This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/UyXm5ATWPwo3EOUnhBfGXzkllu4.roa
File:                     UyXm5ATWPwo3EOUnhBfGXzkllu4.roa (raw, json)
Hash identifier:          zdPdUZoq7nIIRZBqM6+EqVB0rkz+qapJkbp3+Jl8kA0=
Subject key identifier:   53:25:E6:E4:04:D6:3F:0A:37:10:E5:27:84:17:C6:5F:39:25:96:EE
Certificate issuer:       /CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
Certificate serial:       019BFA505D80E5634979E67BC80F9FBCB75A
Authority key identifier: 12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/UyXm5ATWPwo3EOUnhBfGXzkllu4.roa
Signing time:             Mon 26 Jan 2026 12:38:49 +0000
ROA not before:           Mon 26 Jan 2026 12:38:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15830
IP address blocks:        193.28.80.0/24 maxlen: 24
                          193.28.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:50:5d:80:e5:63:49:79:e6:7b:c8:0f:9f:bc:b7:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
        Validity
            Not Before: Jan 26 12:38:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5325e6e404d63f0a3710e5278417c65f392596ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f6:e6:9c:f6:7e:31:43:0f:01:ca:a6:02:bc:
                    38:05:a2:38:75:09:ea:9d:aa:72:bb:5b:cb:85:fe:
                    38:14:b9:98:1c:ae:54:4b:d0:52:83:fb:d8:9d:da:
                    12:91:ab:4b:3a:ea:3f:97:d1:ef:7f:ff:ff:f9:28:
                    ef:3e:95:ee:44:53:da:3f:cd:4c:0b:73:b5:dc:ad:
                    9d:0c:57:54:b3:30:bd:d2:cd:77:aa:c2:35:e7:df:
                    cd:75:16:4c:be:5d:32:16:67:48:94:01:54:ba:6c:
                    e6:a9:04:25:ca:e8:fb:80:bf:57:24:f0:7d:73:75:
                    9c:e9:6c:b3:45:47:76:62:74:98:02:ab:7b:a8:da:
                    29:83:aa:8d:8e:7a:08:44:2e:75:38:26:1e:b6:bf:
                    12:d0:55:06:dd:b0:61:d3:43:27:ff:33:ee:61:e2:
                    b3:b3:8a:30:08:7e:22:4f:87:4b:79:da:e9:e4:0d:
                    fb:13:0d:76:30:dc:7b:a2:d6:02:89:12:5b:bc:7b:
                    5a:a7:cf:9f:0a:b2:b0:a5:34:1e:e5:f7:1b:ed:df:
                    93:88:11:74:a1:c9:69:5e:44:76:34:e5:b3:e7:4a:
                    be:2f:e4:cc:76:73:e3:ec:1e:2b:c1:ce:b1:be:03:
                    58:f6:96:03:aa:35:8c:56:94:e2:ed:39:c3:7f:6e:
                    b1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:25:E6:E4:04:D6:3F:0A:37:10:E5:27:84:17:C6:5F:39:25:96:EE
            X509v3 Authority Key Identifier:
                keyid:12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/UyXm5ATWPwo3EOUnhBfGXzkllu4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.28.80.0/24
                  193.28.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:9b:88:39:67:0b:28:b8:36:12:04:ed:4a:d8:bb:60:2b:a6:
         d6:c5:2d:4b:26:aa:8a:5a:0c:10:e8:32:89:1e:15:6b:71:33:
         76:90:4b:07:83:0f:ba:a0:40:cd:a8:33:af:fe:f6:da:31:45:
         01:95:88:7a:e8:4b:60:34:99:48:c5:8e:bc:a0:5f:e0:fe:11:
         21:7a:5c:1c:d6:ec:55:59:64:b6:48:02:b3:13:3a:c7:8d:58:
         c7:fd:e8:2c:50:cc:f4:06:91:d1:1a:9b:e5:16:e2:4a:66:7c:
         ce:b7:7d:53:f0:67:5c:18:62:14:dd:ab:9b:2b:b6:75:6d:3d:
         ee:e5:dc:01:1d:a5:97:e0:a7:d2:f9:16:38:0f:4a:9f:01:23:
         a5:3f:36:ea:d5:1e:2c:37:47:0b:61:62:fd:63:c1:1e:50:2b:
         3e:38:77:c4:d9:63:85:f4:3c:c9:5b:ae:cf:b6:42:7c:83:02:
         61:7d:4d:bf:7c:a6:c6:3c:a9:45:3f:8e:26:bc:03:b2:ee:ef:
         41:4e:a3:43:e8:92:c0:3c:9c:e6:28:d2:f7:b2:ed:d4:b7:87:
         e6:d7:bc:46:b6:73:1a:d8:cb:58:72:f4:45:a5:91:27:e0:3c:
         3d:ae:8a:3f:80:69:11:53:fc:9b:d9:a3:1d:a9:49:91:8b:b3:
         11:3c:14:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:04:02 2026 by rpki-client