This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/l_UYfd627TWdVQUBGDcYXolbG3M.roa
File:                     l_UYfd627TWdVQUBGDcYXolbG3M.roa (raw, json)
Hash identifier:          jE9YZp4SwDWD4mybbL99DqobqhNeL3J/FFGbfANXQkY=
Subject key identifier:   97:F5:18:7D:DE:B6:ED:35:9D:55:05:01:18:37:18:5E:89:5B:1B:73
Certificate issuer:       /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial:       019B7C1286C04D2D675788A3ECF46099F207
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/l_UYfd627TWdVQUBGDcYXolbG3M.roa
Signing time:             Fri 02 Jan 2026 00:19:07 +0000
ROA not before:           Fri 02 Jan 2026 00:19:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206364
IP address blocks:        185.163.13.0/24 maxlen: 24
                          2a00:1197::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:86:c0:4d:2d:67:57:88:a3:ec:f4:60:99:f2:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
        Validity
            Not Before: Jan  2 00:19:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=97f5187ddeb6ed359d5505011837185e895b1b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:10:25:56:5e:79:07:d9:3a:ec:34:40:f5:
                    cc:02:fe:a1:85:20:29:58:96:f6:4c:c9:6c:5f:25:
                    1b:6b:54:68:bd:44:2c:6b:e7:e6:38:65:ab:cc:aa:
                    d2:80:e7:09:d4:64:39:60:7c:63:b6:79:73:e2:a2:
                    9b:a6:4f:a4:59:9b:15:f1:c6:85:84:7c:2d:11:af:
                    bd:d6:31:8f:8a:da:2f:d0:e5:20:25:7a:1b:40:a1:
                    7c:86:47:cc:b4:09:a6:50:c6:64:f6:a7:f9:31:b2:
                    9f:6c:bc:90:99:08:cc:59:10:9f:37:95:d6:14:1f:
                    f6:be:73:ea:5e:81:44:0a:b2:04:4b:3e:5d:62:bf:
                    50:e2:e9:7f:93:45:1b:97:14:a7:bc:9e:03:c3:74:
                    e3:c5:0d:35:eb:70:d3:fa:e8:02:84:c2:6f:69:06:
                    a0:d6:8e:05:bc:c7:5c:b5:88:03:0f:4b:be:e2:47:
                    ed:92:b1:c9:34:2d:31:8f:97:b4:96:d8:bf:23:98:
                    75:31:25:df:82:03:bf:5f:b9:8b:5e:a6:ae:58:6c:
                    92:30:52:00:83:bb:37:47:d2:dd:14:57:fb:c4:f4:
                    3c:c4:e0:88:76:99:1d:29:54:b7:3e:15:bb:6e:83:
                    4d:f1:5a:c5:2c:68:d7:c1:85:2d:21:54:ff:e0:ae:
                    d5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F5:18:7D:DE:B6:ED:35:9D:55:05:01:18:37:18:5E:89:5B:1B:73
            X509v3 Authority Key Identifier:
                keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/l_UYfd627TWdVQUBGDcYXolbG3M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.163.13.0/24
                IPv6:
                  2a00:1197::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:1c:51:06:19:5e:ff:93:7e:e9:e6:6a:89:58:b8:a7:19:73:
         6d:13:cd:75:e9:24:68:4e:24:a1:02:8a:25:96:e8:37:07:f7:
         80:b9:93:8a:2b:46:c0:7f:2a:81:79:37:52:89:5a:14:a7:61:
         c6:07:5d:b7:c1:e0:80:de:7f:f8:f2:63:82:8d:b6:3d:a2:89:
         84:89:de:9d:dc:0b:c6:4a:ff:49:49:eb:e3:b3:1f:5a:19:eb:
         3b:f6:2e:c1:e4:62:ab:ea:c0:3a:cd:6f:4d:3d:22:5b:f8:16:
         d0:e1:34:cc:bd:bc:89:da:c4:1a:23:64:7e:15:90:af:d2:28:
         ec:8a:36:65:fc:98:d7:be:3b:42:63:11:3b:49:ba:4d:68:05:
         1c:af:28:d9:7b:15:88:fb:eb:b2:86:fa:6d:de:43:f0:45:3e:
         b7:ed:86:df:89:33:43:97:15:32:93:f9:f2:d3:f7:25:42:24:
         71:b7:05:ed:23:fb:1f:5c:3d:43:2f:49:6b:50:1c:c6:f8:d5:
         07:33:b2:28:89:e0:3d:43:86:cb:f6:0e:a6:48:ad:9e:2e:df:
         93:f4:ff:43:d6:a4:d9:57:fb:e8:db:72:09:60:55:34:e4:9e:
         ab:d5:d4:85:9a:f5:73:e4:a4:de:2e:57:43:cd:07:a8:67:84:
         3e:d5:b5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:26 2026 by rpki-client