This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/UEFaeg6w-_BLecRaFg0sOx9sg6M.roa
File:                     UEFaeg6w-_BLecRaFg0sOx9sg6M.roa (raw, json)
Hash identifier:          9IROvPnjTuXAULj8Qy8+zmh7VrKhPM1ptKS41BLzE2g=
Subject key identifier:   50:41:5A:7A:0E:B0:FB:F0:4B:79:C4:5A:16:0D:2C:3B:1F:6C:83:A3
Certificate issuer:       /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Certificate serial:       019B7E381F1C991DF362909C1CA57E992F3B
Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/UEFaeg6w-_BLecRaFg0sOx9sg6M.roa
Signing time:             Fri 02 Jan 2026 10:19:25 +0000
ROA not before:           Fri 02 Jan 2026 10:19:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        2a05:aec3:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:1f:1c:99:1d:f3:62:90:9c:1c:a5:7e:99:2f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
        Validity
            Not Before: Jan  2 10:19:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=50415a7a0eb0fbf04b79c45a160d2c3b1f6c83a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:4f:69:bf:d5:42:d1:03:21:f1:8b:47:00:
                    b4:b8:b6:a6:3f:a6:95:d6:9d:4a:07:6b:ae:34:24:
                    3f:f2:39:32:fb:c6:ee:a8:ca:3d:3a:a9:04:2c:cd:
                    65:dd:54:0a:39:82:ce:f0:16:f1:b9:b7:d5:b0:24:
                    49:10:40:f0:5d:0a:69:57:06:06:b4:dd:64:bc:8f:
                    de:00:4d:5d:23:0c:e6:eb:c1:bc:50:79:a8:df:c7:
                    7a:67:6b:de:43:81:c1:e8:29:3c:b5:b6:bf:8d:3a:
                    a7:23:4b:e7:1b:78:60:ac:d8:0a:a6:32:d0:a7:3a:
                    9a:eb:6a:fb:7d:23:69:d4:84:6d:8c:b0:92:3a:bb:
                    b6:51:68:a4:30:ec:02:e5:4b:d5:d8:dd:53:40:d7:
                    c5:68:10:70:02:f4:85:10:a9:e0:5a:0c:00:5e:1a:
                    78:ee:e2:02:89:26:97:0d:70:ab:78:bc:94:81:d7:
                    c1:42:09:9f:ff:2f:6c:5b:cb:4c:e7:ae:2a:a3:59:
                    8b:c7:1c:91:30:d0:40:9a:03:2f:6a:14:18:9d:0d:
                    f1:b7:11:32:1e:b6:9a:fd:27:12:7f:ef:c2:59:ed:
                    01:d2:67:77:fc:4e:2a:6e:5a:fa:d5:7f:bd:de:a4:
                    32:8e:bb:7a:ec:93:b8:4c:d0:0f:ee:15:79:4f:b5:
                    23:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:41:5A:7A:0E:B0:FB:F0:4B:79:C4:5A:16:0D:2C:3B:1F:6C:83:A3
            X509v3 Authority Key Identifier:
                keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/UEFaeg6w-_BLecRaFg0sOx9sg6M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:aec3:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:e0:3e:86:9e:72:c5:38:5e:0d:fe:52:ba:0b:1a:2e:7c:b9:
         8a:e5:8e:87:78:7c:c6:3c:80:c0:10:59:d4:57:f7:9e:cd:1f:
         17:54:d0:ce:c6:af:23:89:73:3b:4b:61:ab:f1:13:fc:ea:ed:
         8e:51:43:66:be:4c:cc:86:c2:0d:79:b0:9f:5b:e1:b4:8b:09:
         32:79:43:a6:0d:c3:1b:d0:96:d7:8d:e6:2e:06:f4:67:b0:9e:
         ff:78:2a:fd:35:e7:b4:49:62:27:7e:26:e1:bd:32:a9:b9:40:
         7a:6c:79:10:78:64:6a:bd:89:6d:a2:62:6a:5a:8d:74:8b:45:
         0b:b7:8f:60:72:6f:eb:34:74:c0:2e:77:ef:e1:dc:ee:e2:2f:
         3e:ab:01:67:39:2d:28:9c:a9:d3:dc:2f:11:19:7a:42:7a:76:
         72:a4:20:c3:58:f3:26:e7:de:7e:3b:f3:4e:79:c8:e3:c2:90:
         1c:a6:13:ee:c1:6d:1a:b2:8e:f2:d8:2f:06:01:da:73:17:65:
         e0:f7:53:72:45:14:ee:e9:e8:92:a8:e0:d3:74:48:c0:d4:2e:
         06:d9:d1:4f:06:50:9a:56:5f:ee:96:aa:e1:ce:0b:4d:ae:b4:
         1a:78:9f:60:43:8a:b3:8f:23:4d:92:f1:93:86:18:a8:59:67:
         47:a8:fb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 17:05:27 2026 by rpki-client