This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/_uCvTvS4TLRKOY-Zp7Kzlz_6B-0.roa
File:                     _uCvTvS4TLRKOY-Zp7Kzlz_6B-0.roa (raw, json)
Hash identifier:          yW2eAbC65z+mIRn5yCj4vtbXusOyzMkXOf4o7Pox6bc=
Subject key identifier:   FE:E0:AF:4E:F4:B8:4C:B4:4A:39:8F:99:A7:B2:B3:97:3F:FA:07:ED
Certificate issuer:       /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial:       019B78A21700FDA25162AB1432F59F56F4BA
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/_uCvTvS4TLRKOY-Zp7Kzlz_6B-0.roa
Signing time:             Thu 01 Jan 2026 08:17:27 +0000
ROA not before:           Thu 01 Jan 2026 08:17:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200017
IP address blocks:        91.212.216.0/24 maxlen: 24
                          194.69.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:17:00:fd:a2:51:62:ab:14:32:f5:9f:56:f4:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
        Validity
            Not Before: Jan  1 08:17:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fee0af4ef4b84cb44a398f99a7b2b3973ffa07ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7a:37:b5:02:38:e5:c0:e4:2d:5e:31:2b:b6:
                    91:80:a1:ea:37:4b:75:10:7d:34:b6:73:30:6a:f7:
                    4f:d2:29:ba:0e:68:0a:7b:04:41:7c:94:b1:bb:b2:
                    8d:44:02:48:3d:0c:0e:24:1f:98:cf:30:5d:36:2b:
                    a2:3b:9b:37:2a:d3:8e:2e:65:cc:92:19:85:04:5d:
                    d6:e4:2f:7e:79:ce:b0:6c:a1:bf:79:4d:78:ca:32:
                    64:73:de:62:60:91:00:4f:59:9a:28:18:50:eb:08:
                    af:5f:db:ee:b9:f6:05:18:7e:2f:f5:c6:ed:ad:64:
                    d6:28:84:f1:9a:3e:ae:52:bf:97:0d:88:ba:ad:6e:
                    de:7f:32:b0:3e:31:dc:70:2e:19:42:ca:b2:62:3d:
                    2c:b8:b4:6b:43:7a:dc:7a:7e:fe:4c:c0:c1:08:3c:
                    d6:ae:d7:fc:18:b0:3a:b1:57:4c:2e:be:a4:12:50:
                    65:41:2b:42:ec:45:8f:08:17:ff:1f:73:ef:29:a1:
                    a9:cf:d4:f7:7d:dc:9d:f1:8a:92:49:a7:36:5b:9c:
                    a9:d0:50:3a:bf:c6:18:d1:bc:46:92:e5:7f:18:f7:
                    7a:da:09:37:32:bd:5a:b4:fa:c5:6e:07:46:55:ca:
                    ad:94:f5:be:c1:09:fb:ab:96:f6:94:43:ab:7a:f3:
                    bf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E0:AF:4E:F4:B8:4C:B4:4A:39:8F:99:A7:B2:B3:97:3F:FA:07:ED
            X509v3 Authority Key Identifier:
                keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/_uCvTvS4TLRKOY-Zp7Kzlz_6B-0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.216.0/24
                  194.69.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:c4:36:59:5d:28:51:8f:7c:23:22:2c:c0:be:db:5f:c9:f1:
         ab:09:c4:ee:18:7b:20:1f:c8:63:e5:3c:f1:2f:e3:43:15:7f:
         60:f1:09:d3:fc:99:7f:eb:73:91:01:35:05:44:49:d1:cf:11:
         38:1f:9a:5b:ae:37:cd:2f:44:55:98:ee:a7:71:30:70:98:f9:
         b0:60:09:f5:ed:1e:54:f5:ae:77:98:1e:c0:c3:94:bd:c3:2a:
         cf:09:87:98:21:43:e7:56:02:19:26:ec:01:e3:95:a1:45:4c:
         f2:8f:ac:ed:92:15:ec:df:1d:77:1e:85:af:25:3e:7b:6b:21:
         7a:f7:13:d8:97:37:87:cd:f8:7b:1b:f8:d3:12:91:40:aa:6d:
         fd:25:65:38:df:74:3d:0a:b4:84:fe:c8:14:04:9b:04:0d:e2:
         a7:b1:b7:bb:55:37:3d:a7:a4:82:64:89:1f:7c:26:3d:30:01:
         f5:99:2e:fe:9f:92:c0:c2:97:69:80:a7:b0:dd:59:db:ba:c1:
         bf:61:6c:48:aa:1f:0d:bb:d2:0e:cf:7c:92:58:ff:31:33:8d:
         07:2f:36:0a:46:f6:6a:86:1d:fc:c5:e5:e2:e6:7a:dc:38:dd:
         42:a0:00:a5:a7:2e:55:7d:4c:55:cb:5c:2f:00:5a:d5:8c:b2:
         a1:f3:6b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:22:04 2026 by rpki-client