This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/uetR0NYlftUI-N4cveVJay7Nfqs.roa
File:                     uetR0NYlftUI-N4cveVJay7Nfqs.roa (raw, json)
Hash identifier:          oU+tDn/SW8IQrBkBO3IDY8rZ4byuiEOxIdJBkCXSH9A=
Subject key identifier:   B9:EB:51:D0:D6:25:7E:D5:08:F8:DE:1C:BD:E5:49:6B:2E:CD:7E:AB
Certificate issuer:       /CN=fcbc1b623e980559e32a5a1db580f8a734417705
Certificate serial:       019B7DC9C40E2E8E0B993E210866C05C3DAB
Authority key identifier: FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/uetR0NYlftUI-N4cveVJay7Nfqs.roa
Signing time:             Fri 02 Jan 2026 08:18:53 +0000
ROA not before:           Fri 02 Jan 2026 08:18:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6687
IP address blocks:        194.76.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:c9:c4:0e:2e:8e:0b:99:3e:21:08:66:c0:5c:3d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcbc1b623e980559e32a5a1db580f8a734417705
        Validity
            Not Before: Jan  2 08:18:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b9eb51d0d6257ed508f8de1cbde5496b2ecd7eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1e:24:6e:3d:43:2e:b5:28:cc:67:28:4f:aa:
                    15:35:2a:94:03:fc:a1:a0:d4:96:98:80:be:d2:25:
                    0b:32:4a:88:f4:cb:56:74:bc:51:f5:c1:35:0b:dc:
                    70:88:8c:2f:b2:cc:ec:83:79:cd:f1:70:37:28:36:
                    51:e8:1a:fb:b4:90:4a:09:f2:2f:51:8d:78:15:42:
                    98:ce:66:7f:00:b5:95:c4:74:1e:d4:fa:9e:bb:27:
                    79:7e:a0:15:fb:7c:61:c4:ad:74:bc:04:b3:55:f9:
                    9b:e0:54:6e:9c:a5:6f:48:fd:3b:a9:61:1f:96:07:
                    ff:74:dc:4c:4e:c8:47:5a:4f:df:d6:1c:88:2e:63:
                    9b:2e:05:8a:b2:8c:f3:c6:ac:22:38:8d:62:d8:0d:
                    d7:f9:62:ee:30:31:25:32:99:16:ea:11:50:4b:ce:
                    3d:9c:f0:63:0f:52:99:2b:24:84:f4:8f:89:3d:b8:
                    4e:cf:65:3a:bb:31:1e:6c:e0:d2:b7:6d:d4:2f:3b:
                    b0:c4:e6:03:5e:9b:4e:6d:8b:7e:79:d8:89:ca:90:
                    e9:de:4f:34:e2:05:d4:a7:54:ab:63:92:5b:46:a1:
                    44:c1:78:b5:30:74:02:33:6e:70:8f:40:e9:7b:39:
                    39:d3:29:21:23:61:e5:fe:cc:54:a9:da:5c:96:86:
                    38:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EB:51:D0:D6:25:7E:D5:08:F8:DE:1C:BD:E5:49:6B:2E:CD:7E:AB
            X509v3 Authority Key Identifier:
                keyid:FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/uetR0NYlftUI-N4cveVJay7Nfqs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.76.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         73:fe:0e:bc:ff:73:ae:e9:4a:27:06:5e:2a:07:e2:1b:ca:34:
         9b:0e:52:da:b8:9a:90:88:fe:36:fc:e3:d5:bc:7a:e7:88:dc:
         b4:07:73:c5:95:fc:d7:08:98:b5:bd:2e:34:15:ca:0f:d4:b6:
         46:46:cb:b2:c9:c0:8e:ac:00:15:87:4b:d0:b6:ab:18:45:b5:
         74:f3:b0:b3:d7:3b:ec:51:2b:2c:d5:3b:cd:f2:01:54:dc:58:
         c1:31:40:7d:84:e1:dc:2f:db:02:d2:4e:d5:4b:c6:03:c4:65:
         5c:de:36:f4:d3:bf:ed:72:8c:7b:73:7a:30:3c:5d:8e:f1:fe:
         9d:57:c5:c6:95:fe:34:30:f0:b1:ba:9e:2e:06:95:c2:f2:0e:
         e5:90:47:c0:d9:4e:cc:4f:67:a9:c5:ab:37:83:67:a3:05:c4:
         6b:69:a3:ac:f0:34:d3:03:c3:d2:3c:d6:f7:9d:a3:7a:93:be:
         cf:39:99:2b:c5:84:33:2b:c8:fc:72:68:0a:62:53:12:29:d8:
         81:e8:23:61:d5:18:39:d4:ec:d3:bb:c3:36:63:80:24:29:dd:
         64:4f:7f:5c:9b:98:66:8f:c3:57:37:1d:d5:05:e7:a6:17:37:
         9d:36:c4:f2:84:7b:f5:32:3d:43:51:46:fe:25:98:30:32:68:
         c7:f5:c1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:05 2026 by rpki-client