This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/UYQCKBIJs_jm7bQEQlMrwuHX6Ds.roa
File:                     UYQCKBIJs_jm7bQEQlMrwuHX6Ds.roa (raw, json)
Hash identifier:          /Rb7W1hiZzDM8zy+jiVsugvOM6pnTRPvaLJxUTo+MJw=
Subject key identifier:   51:84:02:28:12:09:B3:F8:E6:ED:B4:04:42:53:2B:C2:E1:D7:E8:3B
Certificate issuer:       /CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Certificate serial:       019B77C7045914143DE4584A2C312009BDC4
Authority key identifier: 9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/UYQCKBIJs_jm7bQEQlMrwuHX6Ds.roa
Signing time:             Thu 01 Jan 2026 04:18:10 +0000
ROA not before:           Thu 01 Jan 2026 04:18:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198349
IP address blocks:        185.19.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:04:59:14:14:3d:e4:58:4a:2c:31:20:09:bd:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
        Validity
            Not Before: Jan  1 04:18:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=518402281209b3f8e6edb40442532bc2e1d7e83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:6b:05:b6:0a:a9:15:32:b5:ba:e5:4c:9e:
                    bb:ec:60:a4:f6:21:96:15:6e:0b:01:50:59:d4:5a:
                    08:71:fc:90:cd:1b:46:2b:94:ed:95:01:c0:b7:18:
                    23:d9:19:f0:c4:5b:8e:80:d3:50:8d:77:11:0d:d8:
                    39:78:03:f8:86:85:bb:76:a7:af:64:b9:ae:48:b3:
                    be:9f:d1:f6:f1:6c:58:03:50:23:96:7a:cb:af:94:
                    0e:03:e3:65:83:61:81:90:44:21:2f:5e:17:e8:2b:
                    9e:5e:76:ff:da:43:42:de:b0:1d:77:97:6b:93:1e:
                    be:91:ee:8d:75:1a:d6:fc:95:d2:f8:25:b0:35:04:
                    6e:2f:97:9a:cd:69:6f:8b:e1:dc:d3:1a:4c:b8:57:
                    97:4a:b7:c1:a1:7b:6d:6b:06:83:c2:d2:04:b2:e3:
                    d7:fa:1f:d7:32:f9:8a:0c:9f:f9:28:ff:7c:29:ff:
                    b7:3e:09:f9:42:2b:35:5e:6f:0a:f0:ce:f8:21:db:
                    9a:96:61:56:ce:f5:13:dc:25:46:56:f8:12:c8:17:
                    71:d7:a8:76:c7:90:45:3f:ad:c9:b8:a7:cd:59:a8:
                    fd:21:25:b7:ee:a8:97:e1:0c:f3:e3:c2:28:fe:38:
                    aa:12:c1:7a:5c:96:74:cb:1b:8e:d0:e8:ef:49:0c:
                    a3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:84:02:28:12:09:B3:F8:E6:ED:B4:04:42:53:2B:C2:E1:D7:E8:3B
            X509v3 Authority Key Identifier:
                keyid:9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/UYQCKBIJs_jm7bQEQlMrwuHX6Ds.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.19.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:6a:35:7a:c6:80:f2:f8:8d:a2:f2:54:23:f6:c3:e4:e6:47:
         6e:87:20:93:64:47:e4:99:d0:31:4d:39:75:18:ca:97:25:88:
         c1:d8:32:9f:02:fa:57:e2:a2:bc:73:7c:79:76:35:12:52:4a:
         4c:e4:96:f3:bd:ec:67:c5:59:21:44:5c:81:c9:d0:c3:b3:59:
         57:68:12:8e:76:8f:5b:86:92:17:a3:0c:d5:74:31:21:ab:a4:
         f0:6f:2b:66:53:f6:31:a8:94:3a:50:5c:9e:e9:30:5e:d7:5c:
         60:d4:2e:9d:5c:4d:a2:f2:97:fc:10:83:69:76:10:29:05:cd:
         5c:28:28:0d:4c:54:27:e2:db:2f:de:b5:94:3c:38:4c:4b:3e:
         8d:fb:00:b3:f4:7b:1e:37:98:c8:b3:ad:f2:cf:e9:85:ef:4d:
         f9:71:69:2b:bd:a6:5a:c0:85:cf:af:4f:fc:2a:3b:4c:c4:36:
         85:9c:46:a6:b9:93:6a:14:b6:d0:a3:c4:fa:53:9a:c4:30:cd:
         b6:85:7a:bb:4c:4d:09:83:7b:a5:9d:bd:f3:7e:c5:6e:7b:7e:
         3e:be:84:54:8f:e3:01:06:3c:f6:3e:6f:cc:27:31:f5:99:3f:
         23:d0:d5:0f:20:9b:66:aa:9b:32:aa:e2:03:1c:9b:2f:d5:90:
         08:73:9e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:24:15 2026 by rpki-client