This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UYt1v9mGVli-bh9FTh5Y4EEmd6Q.roa
File:                     UYt1v9mGVli-bh9FTh5Y4EEmd6Q.roa (raw, json)
Hash identifier:          zQOHBEtKrCKARM1Ahybyibke60Mk1LcRkcwctx1VIn8=
Subject key identifier:   51:8B:75:BF:D9:86:56:58:BE:6E:1F:45:4E:1E:58:E0:41:26:77:A4
Certificate issuer:       /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial:       019B7D5B00F2F45797BC954EEC63B02FAB8E
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UYt1v9mGVli-bh9FTh5Y4EEmd6Q.roa
Signing time:             Fri 02 Jan 2026 06:17:54 +0000
ROA not before:           Fri 02 Jan 2026 06:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58061
IP address blocks:        93.119.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 12:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:00:f2:f4:57:97:bc:95:4e:ec:63:b0:2f:ab:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
        Validity
            Not Before: Jan  2 06:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=518b75bfd9865658be6e1f454e1e58e0412677a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8c:4b:00:3f:ea:e3:6e:39:ff:c9:89:c9:7d:
                    ef:68:57:92:02:35:6c:97:e3:99:5a:46:80:07:28:
                    a9:16:99:ce:89:a7:90:bd:2d:b2:9a:ce:d3:26:e1:
                    2e:3d:b8:a8:38:14:39:97:f2:9b:56:46:bf:a5:82:
                    0e:af:ac:9d:56:ee:9f:89:86:4e:da:80:26:d6:4d:
                    24:d0:62:4c:18:2d:e6:ef:80:dd:88:ec:33:0a:5c:
                    0a:9f:3e:92:8d:d7:f3:c9:a5:4e:86:21:aa:e9:76:
                    d0:0e:24:97:40:e5:52:b5:80:d7:86:66:d1:ce:c8:
                    02:7c:77:42:e7:77:0b:d0:7d:e0:f8:86:c2:89:ff:
                    34:b8:4e:a9:2c:54:4a:07:ea:c5:a7:d8:6d:18:72:
                    6a:a8:74:fe:ef:6c:26:1a:47:39:cf:96:14:57:43:
                    0d:b1:2b:da:51:2f:a0:c1:49:7d:a8:73:8e:3b:d1:
                    45:b7:92:75:e6:77:71:ab:f9:54:c7:e2:5e:c8:e4:
                    14:08:4e:04:08:a4:db:d4:42:32:88:63:75:cd:7f:
                    c3:ec:fd:1f:a2:ef:8f:8d:ef:2c:ce:5e:cf:58:89:
                    ff:8a:53:0c:72:92:be:f7:4d:e9:7d:86:d5:fb:4c:
                    a6:14:d2:63:30:29:b5:30:53:59:66:64:ff:15:7e:
                    ec:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8B:75:BF:D9:86:56:58:BE:6E:1F:45:4E:1E:58:E0:41:26:77:A4
            X509v3 Authority Key Identifier:
                keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UYt1v9mGVli-bh9FTh5Y4EEmd6Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.119.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:42:4d:d5:b2:eb:4d:4d:8e:eb:c9:c0:89:67:9e:db:ef:8f:
         e0:31:90:77:29:dd:af:1e:7e:98:21:38:b1:62:41:e2:df:f8:
         93:09:5d:08:21:5c:4e:2f:37:5a:ce:11:2c:54:85:2f:70:ec:
         72:2a:4c:4e:34:e9:2e:86:0f:04:99:d2:e1:a4:3a:3c:49:81:
         c5:cc:af:16:67:d9:0b:b1:24:aa:0a:51:a0:79:fe:f4:e1:a2:
         e2:5b:22:10:8c:12:dd:b3:64:e0:78:e9:5c:d2:64:48:f1:6b:
         0a:8a:ee:80:0b:e0:55:4d:f8:75:9b:b2:57:1e:89:03:f0:07:
         fb:b3:90:53:02:a9:22:a1:6c:4d:9f:89:00:5c:9e:85:c2:32:
         91:0d:9b:a9:75:d1:0e:c3:7f:14:94:09:b0:94:b9:16:c7:da:
         aa:f8:7e:69:d0:8a:b6:f5:13:d2:f8:e3:08:ec:cf:b2:9b:6c:
         e0:e7:af:fd:ca:99:66:10:af:8a:50:84:28:2c:4d:71:bb:f3:
         eb:5e:fa:7a:fa:01:c3:ab:71:cd:a5:8a:ba:48:e9:b2:51:ce:
         27:50:5b:b2:6f:40:22:83:d0:9f:c3:d6:9c:29:fe:d5:fd:09:
         c7:f6:96:b8:fb:d5:a1:c7:3b:63:2e:82:8f:ae:8f:49:7d:81:
         b1:d8:36:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:59:18 2026 by rpki-client