This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Uwe--gB6ylGJNxhfuiansY5qD4M.roa
File:                     Uwe--gB6ylGJNxhfuiansY5qD4M.roa (raw, json)
Hash identifier:          1RQqYvxgWhqs5inThD8ruAxw/Cxc0/5ka5AdJ7o+12c=
Subject key identifier:   53:07:BE:FA:00:7A:CA:51:89:37:18:5F:BA:26:A7:B1:8E:6A:0F:83
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       019B7C80568343871AF83CA74ADC9ECA6099
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Uwe--gB6ylGJNxhfuiansY5qD4M.roa
Signing time:             Fri 02 Jan 2026 02:19:04 +0000
ROA not before:           Fri 02 Jan 2026 02:19:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206411
IP address blocks:        91.190.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:56:83:43:87:1a:f8:3c:a7:4a:dc:9e:ca:60:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Jan  2 02:19:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5307befa007aca518937185fba26a7b18e6a0f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:07:8f:d5:d3:f6:59:be:fe:1b:1e:34:e9:
                    cc:f1:a1:8a:bc:2d:7d:24:e4:f0:e3:6b:58:04:29:
                    91:9b:b1:22:75:5e:1d:40:1c:90:85:30:6b:bb:33:
                    2f:73:28:ec:ed:60:33:57:cf:9e:98:30:ef:71:59:
                    cb:9b:51:ed:37:67:7e:d4:9a:80:63:ad:1e:4d:4a:
                    2b:31:a7:9f:4c:2c:22:bf:94:0f:0c:1a:3f:ea:ac:
                    21:1d:7f:9e:4f:69:21:62:33:c8:ec:f7:bd:e2:e5:
                    e3:bf:92:6e:d5:2f:11:dc:a0:bd:8f:fa:0d:04:90:
                    62:12:80:fe:9b:b0:fd:e9:03:aa:b0:be:cd:23:4a:
                    4e:33:9c:9d:ad:7d:d1:23:8c:da:38:45:af:a0:c9:
                    96:f2:d7:a7:a2:67:f3:d8:32:c2:5d:38:c3:80:06:
                    37:35:b7:f4:6d:70:ee:22:ad:d8:ba:9f:db:ab:f8:
                    35:72:ae:ee:1c:f1:fc:4d:f5:69:6b:d5:eb:8d:c4:
                    27:6e:80:30:c2:a9:c0:71:04:2e:0c:76:9e:7b:31:
                    1e:fb:4b:27:ae:8f:c5:f6:4b:70:50:a5:b6:5d:2b:
                    1b:6b:b8:e5:d4:9d:ea:0a:0f:3d:bb:99:ef:e9:6a:
                    60:7c:cd:f3:13:c1:b3:81:06:20:d1:57:15:4b:a9:
                    48:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:07:BE:FA:00:7A:CA:51:89:37:18:5F:BA:26:A7:B1:8E:6A:0F:83
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Uwe--gB6ylGJNxhfuiansY5qD4M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.190.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:fc:eb:fc:bd:be:11:16:53:85:f2:66:b5:41:b7:09:68:c2:
         a8:85:bb:f7:73:7d:05:3e:a5:4a:98:59:ad:d9:ec:d2:96:68:
         56:b7:0f:bc:2c:73:b1:57:16:64:ad:12:0e:15:bc:42:79:29:
         d8:55:a3:d4:71:5a:03:39:4f:ed:1b:cb:3c:f0:7a:78:ee:1c:
         82:75:fa:86:f8:cd:27:90:b6:41:b0:c5:a9:35:d8:93:72:3a:
         42:aa:24:6d:51:c5:c1:8a:53:67:a3:5c:30:1d:18:23:3c:25:
         a9:de:8d:d3:ef:db:e0:d6:52:76:72:3b:9d:8f:0a:f5:3a:71:
         4c:37:05:62:44:ce:55:9b:a5:59:9d:69:09:e4:09:97:92:c1:
         27:00:4e:1d:a7:56:a6:0d:3a:07:02:54:7f:fb:25:01:5b:4b:
         48:52:4f:0b:c3:f2:75:72:e0:ae:b8:4a:7b:75:c6:0a:21:2c:
         46:dd:d4:15:e3:6b:5a:02:ed:80:bf:93:33:d6:e5:31:5d:9b:
         4c:46:b9:4a:e0:cb:8c:09:4d:42:fc:d5:a6:39:60:56:65:07:
         08:d1:05:75:0c:fe:8e:c5:9a:07:65:e4:93:9d:5e:0a:7c:fc:
         0e:89:14:73:ed:55:3f:22:6d:e3:fc:d1:68:63:2c:be:40:78:
         e7:fc:f3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 08:22:29 2026 by rpki-client