This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Ue5WuZtAJPpmgiBQQ5bStlQv8rA.roa
File:                     Ue5WuZtAJPpmgiBQQ5bStlQv8rA.roa (raw, json)
Hash identifier:          DITxYliosWYPB9WcJRiMrZ8ji66Hk8BUPQKzuDc1A5g=
Subject key identifier:   51:EE:56:B9:9B:40:24:FA:66:82:20:50:43:96:D2:B6:54:2F:F2:B0
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       019B7C1349EA9AE1AA0E70DF1BC375C1BB72
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Ue5WuZtAJPpmgiBQQ5bStlQv8rA.roa
Signing time:             Fri 02 Jan 2026 00:19:57 +0000
ROA not before:           Fri 02 Jan 2026 00:19:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     273822
IP address blocks:        201.77.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 18:47:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:49:ea:9a:e1:aa:0e:70:df:1b:c3:75:c1:bb:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  2 00:19:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=51ee56b99b4024fa668220504396d2b6542ff2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c5:4b:b6:67:fb:27:c5:e7:5b:30:16:36:b9:
                    31:69:64:24:56:08:42:6e:f1:ce:7b:4e:af:94:3f:
                    19:8c:a0:19:b2:1e:60:9a:00:16:0d:ea:e9:7d:9d:
                    55:02:2b:e6:88:16:c0:4c:e7:d7:4d:a6:0d:70:c8:
                    a1:19:39:63:a2:f3:f1:23:1b:ed:86:1f:96:fa:bf:
                    b5:d1:35:8b:35:1d:18:27:34:dd:19:d0:56:f3:d8:
                    ef:1f:64:b0:2d:38:33:92:f0:91:cc:29:a8:b1:14:
                    ae:0b:43:62:99:ee:58:bf:c8:4e:65:69:8f:10:ce:
                    b2:aa:ac:71:53:f7:af:ac:04:35:63:e4:bf:07:06:
                    a3:4e:de:fd:7c:47:14:bc:aa:39:c7:01:68:1a:e2:
                    a2:be:24:84:07:b3:ce:9f:03:9c:79:4d:25:fd:f2:
                    98:34:67:12:ec:05:c4:05:0e:5b:1c:19:9c:79:1a:
                    98:a3:84:35:81:50:8b:7c:fc:ef:f1:38:06:4f:d0:
                    f6:d6:c5:4c:ea:60:08:ea:d7:f4:79:13:93:3b:ee:
                    e7:cc:fc:d1:f4:92:2e:20:1f:34:e3:8e:be:5a:34:
                    d7:4e:ea:66:a3:42:9e:c1:58:da:71:cb:aa:fc:ae:
                    c5:a8:63:2c:db:f1:3b:bd:d9:99:17:e6:18:20:7f:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EE:56:B9:9B:40:24:FA:66:82:20:50:43:96:D2:B6:54:2F:F2:B0
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Ue5WuZtAJPpmgiBQQ5bStlQv8rA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:3b:56:6f:f2:e9:2e:a9:b0:b0:87:ad:ef:99:06:b2:18:2d:
         11:42:5c:35:21:e0:3f:63:a0:90:5e:5f:59:fb:8d:d9:4c:25:
         63:00:e5:44:93:1e:ed:8a:3b:a5:cf:a5:b1:15:31:fe:db:50:
         a7:4b:d7:74:87:68:6c:6c:0d:01:bb:94:26:1d:4d:f7:a1:06:
         32:28:8e:24:c3:f9:ac:31:c1:38:0e:bc:d6:06:c9:b9:2f:c4:
         02:67:05:62:3e:ce:11:03:1c:f8:d8:78:4c:fa:39:b6:2a:87:
         96:99:21:be:5d:57:12:9f:6f:e5:b4:c9:e1:bf:22:64:7c:7b:
         95:d6:90:36:a0:bf:0f:29:15:3e:3d:3c:d4:78:72:d2:38:d7:
         f7:07:c9:aa:30:81:44:fb:40:d9:16:b9:fd:6e:c2:e1:c6:fd:
         4e:af:f7:e0:40:6f:fc:c8:87:bf:bb:52:ae:69:ff:ea:50:48:
         87:df:a8:34:61:6d:0d:61:62:5c:16:94:84:ba:ed:ab:93:6c:
         6b:80:e2:c7:9d:a7:99:ec:6d:a9:a2:98:2e:df:6c:23:9e:3f:
         25:39:36:db:eb:2b:2e:a9:ba:32:58:33:74:95:c4:97:42:76:
         b4:6a:8f:b6:3e:ad:c9:c4:d8:e9:6d:5d:16:75:35:b9:d8:8e:
         eb:9d:ba:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:37:10 2026 by rpki-client