This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/uWpjW8EwvAg8xDTN_thfrhA4LAw.roa
File:                     uWpjW8EwvAg8xDTN_thfrhA4LAw.roa (raw, json)
Hash identifier:          ymWyRdJuJht5zV2QVlIv93b0gP0KmipQqoXtKDEDweQ=
Subject key identifier:   B9:6A:63:5B:C1:30:BC:08:3C:C4:34:CD:FE:D8:5F:AE:10:38:2C:0C
Certificate issuer:       /CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Certificate serial:       019B797E303D9D8AC163CF5C220B7AF0A47F
Authority key identifier: 2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/uWpjW8EwvAg8xDTN_thfrhA4LAw.roa
Signing time:             Thu 01 Jan 2026 12:17:51 +0000
ROA not before:           Thu 01 Jan 2026 12:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199268
IP address blocks:        2001:67c:1328::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:30:3d:9d:8a:c1:63:cf:5c:22:0b:7a:f0:a4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
        Validity
            Not Before: Jan  1 12:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b96a635bc130bc083cc434cdfed85fae10382c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ef:e5:ec:da:0e:4c:4a:6a:6a:57:6c:1e:30:
                    0c:12:3f:70:10:b9:c0:37:78:d7:db:e3:8a:78:00:
                    2f:fb:09:cf:25:5c:a0:5f:fa:27:95:8d:59:11:aa:
                    de:91:6d:77:5f:c9:db:f2:a0:4f:c8:bd:e6:e6:27:
                    dc:1d:5e:6b:27:16:36:e2:02:21:95:2c:f8:ac:7d:
                    b6:96:8b:56:99:94:48:85:70:ac:5b:2e:55:cd:71:
                    1d:8b:cd:da:20:46:b8:04:d0:2b:05:6c:3c:d2:5b:
                    1e:ee:13:e7:66:c4:7a:23:54:5d:b5:03:fe:d9:9c:
                    de:c1:78:9a:58:00:ef:c0:d2:a8:e6:4f:85:76:4f:
                    aa:f5:ca:76:47:0f:99:43:af:52:ef:a5:01:ee:16:
                    b2:00:fb:82:05:bc:e5:60:33:ed:a4:92:2d:d9:df:
                    cd:e3:51:05:23:33:93:a2:96:9c:4e:56:27:ca:19:
                    a2:0c:15:bf:db:31:33:5a:4f:77:ae:bb:d8:d4:c7:
                    10:0a:4a:c0:60:5b:82:d4:d1:32:8e:a1:e1:4d:8b:
                    30:1f:9b:80:94:60:8e:57:34:9e:68:67:69:3f:04:
                    e7:6a:c5:3d:96:48:c3:e6:e8:ec:49:43:c2:b4:3e:
                    ab:54:59:9f:88:b0:da:7d:99:51:88:1f:59:84:77:
                    8f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6A:63:5B:C1:30:BC:08:3C:C4:34:CD:FE:D8:5F:AE:10:38:2C:0C
            X509v3 Authority Key Identifier:
                keyid:2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/uWpjW8EwvAg8xDTN_thfrhA4LAw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1328::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:99:0c:df:b8:aa:9f:6d:2a:30:2d:3a:a0:e1:b7:9c:65:3c:
         fd:6f:6a:ce:6b:16:eb:81:38:17:1f:a0:74:48:5c:d1:79:e0:
         20:17:e2:2a:8e:09:3f:d0:6b:72:23:df:bd:c1:97:19:2c:e8:
         55:ba:07:ec:3a:f2:8d:5b:2f:63:4b:d6:82:bc:ae:72:e4:88:
         cc:9d:21:05:3b:fe:7e:44:54:04:e0:81:4c:0e:c0:08:b5:eb:
         a9:14:95:04:2c:69:4d:a9:84:ce:5e:2d:e4:f1:42:fd:f3:54:
         67:ff:69:c0:37:1a:7c:59:ae:53:3a:58:29:b0:d5:65:ce:d3:
         09:13:75:87:14:96:39:28:f6:88:c3:0f:b8:d5:d0:2a:94:f4:
         0b:31:2a:bf:fa:cf:98:60:30:b2:96:80:dc:b0:b8:21:fd:c1:
         33:21:33:e5:bb:03:55:cb:4c:3a:17:bf:d5:f1:81:76:47:20:
         8d:61:46:31:a8:fc:53:d9:7f:a9:2d:0c:f6:42:4b:10:0b:de:
         be:51:77:af:16:51:de:19:39:ee:16:ac:77:6b:78:75:7d:b0:
         ea:02:6a:7f:42:b2:c0:f9:2f:47:de:1f:16:5f:7d:a1:f2:58:
         4f:07:b5:eb:32:39:78:44:ed:8c:a9:d4:43:5b:3e:25:d1:c6:
         5c:91:87:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:22 2026 by rpki-client