This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/uv1ygUlcXrGSDECbU5SJQezpERk.roa
File:                     uv1ygUlcXrGSDECbU5SJQezpERk.roa (raw, json)
Hash identifier:          heh+HmefIR2zFpP0zIec4O9N2L5u5pbDsZ881lNVG4E=
Subject key identifier:   BA:FD:72:81:49:5C:5E:B1:92:0C:40:9B:53:94:89:41:EC:E9:11:19
Certificate issuer:       /CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
Certificate serial:       019C0E4DDEB5C957FBAF9A5BCC9CD2394D9A
Authority key identifier: 8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/uv1ygUlcXrGSDECbU5SJQezpERk.roa
Signing time:             Fri 30 Jan 2026 09:48:30 +0000
ROA not before:           Fri 30 Jan 2026 09:48:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39686
IP address blocks:        185.60.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0e:4d:de:b5:c9:57:fb:af:9a:5b:cc:9c:d2:39:4d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
        Validity
            Not Before: Jan 30 09:48:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bafd7281495c5eb1920c409b53948941ece91119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2b:40:0c:46:8d:5d:1c:bb:da:3f:ee:57:11:
                    ff:9f:f8:64:2d:4a:02:1a:0b:40:15:45:94:f0:dc:
                    2f:09:7f:76:5d:6b:7c:79:02:53:ac:26:9d:41:39:
                    db:74:e2:53:fd:07:50:ae:2a:98:d8:98:ee:03:2a:
                    13:23:ee:b5:78:ab:b5:67:09:25:b8:75:db:e5:7b:
                    97:30:08:75:54:eb:2f:cb:2a:fd:dd:03:ec:06:8f:
                    6c:7f:ec:36:24:28:c4:be:1c:6b:4e:e6:06:12:38:
                    79:1a:68:ee:fc:84:e3:45:00:18:c8:28:c7:e6:b9:
                    c5:d7:3a:62:ce:e0:e2:ab:27:93:1a:37:b9:a9:d4:
                    82:25:04:19:51:34:46:1f:31:c6:a6:f9:bd:40:86:
                    2e:d3:6f:5c:88:3c:53:99:4d:b6:bf:db:6a:4f:a5:
                    fb:db:3e:ae:74:0e:49:85:9b:89:45:96:eb:e7:47:
                    92:78:ca:93:be:4b:79:95:11:1b:e3:de:fc:1b:ce:
                    d8:44:ff:25:dd:f8:87:08:d3:f3:c2:43:fc:e5:27:
                    51:a1:3e:36:23:1c:24:1c:a1:80:ce:30:e9:72:81:
                    3d:86:43:b8:98:52:17:ae:a8:56:fa:9c:41:e1:ae:
                    b7:30:10:cc:29:05:0d:3e:32:e0:1a:89:68:de:c8:
                    03:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FD:72:81:49:5C:5E:B1:92:0C:40:9B:53:94:89:41:EC:E9:11:19
            X509v3 Authority Key Identifier:
                keyid:8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/uv1ygUlcXrGSDECbU5SJQezpERk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.60.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:36:2b:5a:35:64:b0:c3:a7:16:6f:7e:e5:65:87:52:7f:fa:
         1a:84:91:bb:40:b3:ac:22:db:86:f8:c9:91:ee:6a:e2:4c:51:
         30:6f:03:13:2c:03:8a:f8:ee:6e:8e:80:73:97:59:5a:11:81:
         ce:11:c0:f4:5f:66:36:37:b1:b9:8f:65:3b:17:b7:a1:58:f1:
         fa:73:5e:b2:20:bd:70:85:9c:e2:3c:4d:48:bb:65:bc:c5:2a:
         b4:40:79:6d:07:7c:85:81:e3:8e:f6:c4:2e:88:ea:35:4d:68:
         f2:bb:5f:ec:80:37:84:3b:59:77:a6:60:24:70:50:90:fe:e9:
         63:e2:ff:88:e1:15:3b:31:53:83:47:a3:45:9d:ff:4a:cb:3d:
         0a:62:58:6a:03:a4:9c:77:57:f4:52:39:9d:55:d1:9b:1e:fa:
         da:62:fe:73:25:2a:8a:af:c8:17:05:41:c6:b0:92:e8:fc:04:
         11:67:e8:ca:4a:7f:c3:9a:ce:c3:89:dc:6b:c7:08:45:31:36:
         50:92:cc:12:2b:4c:f3:d2:f8:35:5c:0f:a0:d0:1d:2a:cf:b1:
         7f:fa:d0:31:d2:00:1b:bc:69:c7:b4:7c:3d:ac:a0:51:1e:4e:
         1b:91:9e:f6:2f:8e:20:f5:40:51:62:87:11:a8:36:6a:8e:ae:
         e8:35:fc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:51:56 2026 by rpki-client