This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kUVIDeS9pubUdz-wOi9SBSTb93c.roa
File:                     kUVIDeS9pubUdz-wOi9SBSTb93c.roa (raw, json)
Hash identifier:          TTZ8TdLdVVKOxyTpzGrKDto5pVBQvML2whPuxsOm06c=
Subject key identifier:   91:45:48:0D:E4:BD:A6:E6:D4:77:3F:B0:3A:2F:52:05:24:DB:F7:77
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019B7FF1B23FF3673E9557A2CDE137031648
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kUVIDeS9pubUdz-wOi9SBSTb93c.roa
Signing time:             Fri 02 Jan 2026 18:21:44 +0000
ROA not before:           Fri 02 Jan 2026 18:21:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43641
IP address blocks:        2a13:e104::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 03:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f1:b2:3f:f3:67:3e:95:57:a2:cd:e1:37:03:16:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jan  2 18:21:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9145480de4bda6e6d4773fb03a2f520524dbf777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:92:03:82:7b:7a:c0:2b:ea:93:58:d7:6b:
                    d4:f7:b4:c8:37:70:21:94:0e:8c:4b:3b:ab:8c:fc:
                    16:93:83:6d:3d:3e:15:54:ff:46:be:b4:a3:4c:a5:
                    60:47:38:0a:6c:2f:0f:20:b1:25:09:a5:9e:8b:09:
                    64:2e:10:88:a7:10:6d:f7:a1:2e:ae:75:68:3b:0f:
                    48:93:08:29:cb:0a:d7:b1:89:fc:ea:9e:5f:76:bc:
                    31:17:71:9d:dc:cf:b4:df:07:c7:6a:12:0c:62:85:
                    c4:ef:a0:de:f1:da:13:c7:99:81:cd:98:31:da:24:
                    f9:ed:80:63:84:dc:44:07:46:37:48:8e:79:ac:d5:
                    32:7c:bc:43:fe:a8:12:62:5f:96:09:54:55:1e:36:
                    e6:2e:33:48:4f:ef:14:46:b9:f1:e5:30:c7:60:b1:
                    8d:2d:a3:62:51:11:e9:fa:d0:4a:f2:62:ac:ae:1c:
                    cb:58:5e:da:7e:3a:6a:a7:5d:ca:ec:70:51:a8:93:
                    3e:da:9d:2e:37:ab:f8:13:ca:1d:b5:b0:f7:b4:ec:
                    ee:f3:13:8c:d7:d7:09:80:a9:69:4f:63:28:9d:08:
                    3f:f4:80:9a:d1:65:e8:84:5c:53:69:49:93:0c:33:
                    07:a9:23:7f:31:06:41:4b:3e:06:39:37:d4:d5:5a:
                    30:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:45:48:0D:E4:BD:A6:E6:D4:77:3F:B0:3A:2F:52:05:24:DB:F7:77
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kUVIDeS9pubUdz-wOi9SBSTb93c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:e104::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:15:e3:94:c4:ee:c8:eb:4b:06:23:90:d9:0e:3d:ee:8e:5e:
         ee:28:64:8a:7f:d2:39:18:40:ee:01:5f:aa:20:22:4a:65:bc:
         d1:07:ac:7c:c3:0e:c2:ff:84:d9:53:72:37:81:54:f5:89:a0:
         dc:f1:58:bf:97:4a:03:9b:ab:29:9f:75:92:55:d4:44:46:c0:
         f1:4e:94:31:2e:b5:37:44:cd:8d:b1:41:b0:de:e4:be:70:e8:
         5b:0d:4f:7b:2c:0e:1b:24:2a:99:6d:aa:7d:56:63:41:f6:fb:
         06:35:c7:61:f6:ad:54:f3:e6:d6:71:d3:1b:62:42:94:29:48:
         14:87:56:98:c7:85:1f:42:80:bb:83:56:ce:c8:b6:6d:53:86:
         e7:81:75:b9:3a:fe:d7:38:92:90:47:0b:d3:eb:43:53:f9:b5:
         72:fe:6f:5b:d2:a6:c1:70:c8:a4:98:85:ba:21:3b:a9:ce:e7:
         41:33:23:30:d8:09:44:c1:3d:42:be:9d:dd:27:83:53:63:46:
         8d:ba:3c:f7:f2:c8:48:2b:7c:6c:9b:b4:57:35:4d:01:49:4f:
         35:e2:f8:bf:42:cf:aa:7e:10:77:05:a1:6a:ac:51:43:42:9a:
         19:36:84:ea:cb:25:4a:8f:46:3f:ad:c8:d0:36:f3:37:0e:1b:
         94:34:9c:97
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZt/8bI/82c+lVeizeE3AxZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwMTAyMTgyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTQ1NDgwZGU0YmRhNmU2ZDQ3NzNmYjAzYTJmNTIwNTI0ZGJmNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6GSA4J7esAr6pNY12vU97TIN3Ah
lA6MSzurjPwWk4NtPT4VVP9GvrSjTKVgRzgKbC8PILElCaWeiwlkLhCIpxBt96Eu
rnVoOw9IkwgpywrXsYn86p5fdrwxF3Gd3M+03wfHahIMYoXE76De8doTx5mBzZgx
2iT57YBjhNxEB0Y3SI55rNUyfLxD/qgSYl+WCVRVHjbmLjNIT+8URrnx5TDHYLGN
LaNiURHp+tBK8mKsrhzLWF7afjpqp13K7HBRqJM+2p0uN6v4E8odtbD3tOzu8xOM
19cJgKlpT2MonQg/9ICa0WXohFxTaUmTDDMHqSN/MQZBSz4GOTfU1Vow4wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJFFSA3kvabm1Hc/sDovUgUk2/d3MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEva1VWSURlUzlwdWJVZHotd09pOVNCU1RiOTNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhPhBDAN
BgkqhkiG9w0BAQsFAAOCAQEAEBXjlMTuyOtLBiOQ2Q497o5e7ihkin/SORhA7gFf
qiAiSmW80QesfMMOwv+E2VNyN4FU9Ymg3PFYv5dKA5urKZ91klXUREbA8U6UMS61
N0TNjbFBsN7kvnDoWw1PeywOGyQqmW2qfVZjQfb7BjXHYfatVPPm1nHTG2JClClI
FIdWmMeFH0KAu4NWzsi2bVOG54F1uTr+1ziSkEcL0+tDU/m1cv5vW9KmwXDIpJiF
uiE7qc7nQTMjMNgJRME9Qr6d3SeDU2NGjbo89/LISCt8bJu0VzVNAUlPNeL4v0LP
qn4QdwWhaqxRQ0KaGTaE6sslSo9GP63I0DbzNw4blDSclw==
-----END CERTIFICATE-----
Generated at Mon Jan 19 11:23:53 2026 by rpki-client