This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/uXeyuyNFTLdI8bGRmbqj8zikNy8.roa
File:                     uXeyuyNFTLdI8bGRmbqj8zikNy8.roa (raw, json)
Hash identifier:          3g5uGaWB0/TdoVSPoOBbNodtyn53Sd/iS2fmmUAB/ic=
Subject key identifier:   B9:77:B2:BB:23:45:4C:B7:48:F1:B1:91:99:BA:A3:F3:38:A4:37:2F
Certificate issuer:       /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial:       019B7D5CE57F2F18F26A190537183475C306
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/uXeyuyNFTLdI8bGRmbqj8zikNy8.roa
Signing time:             Fri 02 Jan 2026 06:19:58 +0000
ROA not before:           Fri 02 Jan 2026 06:19:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41828
IP address blocks:        91.185.192.0/19 maxlen: 19
                          195.47.228.0/24 maxlen: 24
                          2a02:840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:e5:7f:2f:18:f2:6a:19:05:37:18:34:75:c3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
        Validity
            Not Before: Jan  2 06:19:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b977b2bb23454cb748f1b19199baa3f338a4372f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:27:cc:75:51:b4:06:a8:a6:71:6f:3f:07:60:
                    f9:21:3a:4e:af:4e:04:de:04:f1:a7:12:bc:9f:86:
                    69:77:cf:a1:a6:05:11:fa:c6:9d:95:71:bc:37:ef:
                    f7:2e:42:1a:c0:fc:e0:25:f3:6d:ce:25:1c:02:c5:
                    2d:be:97:03:38:b0:41:e7:8f:0c:e2:02:97:75:19:
                    08:27:e5:5a:8c:9a:07:68:d0:83:dc:ea:e2:82:e8:
                    6f:96:4c:c6:91:f7:ec:b0:d5:f1:97:84:ff:22:7e:
                    d7:ab:d2:e4:73:bd:2e:81:79:02:f0:36:96:a9:08:
                    73:f9:cf:b5:e9:d2:70:f1:43:c9:53:fd:d5:b1:5e:
                    c8:1e:2e:42:f5:62:01:2d:08:67:11:9b:b1:eb:f9:
                    0d:68:e2:3d:eb:af:aa:a3:4e:50:ef:8c:90:a6:10:
                    73:ff:7e:8e:96:52:1b:07:1f:c5:2a:d2:cc:f3:bb:
                    9d:5b:b4:1e:8a:9d:9d:a7:c7:3b:a4:55:7a:8f:02:
                    a9:9b:ac:c9:66:67:c2:14:56:49:46:c0:8d:54:0a:
                    a8:d1:98:83:fa:e6:da:3d:d6:e1:4a:70:15:7d:07:
                    cb:55:9f:d8:e8:3a:0e:80:35:14:55:46:fa:11:f9:
                    a8:1d:5c:4f:ba:45:97:a8:f8:e9:87:29:44:8f:73:
                    c3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:77:B2:BB:23:45:4C:B7:48:F1:B1:91:99:BA:A3:F3:38:A4:37:2F
            X509v3 Authority Key Identifier:
                keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/uXeyuyNFTLdI8bGRmbqj8zikNy8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.185.192.0/19
                  195.47.228.0/24
                IPv6:
                  2a02:840::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:bd:5d:39:52:5e:18:45:8a:b1:e3:4b:ab:25:25:e7:05:88:
         2f:04:fd:33:89:12:82:bf:1b:f8:df:82:3e:07:af:aa:68:01:
         2a:25:a7:fa:30:7d:41:7d:04:07:99:91:ba:8f:4d:78:2c:ee:
         93:62:cf:45:a7:85:45:da:cf:18:52:9b:79:55:0d:ca:f8:cf:
         88:e5:de:2e:a5:46:32:82:2b:e1:0c:d8:82:73:54:71:83:26:
         45:52:51:64:2a:51:ef:a1:e6:4d:6c:1f:2f:a4:1d:92:96:dc:
         25:9d:8a:9d:db:2f:1c:97:1d:fa:4e:10:ab:54:57:30:d9:86:
         05:27:ab:fa:9d:7f:7a:78:e7:39:5d:d8:7d:85:ef:7d:5f:d0:
         29:6f:25:dd:c6:b7:a6:07:84:d5:8b:2c:b1:a9:e9:c4:fb:eb:
         ec:3e:20:af:87:1f:aa:bd:0d:2d:da:57:ab:54:5b:04:d2:52:
         35:be:b8:3a:2f:06:6f:60:d4:40:f2:c9:3e:88:aa:ab:86:17:
         a1:66:56:25:d9:66:59:ba:da:99:c0:99:c0:f5:f3:0e:e3:1a:
         f6:5b:54:ff:01:8c:2c:7b:dc:fa:af:89:16:fc:33:12:02:94:
         c8:23:6b:22:b2:f2:59:5e:e4:c3:ff:c3:ec:22:14:32:ad:0b:
         b7:27:fe:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:42 2026 by rpki-client