This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/UTSR5iQJ6IBH6DGdS5VKMlXv2h8.roa
File:                     UTSR5iQJ6IBH6DGdS5VKMlXv2h8.roa (raw, json)
Hash identifier:          g/yB397DTMizFh5pcVuRPR6yN/SI5ugHQKZHi+BSisU=
Subject key identifier:   51:34:91:E6:24:09:E8:80:47:E8:31:9D:4B:95:4A:32:55:EF:DA:1F
Certificate issuer:       /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial:       019B7E38FD6B1BD836564BBD63B7D3153739
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/UTSR5iQJ6IBH6DGdS5VKMlXv2h8.roa
Signing time:             Fri 02 Jan 2026 10:20:22 +0000
ROA not before:           Fri 02 Jan 2026 10:20:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43016
IP address blocks:        146.66.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:fd:6b:1b:d8:36:56:4b:bd:63:b7:d3:15:37:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
        Validity
            Not Before: Jan  2 10:20:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=513491e62409e88047e8319d4b954a3255efda1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d9:ca:9a:1e:92:70:82:4f:1a:96:6a:2c:a0:
                    94:c9:92:5c:93:94:4d:f9:9c:02:58:67:90:4a:a9:
                    32:19:0a:06:af:dc:b4:51:cd:38:c6:ab:b2:13:8b:
                    71:f7:c1:6d:5b:b0:95:40:e3:d6:1d:65:f9:63:4e:
                    e7:8f:2c:60:ff:85:b3:5f:ae:77:b7:f4:1d:ff:5b:
                    c1:e0:ab:31:ca:bc:b7:33:e2:21:e1:e8:c3:ef:e7:
                    eb:00:31:96:fa:29:dd:3b:ec:6d:df:33:89:9e:2b:
                    f6:3a:74:a4:e5:da:77:ca:12:fd:69:81:c3:bf:f3:
                    90:69:e8:ed:94:43:8c:f1:40:e1:6f:e3:3e:4e:fb:
                    6c:51:06:0f:d0:c8:12:c7:77:7a:73:ad:e3:40:87:
                    c0:64:cf:78:23:ce:41:94:c6:c3:68:21:2b:b5:c8:
                    7d:57:2f:f5:43:b5:8d:cc:2a:6d:67:6a:9a:8c:b6:
                    74:eb:22:d1:4c:29:b8:8f:97:2f:c1:a7:d9:28:f2:
                    c7:80:f9:fe:4c:35:66:17:7b:7a:cc:43:fc:53:91:
                    36:fe:21:4c:b4:0c:d2:e7:28:24:9f:cd:56:50:c0:
                    59:53:71:09:f1:f5:25:ac:c4:8a:e4:57:45:bf:8c:
                    34:95:4d:4a:58:24:8b:b8:ab:ea:b2:75:97:15:d2:
                    72:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:34:91:E6:24:09:E8:80:47:E8:31:9D:4B:95:4A:32:55:EF:DA:1F
            X509v3 Authority Key Identifier:
                keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/UTSR5iQJ6IBH6DGdS5VKMlXv2h8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.66.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:2a:d1:a8:c9:65:41:cc:32:fc:49:a4:d7:52:68:a5:6a:0d:
         7b:70:ce:67:fd:f7:26:a4:97:33:40:54:a4:20:51:78:7f:68:
         75:2a:ee:8c:a9:f7:52:8c:33:09:8a:28:15:85:64:77:dc:79:
         1e:2b:af:ac:a0:84:78:a5:3f:65:40:7e:b9:49:de:cb:f4:2b:
         d0:6d:e2:d0:f3:3e:20:d5:e1:24:a3:c0:cd:d8:fe:ea:bb:16:
         68:34:95:d6:a2:b5:73:39:80:38:8a:5a:0d:3c:77:8b:e8:60:
         b7:5e:2c:1b:7a:32:b9:3d:87:7e:fb:ec:1e:c7:ff:91:e2:0d:
         fc:51:0e:4f:f4:16:59:aa:3b:42:73:df:50:b1:6b:6e:3f:31:
         6a:f9:2c:a2:85:11:cf:86:48:0c:41:23:d9:1d:62:bd:31:f3:
         1f:db:28:6c:0d:1c:1b:15:b3:28:e5:21:4f:92:ea:7d:21:94:
         b1:17:ce:45:46:dc:b9:24:e1:8a:aa:5f:cf:c8:86:7c:4b:3c:
         db:78:a5:fc:a0:e1:89:c3:c7:6e:48:ec:f4:9e:1c:85:7b:f9:
         87:19:6e:ba:6c:18:79:e9:78:fe:63:33:64:08:37:8a:30:06:
         28:ef:aa:d0:cf:58:c7:06:e3:fe:5c:82:0c:11:5e:0d:a7:e1:
         96:c5:27:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:59:37 2026 by rpki-client