This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UQRnjInjbaxOYz2DqpC3CRQc-48.roa
File:                     UQRnjInjbaxOYz2DqpC3CRQc-48.roa (raw, json)
Hash identifier:          +V+FldawNqUgHwepkF0PD7QIhrt9eh0E4RUgtEZRsls=
Subject key identifier:   51:04:67:8C:89:E3:6D:AC:4E:63:3D:83:AA:90:B7:09:14:1C:FB:8F
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019B7D5CDC5AD7B1FF90A12365FC44EA50F1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UQRnjInjbaxOYz2DqpC3CRQc-48.roa
Signing time:             Fri 02 Jan 2026 06:19:56 +0000
ROA not before:           Fri 02 Jan 2026 06:19:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198879
IP address blocks:        2a06:de01:150::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:dc:5a:d7:b1:ff:90:a1:23:65:fc:44:ea:50:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 06:19:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5104678c89e36dac4e633d83aa90b709141cfb8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9b:a6:a3:12:63:8d:15:f9:40:21:96:31:f3:
                    50:0d:d9:77:16:c0:fa:a5:81:16:35:cc:80:cf:22:
                    2b:fc:1b:01:47:a4:b7:a4:e1:dc:91:6d:70:a9:ac:
                    50:32:de:f7:b4:70:d1:63:93:26:49:42:7a:7e:67:
                    ea:1f:f6:07:da:8f:78:65:f0:41:b8:28:93:20:d2:
                    32:5d:e6:a3:16:17:4d:11:3a:37:0f:47:da:a7:e8:
                    9c:64:cd:c4:2a:6b:df:5a:77:5a:86:84:33:53:99:
                    47:a7:70:a2:92:f9:81:6b:c2:94:e9:3c:28:c4:d5:
                    ca:21:dd:eb:96:25:b5:1d:91:55:98:16:fc:64:ae:
                    31:aa:a2:b9:59:ac:ee:da:cb:d1:3b:e7:ba:41:cf:
                    e7:23:dc:de:52:87:a5:93:65:a9:64:49:84:64:15:
                    db:b7:4b:09:0c:b2:d9:78:55:b9:94:1e:81:d0:4f:
                    cd:ae:cc:f8:5e:28:0a:b4:83:3e:31:79:c7:ec:45:
                    0b:9c:db:88:73:e0:a6:1f:fa:56:32:a1:4b:ee:c3:
                    6e:90:6a:4f:15:19:2f:4a:9e:b2:a2:21:53:33:15:
                    c8:19:66:55:08:1e:1e:f3:73:bc:32:7f:2d:bc:09:
                    67:34:80:ba:7f:c5:c0:f6:5e:1d:6a:05:f0:fb:7c:
                    7d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:04:67:8C:89:E3:6D:AC:4E:63:3D:83:AA:90:B7:09:14:1C:FB:8F
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UQRnjInjbaxOYz2DqpC3CRQc-48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:de01:150::/44

    Signature Algorithm: sha256WithRSAEncryption
         0d:47:c9:d3:b7:a0:6e:56:8d:b7:0a:91:fa:aa:72:0d:94:33:
         a4:d7:4e:28:22:fe:6c:e8:a0:b3:7a:b3:5a:06:9b:94:29:23:
         78:e5:a3:42:0c:89:a8:98:34:fb:25:a6:c1:03:2d:88:a5:d1:
         50:34:74:4b:d7:33:5e:03:53:bc:89:21:18:b9:a6:6a:3f:f2:
         fb:50:e7:9d:d7:e3:58:07:86:16:a7:5c:32:29:41:4a:0c:01:
         a6:2e:06:46:f7:5b:36:db:2a:20:91:d0:65:84:e8:55:67:d7:
         20:33:d2:6b:01:17:a3:30:02:bd:b7:f2:3c:85:1c:f4:c0:13:
         39:55:41:ff:31:25:f0:9c:c9:16:fe:67:65:eb:11:9e:00:c5:
         80:03:bb:6a:b1:09:0e:fc:dc:7c:da:ab:20:cb:25:b6:76:ca:
         8e:54:0b:d8:67:26:fc:06:56:16:31:e5:41:bb:3c:16:97:27:
         29:83:71:43:0e:53:99:e0:5f:c5:fd:c4:f9:e0:cd:a4:3a:8f:
         20:78:af:3a:72:84:8d:a1:d3:3c:cc:9e:7a:11:cb:96:76:5f:
         f2:58:ae:7d:c7:36:e3:7a:df:02:76:d8:b4:72:0c:e2:51:53:
         69:f9:49:ea:54:0c:02:f2:cc:10:03:8e:73:63:d4:27:4b:9c:
         15:3c:f3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 13:13:07 2026 by rpki-client