This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/Uv99MiDXyajOsQnEMoZEqygjiOM.roa
File:                     Uv99MiDXyajOsQnEMoZEqygjiOM.roa (raw, json)
Hash identifier:          J2J3fpMUvkwfwUFZMZrnnhWhczlVO0JpNc+f56+XNoM=
Subject key identifier:   52:FF:7D:32:20:D7:C9:A8:CE:B1:09:C4:32:86:44:AB:28:23:88:E3
Certificate issuer:       /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial:       019B7AC8809311859F2C4A05FF7C3DE9558B
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/Uv99MiDXyajOsQnEMoZEqygjiOM.roa
Signing time:             Thu 01 Jan 2026 18:18:38 +0000
ROA not before:           Thu 01 Jan 2026 18:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     12480
IP address blocks:        194.59.13.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:80:93:11:85:9f:2c:4a:05:ff:7c:3d:e9:55:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
        Validity
            Not Before: Jan  1 18:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=52ff7d3220d7c9a8ceb109c4328644ab282388e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ee:91:c9:43:a7:e7:b4:ff:76:53:69:a0:c2:
                    ad:12:6c:0a:c0:e4:9a:2e:64:0d:6b:6f:6d:25:90:
                    26:1b:7d:6c:23:99:50:b7:1c:72:42:f2:6a:5b:cc:
                    92:e8:c8:73:c1:51:47:e2:3c:f9:b1:46:02:dd:00:
                    5c:19:55:48:de:65:e2:c6:0c:57:35:e1:10:78:f8:
                    18:a5:e3:65:62:6e:22:38:64:6a:db:5c:ed:13:fb:
                    a9:06:17:1e:1e:33:f8:59:57:54:85:8f:5a:af:82:
                    e3:2d:74:63:8e:6e:ae:c7:fc:2d:ad:e3:af:9c:84:
                    b9:4a:8e:68:4a:26:9e:03:5a:d7:1c:4e:5b:91:8e:
                    26:b6:39:f4:76:f1:52:21:e4:29:7f:fc:b3:30:0e:
                    11:90:5e:e1:38:d0:90:2a:0b:ed:7c:9d:cb:eb:d4:
                    ae:8f:55:3e:55:e7:90:95:f8:68:e4:de:28:e3:3b:
                    ad:69:fd:4d:dc:ef:39:7f:8b:1d:9e:97:98:5b:dd:
                    9f:d7:6d:f8:79:c3:4c:55:1f:8b:cc:c6:ea:55:bf:
                    61:dc:ea:c5:d4:0e:0c:52:0f:54:ba:ac:ce:1b:2d:
                    1a:8d:7d:9e:56:3a:77:26:48:65:72:60:1b:89:6c:
                    30:75:22:de:34:73:91:9e:01:f1:b3:57:b1:32:16:
                    1a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FF:7D:32:20:D7:C9:A8:CE:B1:09:C4:32:86:44:AB:28:23:88:E3
            X509v3 Authority Key Identifier:
                keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/Uv99MiDXyajOsQnEMoZEqygjiOM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:b2:81:3e:31:d8:70:fd:68:d8:00:6a:18:73:a8:72:89:70:
         12:f3:d8:a7:f1:d4:04:8c:82:f0:9f:9c:64:4d:a9:77:97:f7:
         a5:56:94:5b:2e:d1:22:2c:04:43:1d:76:00:7a:4b:d5:93:ef:
         60:c2:f4:d0:e6:76:0a:5f:48:78:84:77:10:6b:74:ee:c9:f2:
         be:69:81:6b:e1:bf:54:52:69:93:0d:31:d2:29:ac:41:51:27:
         d0:a0:b9:29:63:e6:e5:26:bf:e6:84:45:95:68:c6:80:3b:c2:
         85:e5:ce:0d:59:4d:c9:14:a5:f1:49:e2:f3:5a:c1:a0:03:d8:
         66:9c:55:bf:d6:81:31:3c:39:68:7a:8f:5f:eb:b6:91:76:ed:
         7b:bf:48:50:74:6d:76:c7:6b:09:1d:a4:7f:9f:5e:9d:48:25:
         af:24:06:98:3c:57:c7:df:28:4e:b7:45:80:e5:ec:ae:63:ce:
         6f:60:35:be:ac:0d:89:dc:81:c6:1e:be:7c:e5:93:c4:4f:a3:
         6e:bb:3e:d4:37:da:65:5c:77:25:a2:26:71:5b:23:f3:bd:b8:
         22:fd:fc:b3:2d:1d:ec:19:03:f0:78:44:e9:76:18:46:2a:79:
         a5:79:81:57:aa:e3:66:42:61:29:5f:aa:22:51:87:aa:c7:37:
         71:6f:44:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:29:16 2026 by rpki-client