This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/uoe5Gtg5RLHmca7orVX_kgMJ6LA.roa
File:                     uoe5Gtg5RLHmca7orVX_kgMJ6LA.roa (raw, json)
Hash identifier:          fAkGAUFUUGm9PtxJMnL3fGCs6QplpIcm9Vtk+9FgVDg=
Subject key identifier:   BA:87:B9:1A:D8:39:44:B1:E6:71:AE:E8:AD:55:FF:92:03:09:E8:B0
Certificate issuer:       /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Certificate serial:       019B797E544D76355A71E084F699AE5B9304
Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/uoe5Gtg5RLHmca7orVX_kgMJ6LA.roa
Signing time:             Thu 01 Jan 2026 12:18:00 +0000
ROA not before:           Thu 01 Jan 2026 12:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205718
IP address blocks:        185.226.168.0/22 maxlen: 22
                          2a09:fbc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:54:4d:76:35:5a:71:e0:84:f6:99:ae:5b:93:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
        Validity
            Not Before: Jan  1 12:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ba87b91ad83944b1e671aee8ad55ff920309e8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:c0:19:1a:03:93:66:7b:0d:1d:d4:2b:95:
                    e5:cd:c0:c6:fb:06:78:21:4b:40:22:99:ec:49:da:
                    be:68:f2:8d:41:06:34:73:29:ab:1f:a2:ac:c9:f0:
                    24:59:31:b4:8f:4e:31:3d:86:ef:a2:72:68:64:e9:
                    0c:29:65:47:a1:3a:90:95:d0:ba:dd:b5:3b:35:21:
                    ef:72:59:c7:67:8d:af:b6:f3:da:a3:ce:13:e2:14:
                    41:12:a0:08:ee:2d:01:26:c4:89:9b:82:87:9b:1e:
                    10:8e:4f:da:1f:29:9a:c1:2e:fe:a6:0e:b6:0e:8d:
                    23:9e:c0:c3:8e:9b:45:a8:da:b5:8a:22:47:50:a4:
                    0e:d5:36:5f:78:15:2d:dd:c4:bf:af:2b:b5:a3:bc:
                    b9:e3:b5:f1:52:88:65:cf:65:96:8e:e6:35:60:d6:
                    e9:3b:18:21:eb:44:d5:45:e8:76:1a:47:ad:1f:87:
                    7a:d7:f6:55:6f:f5:5a:a5:8c:4f:18:f1:20:35:da:
                    6c:76:3a:93:8f:03:bb:c6:3c:89:69:f5:9c:e7:74:
                    71:75:d0:28:ac:03:c5:77:0a:27:dc:24:d2:5e:f8:
                    81:5a:bb:34:e0:f4:d6:7e:5f:86:e4:6a:9b:78:71:
                    1b:ff:a6:14:b3:e5:7c:ac:c3:3b:60:e4:1c:6b:72:
                    f5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:87:B9:1A:D8:39:44:B1:E6:71:AE:E8:AD:55:FF:92:03:09:E8:B0
            X509v3 Authority Key Identifier:
                keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/uoe5Gtg5RLHmca7orVX_kgMJ6LA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.168.0/22
                IPv6:
                  2a09:fbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:8b:c8:e8:3c:11:39:8d:1b:6e:b6:e8:27:51:b1:6d:7f:41:
         26:af:d7:a5:c6:2f:5f:fa:7a:b9:e4:0a:a9:13:b3:ce:73:1d:
         3d:a2:5c:6c:5b:a1:9f:2e:c4:7c:da:02:58:aa:c3:3e:67:b3:
         ec:29:66:40:0e:dc:4b:29:ad:f2:55:aa:31:68:d1:04:69:90:
         d6:31:5b:24:6e:e8:c0:9c:13:45:d6:83:61:0f:85:ca:49:db:
         a0:57:18:20:91:4a:90:47:78:e7:85:32:c4:eb:53:3f:ba:30:
         d6:ab:f4:63:51:7d:c8:db:f7:e8:83:8c:8d:f6:0b:c6:0c:8c:
         1c:ce:d1:f0:8e:98:a6:69:8f:0d:20:91:3e:2e:bd:05:be:07:
         1e:e7:5b:f3:f7:03:07:7c:6d:0f:97:17:55:d4:1b:20:ff:a5:
         43:7f:ed:83:32:26:a7:66:b4:1b:97:0b:6b:83:14:6a:ea:b6:
         c9:9b:72:50:51:94:fa:7b:d6:f2:19:15:f0:6b:fb:f7:44:8c:
         1a:e2:85:df:ee:60:73:fc:42:94:af:d8:7f:84:17:0d:17:d8:
         33:af:0d:a6:e2:d0:e5:b6:ec:7d:68:61:a8:9e:0a:ec:94:1a:
         0d:e4:fa:09:85:f2:8d:7a:f0:3c:b1:b5:10:fc:42:d7:97:6f:
         83:be:d3:2c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt5flRNdjVaceCE9pmuW5MEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NzI5ZjlkMDc4NmY2OGExZWNkNWM1YTkyYmMzOTJkODY5
MTk3NWUwHhcNMjYwMTAxMTIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTg3YjkxYWQ4Mzk0NGIxZTY3MWFlZThhZDU1ZmY5MjAzMDllOGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyrAGRoDk2Z7DR3UK5XlzcDG+wZ4
IUtAIpnsSdq+aPKNQQY0cymrH6KsyfAkWTG0j04xPYbvonJoZOkMKWVHoTqQldC6
3bU7NSHvclnHZ42vtvPao84T4hRBEqAI7i0BJsSJm4KHmx4Qjk/aHymawS7+pg62
Do0jnsDDjptFqNq1iiJHUKQO1TZfeBUt3cS/ryu1o7y547XxUohlz2WWjuY1YNbp
Oxgh60TVReh2GketH4d61/ZVb/VapYxPGPEgNdpsdjqTjwO7xjyJafWc53RxddAo
rAPFdwon3CTSXviBWrs04PTWfl+G5GqbeHEb/6YUs+V8rMM7YOQca3L17QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLqHuRrYOUSx5nGu6K1V/5IDCeiwMB8GA1UdIwQY
MBaAFGZyn50HhvaKHs1cWpK8OS2GkZdeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQt
YWQ1MTBlMDVkYTkyLzEvdW9lNUd0ZzVSTEhtY2E3b3JWWF9rZ01KNkxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQtYWQ1MTBlMDVkYTky
LzEvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCueKoMA0E
AgACMAcDBQAqCfvAMA0GCSqGSIb3DQEBCwUAA4IBAQCFi8joPBE5jRtutugnUbFt
f0Emr9elxi9f+nq55AqpE7POcx09olxsW6GfLsR82gJYqsM+Z7PsKWZADtxLKa3y
VaoxaNEEaZDWMVskbujAnBNF1oNhD4XKSdugVxggkUqQR3jnhTLE61M/ujDWq/Rj
UX3I2/fog4yN9gvGDIwcztHwjpimaY8NIJE+Lr0Fvgce51vz9wMHfG0PlxdV1Bsg
/6VDf+2DMianZrQblwtrgxRq6rbJm3JQUZT6e9byGRXwa/v3RIwa4oXf7mBz/EKU
r9h/hBcNF9gzrw2m4tDltux9aGGongrslBoN5PoJhfKNevA8sbUQ/ELXl2+DvtMs
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:11:12 2026 by rpki-client