This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/uhEEKQpm0Q9TvpFR2U11BjNqxM8.roa
File:                     uhEEKQpm0Q9TvpFR2U11BjNqxM8.roa (raw, json)
Hash identifier:          Dq7YREG0s4cS8g2gjkqTRWbO1QsL7h+aN90fU6Kia14=
Subject key identifier:   BA:11:04:29:0A:66:D1:0F:53:BE:91:51:D9:4D:75:06:33:6A:C4:CF
Certificate issuer:       /CN=4d34750be2173cb9b086a77c6dea54b4a8469af3
Certificate serial:       019B7A5B99C76FA6CFF113AB65BB0C5239DF
Authority key identifier: 4D:34:75:0B:E2:17:3C:B9:B0:86:A7:7C:6D:EA:54:B4:A8:46:9A:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/uhEEKQpm0Q9TvpFR2U11BjNqxM8.roa
Signing time:             Thu 01 Jan 2026 16:19:41 +0000
ROA not before:           Thu 01 Jan 2026 16:19:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197999
IP address blocks:        195.66.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:99:c7:6f:a6:cf:f1:13:ab:65:bb:0c:52:39:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d34750be2173cb9b086a77c6dea54b4a8469af3
        Validity
            Not Before: Jan  1 16:19:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ba1104290a66d10f53be9151d94d7506336ac4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bb:10:6f:23:dd:5d:f1:fb:f3:b1:5b:8a:17:
                    25:28:e5:a6:1a:03:aa:84:90:fe:20:7c:8d:1e:65:
                    73:46:48:29:40:29:d9:b1:1f:1b:6b:17:93:26:c2:
                    6f:b0:df:b8:fe:9b:f1:bf:f6:e0:eb:6e:f3:73:da:
                    36:4f:cb:bc:bf:7c:a9:0c:8b:20:49:a9:a0:87:03:
                    02:ae:19:01:a8:97:98:5c:9d:06:90:6e:23:22:c6:
                    4c:d3:5f:9d:6e:9d:2e:b2:87:fe:67:74:6c:71:e0:
                    fd:23:10:1e:1b:b6:bf:7c:ee:28:dd:9c:8d:65:c6:
                    a3:c9:03:0a:d0:4c:5a:0e:05:11:1d:83:59:90:35:
                    2b:43:46:cc:a0:4d:07:79:88:8a:5a:11:da:9c:9f:
                    3a:ea:af:10:91:e3:4c:11:71:42:c8:31:d5:ba:4e:
                    a1:2a:d7:e8:35:ab:b1:50:29:5f:cd:88:9b:47:f0:
                    ae:2d:60:e3:75:ac:41:c2:93:61:d3:4e:f3:f7:3a:
                    ff:ff:49:bf:76:b3:95:38:40:50:ad:9f:62:fc:d0:
                    75:40:23:2f:92:39:3d:6b:1e:28:fd:53:2e:be:89:
                    7f:4e:6b:a8:9c:cf:17:c9:b1:de:a3:a5:36:fc:74:
                    7e:79:9f:e4:1f:e3:75:34:24:b6:21:71:95:ed:04:
                    09:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:11:04:29:0A:66:D1:0F:53:BE:91:51:D9:4D:75:06:33:6A:C4:CF
            X509v3 Authority Key Identifier:
                keyid:4D:34:75:0B:E2:17:3C:B9:B0:86:A7:7C:6D:EA:54:B4:A8:46:9A:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/uhEEKQpm0Q9TvpFR2U11BjNqxM8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.66.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:0f:6e:94:78:45:d5:69:5f:aa:91:f4:4c:d6:25:e0:67:52:
