22:bc:43:f9:47:df:57:25:43:65:68:c2:6d:4c:2f:
         8e:b6:7f:f0:d3:cc:aa:99:0a:fb:49:46:a3:1d:93:e7:0d:bf:
         11:4c:6e:c6:1f:4a:1e:2d:c1:ee:0c:48:09:eb:d1:27:bb:f3:
         61:42:d2:90:c5:b2:d4:aa:09:b9:37:db:48:a4:54:f6:49:fb:
         88:8e:22:b1:44:7f:2e:a7:2c:02:d6:3d:cc:39:44:e7:71:5e:
         02:43:89:bb:8a:46:53:3c:3b:96:72:eb:2f:15:cf:70:82:5e:
         dc:fd:09:54:43:d2:bb:1b:8f:4c:95:32:48:60:b2:aa:a8:ec:
         02:f9:22:71:86:93:f1:72:05:02:96:75:ff:6c:db:49:ce:36:
         a9:a1:85:4c:8e:db:81:4e:ba:2b:8a:96:1a:03:0f:bd:fb:09:
         d8:ff:51:66:c4:ad:93:9e:bf:06:c6:3d:7d:fd:aa:59:a9:cd:
         45:ee:68:c0:df:d5:dd:1a:41:62:a7:fc:61:e3:35:fc:df:57:
         08:aa:7e:14:64:64:a2:52:1e:d0:ad:d6:ae:3c:09:5e:af:28:
         60:34:ee:bf:63:f6:d4:f3:07:63:eb:3c:88:21:75:35:d4:6b:
         1d:a2:6a:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZsTC6uwiCMdtH/HnOxvUE4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjUxMjEyMTQ1MTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWE3ZThhOWQ5NzMxYTgzN2Q3YWRlOWZjZGJlZTc3OWM5ZDk2MDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hiqSI6wyEi6Znn0a+fNlXx7hzhh
8pLYj7eORHaboiMFsRiRp0U+jJlvUNRE+80l6RZAcFNKx+l6zj8s5qmKOk+tu+hq
bjhGbZRB1w9phahn7VTPx2H9941XmDCddoPEKqcOX8/NujvhfyTec6CEB3uxfZF7
NNxipeXHyXdeqmSwjd/yiwIs3QnZoSNwnfQH7gHCa7Cuppv5mPtO5znPLP/wbezR
9g1cV2jdInnf8ksWRS56pQcZrHPkCVIgjiv8R8hzjMUg2FxnXE8dovbMVO9qU/gg
3J8I2mIbtQruvTkxQkPJphV27VDDQDYyoYrvP+LMuekyuVrEO6p8z/1cqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLqn6KnZcxqDfXren82+53nJ2WCMMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvdXFmb3FkbHpHb045ZXQ2ZnpiN25lY25aWUl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueRQMA0G
CSqGSIb3DQEBCwUAA4IBAQADon5r2uvo1o5DzhLlFH/h8GIkv3IivEP5R99XJUNl
aMJtTC+Otn/w08yqmQr7SUajHZPnDb8RTG7GH0oeLcHuDEgJ69Enu/NhQtKQxbLU
qgm5N9tIpFT2SfuIjiKxRH8upywC1j3MOUTncV4CQ4m7ikZTPDuWcusvFc9wgl7c
/QlUQ9K7G49MlTJIYLKqqOwC+SJxhpPxcgUClnX/bNtJzjapoYVMjtuBTroripYa
Aw+9+wnY/1FmxK2Tnr8Gxj19/apZqc1F7mjA39XdGkFip/xh4zX831cIqn4UZGSi
Uh7QrdauPAleryhgNO6/Y/bU8wdj6zyIIXU11GsdomoA
-----END CERTIFICATE-----
Generated at Fri Dec 19 22:35:27 2025 by rpki-client