This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UBhI0DOauuklh7iX__eduieqkrg.roa
File:                     UBhI0DOauuklh7iX__eduieqkrg.roa (raw, json)
Hash identifier:          cgWyIldCsrR8LbhG/ggUaTX4ee1zU8wWAoXFaWJLp1A=
Subject key identifier:   50:18:48:D0:33:9A:BA:E9:25:87:B8:97:FF:F7:9D:BA:27:AA:92:B8
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019B7D5CB0D747EA6EE87243F2EB5DBA3302
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UBhI0DOauuklh7iX__eduieqkrg.roa
Signing time:             Fri 02 Jan 2026 06:19:45 +0000
ROA not before:           Fri 02 Jan 2026 06:19:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47263
IP address blocks:        2a06:de02:1a02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:b0:d7:47:ea:6e:e8:72:43:f2:eb:5d:ba:33:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 06:19:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=501848d0339abae92587b897fff79dba27aa92b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fa:29:c1:49:ca:b4:72:ef:b7:7a:98:f0:36:
                    6e:f0:de:a2:99:6d:bf:35:30:83:f6:aa:4c:7b:99:
                    ec:84:64:53:19:fb:4a:4f:cd:a0:95:75:f5:98:e3:
                    c2:b6:68:a8:51:1c:b2:73:d6:4a:25:07:54:24:c4:
                    cc:dd:46:33:76:92:09:09:b2:8e:74:88:15:42:1b:
                    8c:5c:d7:30:6b:4a:16:51:a9:d2:99:c9:6a:56:89:
                    2b:6e:7f:70:01:5e:7a:3e:47:bf:ba:44:71:b6:f3:
                    72:cc:bb:0e:1f:76:44:34:ae:20:36:da:8f:46:95:
                    a7:8a:b8:d9:63:4a:7a:7d:7d:25:dc:2b:d3:54:bc:
                    dc:0e:65:b5:94:f0:f0:aa:11:fd:61:8d:25:f6:e1:
                    e8:ec:d7:6b:03:fd:6f:86:79:75:e1:42:47:b2:89:
                    55:29:65:5c:c7:0a:ce:80:ea:0e:37:e9:ca:a7:2a:
                    16:10:0c:ab:20:b2:58:02:06:5b:f5:35:58:b3:0f:
                    3d:79:e1:28:3e:9c:06:d1:f3:f6:7e:af:1e:e0:f0:
                    63:99:5a:7f:4f:55:f2:df:3a:bf:f1:1d:81:ce:21:
                    18:1c:5b:7e:a8:2b:91:5f:6d:24:e6:e7:2e:7f:4d:
                    f9:e1:01:10:f0:60:54:52:19:90:de:d9:43:6d:92:
                    df:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:18:48:D0:33:9A:BA:E9:25:87:B8:97:FF:F7:9D:BA:27:AA:92:B8
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UBhI0DOauuklh7iX__eduieqkrg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:de02:1a02::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:23:c0:60:56:fe:a7:e9:c2:60:2d:56:04:0c:15:7d:cc:d3:
         20:3a:48:3a:4e:68:09:e9:ee:70:82:bd:39:98:b7:32:4a:0d:
         fe:bc:13:16:4f:b1:8d:6d:0c:ca:49:a0:20:c5:02:b0:ff:ba:
         5c:be:d1:93:93:3a:be:2e:75:12:cc:39:8c:7a:f0:7a:1a:6d:
         2b:10:03:df:8f:dc:de:b0:50:af:23:a3:48:d1:c6:1c:22:74:
         ec:33:a0:ca:ec:70:a0:8d:89:63:f8:6a:1a:c8:cc:96:f9:92:
         00:03:9c:d6:a8:41:ef:47:be:b4:2b:ec:6f:f9:44:39:98:66:
         7b:a4:90:19:da:e7:39:c4:2d:91:e4:94:20:59:a4:45:40:2b:
         16:70:f2:a1:08:71:cb:6c:55:35:c1:f0:11:85:ca:22:a4:34:
         fd:f3:e2:4c:ca:8d:13:9b:4e:c9:89:e6:b4:51:da:52:62:b6:
         3e:47:eb:1e:bd:f2:df:3a:db:2a:31:fe:25:ea:48:c8:d3:21:
         98:72:37:03:84:12:b0:d5:81:19:0e:a9:c5:2f:c5:75:6d:53:
         f8:d7:55:d6:3e:5d:84:25:37:97:7f:9c:a3:8c:c5:cd:fb:77:
         26:7f:8d:30:21:3c:77:61:03:4e:d1:c6:96:74:ae:43:d2:d6:
         b4:aa:eb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 13:13:47 2026 by rpki-client