         6e:b8:67:56:e6:ed:27:63:ba:dc:3e:c2:66:e3:da:55:80:68:
         bf:3c:21:b6:d0:50:29:04:a2:df:4e:f2:6e:5c:c1:04:be:59:
         af:2a:7d:ba:e4:86:d4:ad:a1:3b:ca:df:b1:89:eb:e1:44:0a:
         68:95:51:9c:f0:f9:a1:11:7b:f6:60:98:f6:34:c2:e7:89:91:
         6c:1a:56:02:73:1e:27:8a:2b:18:be:43:c4:84:d5:82:d0:2c:
         d2:47:dc:fd:0d:c6:ba:28:f5:ca:24:1b:25:a3:25:53:c8:96:
         f6:5f:77:54:95:64:e3:71:81:3a:30:eb:7d:f7:f7:35:47:39:
         55:60:3e:25:e4:6f:8a:ce:48:29:81:93:a8:e3:c8:ed:24:23:
         80:fd:ac:89:2a:5a:1f:3d:5a:7d:30:ae:91:63:2b:5a:87:0c:
         39:89:83:20:b2:d2:85:d7:57:74:c1:99:6a:02:76:65:e2:b9:
         5a:f5:1d:c9:50:ed:d5:37:fd:67:51:1e:33:86:6a:df:ba:f3:
         4f:20:ce:77:56:17:4b:43:cd:cf:88:4b:c3:92:63:75:8f:4a:
         98:4a:a5:01:3a:57:d8:66:e7:35:f9:9c:53:ba:04:1d:b3:ed:
         c2:54:1f:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6W5nHb6bP8ROrZbsMUjnfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMzQ3NTBiZTIxNzNjYjliMDg2YTc3YzZkZWE1NGI0YTg0
NjlhZjMwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTExMDQyOTBhNjZkMTBmNTNiZTkxNTFkOTRkNzUwNjMzNmFjNGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7sQbyPdXfH787FbihclKOWmGgOq
hJD+IHyNHmVzRkgpQCnZsR8baxeTJsJvsN+4/pvxv/bg627zc9o2T8u8v3ypDIsg
SamghwMCrhkBqJeYXJ0GkG4jIsZM01+dbp0usof+Z3RsceD9IxAeG7a/fO4o3ZyN
ZcajyQMK0ExaDgURHYNZkDUrQ0bMoE0HeYiKWhHanJ866q8QkeNMEXFCyDHVuk6h
KtfoNauxUClfzYibR/CuLWDjdaxBwpNh007z9zr//0m/drOVOEBQrZ9i/NB1QCMv
kjk9ax4o/VMuvol/TmuonM8XybHeo6U2/HR+eZ/kH+N1NCS2IXGV7QQJVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLoRBCkKZtEPU76RUdlNdQYzasTPMB8GA1UdIwQY
MBaAFE00dQviFzy5sIanfG3qVLSoRprzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFRSMUMtSVhQTG13aHFkOGJlcFV0S2hHbXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83Njc3OGUtNWY1Ni00OGVlLWE5ZGUt
ZThiMDExZWE4ODk3LzEvdWhFRUtRcG0wUTlUdnBGUjJVMTFCak5xeE04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83Njc3OGUtNWY1Ni00OGVlLWE5ZGUtZThiMDExZWE4ODk3
LzEvVFRSMUMtSVhQTG13aHFkOGJlcFV0S2hHbXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0JbMA0G
CSqGSIb3DQEBCwUAA4IBAQBSD26UeEXVaV+qkfRM1iXgZ1JuuGdW5u0nY7rcPsJm
49pVgGi/PCG20FApBKLfTvJuXMEEvlmvKn265IbUraE7yt+xievhRApolVGc8Pmh
EXv2YJj2NMLniZFsGlYCcx4niisYvkPEhNWC0CzSR9z9Dca6KPXKJBsloyVTyJb2
X3dUlWTjcYE6MOt99/c1RzlVYD4l5G+KzkgpgZOo48jtJCOA/ayJKlofPVp9MK6R
Yytahww5iYMgstKF11d0wZlqAnZl4rla9R3JUO3VN/1nUR4zhmrfuvNPIM53VhdL
Q83PiEvDkmN1j0qYSqUBOlfYZuc1+ZxTugQds+3CVB+z
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:35 2026 by rpki-client