This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/Uyak9FY9ba4bxHqEK0yM1pkZMUw.roa
File:                     Uyak9FY9ba4bxHqEK0yM1pkZMUw.roa (raw, json)
Hash identifier:          eKt2OFgdGFEDf87H4DQvI0kzMnm6G7iHFK8YVozoyak=
Subject key identifier:   53:26:A4:F4:56:3D:6D:AE:1B:C4:7A:84:2B:4C:8C:D6:99:19:31:4C
Certificate issuer:       /CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Certificate serial:       019B7D5C0395664F2C6E20677F365895DF8E
Authority key identifier: 72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/Uyak9FY9ba4bxHqEK0yM1pkZMUw.roa
Signing time:             Fri 02 Jan 2026 06:19:00 +0000
ROA not before:           Fri 02 Jan 2026 06:19:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31081
IP address blocks:        193.28.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:03:95:66:4f:2c:6e:20:67:7f:36:58:95:df:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
        Validity
            Not Before: Jan  2 06:19:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5326a4f4563d6dae1bc47a842b4c8cd69919314c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:74:c8:cf:b6:3b:fb:8c:e1:81:24:59:12:7b:
                    db:31:47:21:27:c9:14:d3:4d:dd:2a:de:8d:2f:81:
                    e8:1c:2c:87:41:c0:e3:2c:48:b6:dd:4d:ed:92:2e:
                    22:f5:05:13:a1:d7:99:34:c0:d9:73:9d:c0:6e:45:
                    c1:95:9a:5d:21:c8:30:ac:b8:76:38:43:a6:db:b8:
                    ca:83:4d:0d:cb:c7:9d:9b:1b:bd:99:4b:dc:8d:df:
                    18:a7:d1:ee:ed:9b:f1:cc:0d:5b:4a:d3:88:8e:a4:
                    20:df:d3:a8:ca:5a:dd:92:15:fd:0e:28:8b:06:74:
                    86:28:fa:82:8f:eb:50:44:1c:b6:4c:2f:74:cc:9e:
                    77:5c:73:b1:fb:2c:60:91:bb:bd:a0:60:6d:0f:b2:
                    12:5a:13:48:bc:25:9c:7f:99:90:01:78:a3:41:f1:
                    50:92:ce:48:36:d1:58:a6:4c:b0:50:2c:b7:58:d0:
                    ab:4e:90:42:0f:8e:a6:d9:43:c2:38:5e:41:6d:e7:
                    fa:67:2d:d0:e9:7b:d3:88:9d:25:3c:e4:91:7f:70:
                    35:e6:f4:f4:62:4d:0a:b8:11:15:c6:d6:b4:ef:7e:
                    31:9f:3a:57:32:21:07:40:5a:43:ec:bc:c8:32:6f:
                    d1:90:93:8d:b1:f7:83:25:2b:c6:92:25:c5:75:a5:
                    59:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:26:A4:F4:56:3D:6D:AE:1B:C4:7A:84:2B:4C:8C:D6:99:19:31:4C
            X509v3 Authority Key Identifier:
                keyid:72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/Uyak9FY9ba4bxHqEK0yM1pkZMUw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.28.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:b4:79:89:a5:85:ae:3e:12:aa:ea:8d:d4:9f:d6:ea:88:23:
         f2:ca:8b:16:74:a4:39:79:3c:8b:39:6a:79:71:4a:0c:56:3b:
         c2:d7:7a:60:21:bf:27:be:f5:37:93:1b:11:2e:6a:ee:95:3a:
         9d:81:36:07:d3:ae:f2:78:69:25:65:1d:c5:14:63:2b:6c:81:
         7f:bf:ca:47:2f:ff:ee:6c:a8:e6:11:bd:09:a8:f5:e3:98:7c:
         6d:72:73:3b:72:dc:42:5f:ce:23:21:15:bc:d1:d6:c9:cc:4b:
         2e:8c:b8:81:05:ef:d3:87:5c:1a:43:e6:64:8b:5c:43:1f:97:
         5d:f6:2b:fa:a2:bd:c8:5e:4f:8f:93:dc:e5:93:65:6f:71:41:
         69:9c:c7:19:17:07:46:5a:70:c5:66:e1:66:b8:45:ae:84:a3:
         b7:f6:24:0c:c1:b8:2d:4d:2b:84:db:35:d3:2d:84:54:33:04:
         4c:93:33:44:0a:25:41:b5:96:fb:e1:05:51:9d:07:29:d2:a1:
         47:d9:a8:5d:2f:06:21:98:d4:f0:22:a4:63:4c:10:5f:8a:55:
         fc:9c:85:9d:ee:eb:bf:a6:47:bd:b9:79:02:da:7b:eb:9f:ee:
         de:ce:a9:4c:b1:88:e0:6d:4d:a2:45:f4:4e:f5:2c:88:4c:b6:
         48:24:f0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:14 2026 by rpki-client