This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/ueo3GEvAi3EUPHegDlQ1GPk4SCg.roa
File:                     ueo3GEvAi3EUPHegDlQ1GPk4SCg.roa (raw, json)
Hash identifier:          /54TVaQGpWQlA0th+KPLCMlkXLtNsFvetSrJmgBZFMY=
Subject key identifier:   B9:EA:37:18:4B:C0:8B:71:14:3C:77:A0:0E:54:35:18:F9:38:48:28
Certificate issuer:       /CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Certificate serial:       019B7910FE8FCB5215FF9DDDC04CB22EEE19
Authority key identifier: F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/ueo3GEvAi3EUPHegDlQ1GPk4SCg.roa
Signing time:             Thu 01 Jan 2026 10:18:35 +0000
ROA not before:           Thu 01 Jan 2026 10:18:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43872
IP address blocks:        91.201.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:fe:8f:cb:52:15:ff:9d:dd:c0:4c:b2:2e:ee:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
        Validity
            Not Before: Jan  1 10:18:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b9ea37184bc08b71143c77a00e543518f9384828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d3:3e:b6:1a:7f:7f:8f:79:8f:40:87:d2:73:
                    cb:87:96:b0:ea:c2:07:62:9a:a3:11:6c:ec:d6:da:
                    d5:cd:1f:f5:fc:55:f4:17:9f:8b:44:2b:d1:19:eb:
                    a0:79:17:e1:38:e8:ec:2d:62:b9:65:b9:ce:37:79:
                    29:62:22:1f:c3:c1:4d:5f:aa:af:33:ce:db:f5:a3:
                    d6:d7:5b:2b:86:57:be:2b:fd:f2:69:6f:39:f9:3c:
                    89:07:6f:86:0b:d9:8a:e8:ed:43:cc:94:b1:5f:ef:
                    bf:b1:2d:b0:c6:a6:ee:45:9f:93:4b:d1:39:88:15:
                    b6:61:aa:a5:ba:eb:0e:64:f7:8d:ed:1a:c9:e0:83:
                    1f:b0:d7:3c:34:c5:28:58:52:af:f5:49:21:14:b5:
                    d3:85:b1:3a:e6:28:82:97:d4:d1:d6:e3:e4:e8:fe:
                    6f:0d:00:34:8a:21:80:53:0f:33:28:6d:48:72:d3:
                    f1:bf:82:2d:a8:7c:62:50:d3:97:d3:5a:4a:82:22:
                    7f:b3:f1:0e:ed:16:51:4b:58:92:f0:a8:35:a6:9e:
                    30:ba:dc:16:66:c7:ab:65:be:bf:be:a9:1c:2a:1d:
                    bd:5b:07:85:af:53:f2:45:78:e9:2e:dc:fa:06:be:
                    4c:d7:46:7d:c0:0b:e4:e2:89:5b:cf:51:7b:73:a9:
                    86:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EA:37:18:4B:C0:8B:71:14:3C:77:A0:0E:54:35:18:F9:38:48:28
            X509v3 Authority Key Identifier:
                keyid:F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/ueo3GEvAi3EUPHegDlQ1GPk4SCg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.201.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:4b:12:87:bf:2b:91:e1:86:d6:4d:7f:13:0b:e4:58:28:35:
         57:3b:df:91:57:4d:71:d9:80:0e:3d:5f:06:33:ae:d9:d4:75:
         b1:83:e3:41:68:84:01:ab:bb:20:6c:ab:38:f3:0b:fe:69:81:
         b0:09:04:c5:cf:f1:d4:14:fa:8e:b2:fa:33:90:d8:ca:1a:37:
         a7:fb:fd:a5:43:a0:a9:b5:b9:21:76:a7:79:95:15:56:de:da:
         90:da:b3:69:e3:71:11:a1:84:19:c3:5e:c1:76:24:53:bf:a3:
         fd:df:8d:12:77:45:38:7b:13:49:71:9b:05:71:43:18:05:ee:
         bc:48:ec:56:b0:f6:c5:1e:bd:c1:a8:08:8f:06:f7:d4:10:5c:
         cf:78:b0:37:88:4f:e4:fd:f3:a2:f2:a3:3a:3a:e8:bc:69:64:
         68:ae:65:9b:3c:dd:1d:11:9a:9b:a1:82:34:07:8c:f5:f2:13:
         35:61:ee:28:80:e8:a5:50:e0:0b:63:92:fb:11:49:2a:df:72:
         b7:53:81:48:b4:cd:e1:ac:2c:a0:f2:18:12:6f:8b:02:fc:72:
         db:92:b7:de:49:41:bf:ce:59:46:88:33:da:5f:08:e8:8c:df:
         f6:f1:80:9d:30:5f:39:ac:a3:e0:ce:5a:62:dd:81:2b:3a:b3:
         56:d0:50:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:39:25 2026 by rpki-client