This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/uLLFp64r_qzwrNEtRWF1A8b4cJ4.roa
File:                     uLLFp64r_qzwrNEtRWF1A8b4cJ4.roa (raw, json)
Hash identifier:          idAi5lENeYOmxdgwqoVm14upbbAaO6tEHHR7ePoDLJo=
Subject key identifier:   B8:B2:C5:A7:AE:2B:FE:AC:F0:AC:D1:2D:45:61:75:03:C6:F8:70:9E
Certificate issuer:       /CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Certificate serial:       019B77C66BD1CE7604253F1BE0EBFFC2BBED
Authority key identifier: 9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/uLLFp64r_qzwrNEtRWF1A8b4cJ4.roa
Signing time:             Thu 01 Jan 2026 04:17:30 +0000
ROA not before:           Thu 01 Jan 2026 04:17:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44264
IP address blocks:        91.199.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:6b:d1:ce:76:04:25:3f:1b:e0:eb:ff:c2:bb:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
        Validity
            Not Before: Jan  1 04:17:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b8b2c5a7ae2bfeacf0acd12d45617503c6f8709e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:78:3a:e4:8a:a2:ca:99:6c:61:e3:2a:8a:ae:
                    93:c8:cf:16:0b:6f:50:f1:d0:1f:2d:fd:da:0a:5d:
                    c6:0d:62:0e:4b:5d:07:d3:32:4e:2f:26:06:25:35:
                    53:e1:7e:4c:8b:ec:7e:49:ac:c8:a4:9c:e4:4b:8b:
                    90:04:eb:06:1f:70:5d:a8:9f:3e:89:c5:87:86:b0:
                    a0:77:46:fb:69:01:82:da:cc:e4:66:99:9f:ca:74:
                    30:c7:80:b3:5e:64:e2:c6:03:a5:03:a0:f0:e6:da:
                    56:45:21:6f:2c:46:cd:d7:8e:2f:b4:4b:88:57:37:
                    20:f5:22:09:93:06:d6:5a:d1:26:13:7b:96:3a:16:
                    08:92:3b:fb:2c:10:e4:09:45:ff:fb:09:86:b3:0e:
                    28:3c:25:ac:44:ac:70:3c:8f:f0:33:82:15:6f:a4:
                    7d:84:c9:1b:c8:e1:ee:e0:42:51:ea:82:8b:3b:c2:
                    4c:41:3a:4c:e6:3b:57:32:ce:36:db:c8:d4:5f:f6:
                    cb:65:4b:1f:9d:cb:a4:45:da:17:3f:59:e1:98:33:
                    36:51:a6:38:3d:b4:8c:61:e6:f1:6b:31:24:a3:52:
                    6b:bf:56:c2:6f:61:0b:a7:6f:b2:ba:3d:ee:e4:a2:
                    be:c1:df:bc:47:2a:ac:f9:c9:88:91:ff:2b:50:06:
                    bb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B2:C5:A7:AE:2B:FE:AC:F0:AC:D1:2D:45:61:75:03:C6:F8:70:9E
            X509v3 Authority Key Identifier:
                keyid:9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/uLLFp64r_qzwrNEtRWF1A8b4cJ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:6f:0f:83:13:17:33:43:2e:a2:8d:b3:cc:c0:a9:ab:14:94:
         f6:ce:81:86:1c:87:39:51:af:cb:92:24:87:67:24:07:e8:d4:
         2e:d7:c2:23:02:52:59:e4:50:98:6f:48:f1:4b:68:d0:e0:bc:
         0a:89:af:b5:70:a1:c3:94:cf:ed:21:11:44:d2:cb:1f:3a:3d:
         99:d6:45:a9:28:32:62:84:b5:1d:4a:ca:eb:82:c7:fc:52:00:
         97:27:e8:fe:19:3d:40:37:8b:fd:02:37:ec:ce:ad:e3:80:1f:
         d1:fc:b6:06:8a:eb:ca:c3:bf:24:06:77:f2:d1:c3:28:f4:1f:
         a0:52:b2:a8:73:09:ec:93:e5:58:0d:b9:0e:d5:cc:39:31:fa:
         28:10:db:8a:cf:d0:e7:31:ca:a4:46:c3:43:73:a8:22:c5:a0:
         a0:d9:8b:13:1f:fe:9b:6e:a6:16:76:4e:f0:b2:ad:8e:d1:13:
         b9:1a:ad:d2:e8:58:c3:23:31:18:75:32:a4:c4:2a:69:4c:d3:
         45:5d:2f:59:8b:d2:53:b7:06:c3:4f:2c:bd:0f:18:69:06:20:
         c2:58:2b:df:4d:00:f0:7a:fd:97:9d:23:19:d7:6a:34:17:ab:
         94:ef:bf:db:c5:a0:0b:2e:c9:d0:e3:57:ba:49:f2:34:cb:f9:
         59:2a:5f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:48:06 2026 by rpki-client