This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/UeUe4RXxbJQuYIv96jVkIPMvTEA.roa
File:                     UeUe4RXxbJQuYIv96jVkIPMvTEA.roa (raw, json)
Hash identifier:          rx3GrZrvfU17csdIhw9Rnh2rg66M56CJ6Ya4mGIIvXs=
Subject key identifier:   51:E5:1E:E1:15:F1:6C:94:2E:60:8B:FD:EA:35:64:20:F3:2F:4C:40
Certificate issuer:       /CN=cfc025a9d55bfd643757da4d499dce17201774d2
Certificate serial:       019B7BA3962392CCF1944AAB490E899B4882
Authority key identifier: CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/UeUe4RXxbJQuYIv96jVkIPMvTEA.roa
Signing time:             Thu 01 Jan 2026 22:17:56 +0000
ROA not before:           Thu 01 Jan 2026 22:17:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48782
IP address blocks:        91.212.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:96:23:92:cc:f1:94:4a:ab:49:0e:89:9b:48:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc025a9d55bfd643757da4d499dce17201774d2
        Validity
            Not Before: Jan  1 22:17:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=51e51ee115f16c942e608bfdea356420f32f4c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f3:45:ad:d7:e1:68:8f:c9:3c:ea:d3:8e:85:
                    ee:2a:6c:c2:f9:78:e8:ab:f0:b4:21:df:61:84:20:
                    97:af:8a:82:9a:a4:ec:61:be:e5:9c:79:01:db:f8:
                    11:76:84:f5:01:6b:70:88:1e:5c:59:12:b9:af:9c:
                    e9:41:d9:3b:09:fd:e6:e9:5f:22:92:d4:1d:f3:c1:
                    bc:cd:4f:b1:a3:13:c2:b2:d0:18:71:fb:e4:a7:ec:
                    0a:4e:09:65:3e:25:d4:25:05:3a:ff:53:34:4a:72:
                    e0:1c:b3:9a:3c:af:41:01:50:25:87:bf:4e:c8:25:
                    b2:da:b6:c8:5c:1d:bf:38:82:b4:31:9c:f6:b1:06:
                    91:57:19:d1:92:b3:9f:51:08:35:ac:13:88:65:18:
                    db:47:ba:9b:57:8b:a7:a2:75:65:3f:c4:b6:15:4f:
                    6d:ef:34:80:c7:33:9e:8c:aa:b7:f9:c1:2a:22:68:
                    ff:05:cc:a9:a6:94:85:72:02:fc:d2:3c:97:97:da:
                    92:15:64:8c:ed:78:2f:fb:75:79:86:a4:64:d3:96:
                    ed:e7:f3:4d:ea:0f:20:df:7f:29:ea:6a:22:ef:42:
                    f4:90:6a:b4:d3:a9:eb:85:ca:49:a9:b4:f1:57:1e:
                    c4:45:e8:87:3e:13:90:18:f9:9a:51:b1:84:7b:64:
                    3d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E5:1E:E1:15:F1:6C:94:2E:60:8B:FD:EA:35:64:20:F3:2F:4C:40
            X509v3 Authority Key Identifier:
                keyid:CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/UeUe4RXxbJQuYIv96jVkIPMvTEA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:7f:42:b4:6b:ab:0b:94:3d:8c:45:79:c1:c8:d7:73:b1:f9:
         05:df:8d:b0:ba:39:bd:ba:b7:43:09:ab:67:7a:4f:97:f9:b6:
         40:49:7f:31:2e:2b:58:9c:38:79:28:92:3e:35:2b:bc:48:a3:
         be:07:40:93:4c:32:9a:25:75:4a:72:ac:94:ce:34:90:9a:df:
         10:4c:f7:e5:a4:9a:3b:d0:3e:0c:81:37:b3:05:d2:73:24:99:
         a1:ac:e3:ef:e0:74:fa:c8:86:0a:0e:93:81:fe:b5:13:f4:0d:
         15:7b:53:b3:e6:09:ae:d5:a1:85:49:e4:f3:8c:fd:e7:0a:a7:
         93:dd:4d:44:25:b0:ff:d9:d7:41:94:7a:75:9d:c8:27:7e:3b:
         ee:2a:7c:3f:46:3a:2d:ad:5f:67:53:83:cd:4f:a2:06:7a:03:
         99:be:b9:60:dc:8d:bd:8e:6c:7b:c1:9e:a4:6f:f6:d1:95:fd:
         21:e7:55:2c:6a:58:56:78:31:c1:35:73:fe:af:25:cf:fa:21:
         3b:e4:5c:18:d8:73:52:53:47:d5:d1:91:37:d8:d7:55:b1:15:
         82:8e:eb:12:30:c6:ab:ba:7f:66:56:a2:d8:1b:88:a0:23:29:
         ed:a4:75:43:35:b3:2b:4d:66:99:27:59:ff:a4:c7:ce:83:4a:
         88:44:cd:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7o5YjkszxlEqrSQ6Jm0iCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYzAyNWE5ZDU1YmZkNjQzNzU3ZGE0ZDQ5OWRjZTE3MjAx
Nzc0ZDIwHhcNMjYwMTAxMjIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWU1MWVlMTE1ZjE2Yzk0MmU2MDhiZmRlYTM1NjQyMGYzMmY0YzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fNFrdfhaI/JPOrTjoXuKmzC+Xjo
q/C0Id9hhCCXr4qCmqTsYb7lnHkB2/gRdoT1AWtwiB5cWRK5r5zpQdk7Cf3m6V8i
ktQd88G8zU+xoxPCstAYcfvkp+wKTgllPiXUJQU6/1M0SnLgHLOaPK9BAVAlh79O
yCWy2rbIXB2/OIK0MZz2sQaRVxnRkrOfUQg1rBOIZRjbR7qbV4unonVlP8S2FU9t
7zSAxzOejKq3+cEqImj/BcypppSFcgL80jyXl9qSFWSM7Xgv+3V5hqRk05bt5/NN
6g8g338p6moi70L0kGq006nrhcpJqbTxVx7EReiHPhOQGPmaUbGEe2Q9yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFHlHuEV8WyULmCL/eo1ZCDzL0xAMB8GA1UdIwQY
MBaAFM/AJanVW/1kN1faTUmdzhcgF3TSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejhBbHFkVmJfV1EzVjlwTlNaM09GeUFYZE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mZGEyOTgtMDJjNy00ZDcxLThhZDMt
OTUxZmQ3NWFjOWEyLzEvVWVVZTRSWHhiSlF1WUl2OTZqVmtJUE12VEVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mZGEyOTgtMDJjNy00ZDcxLThhZDMtOTUxZmQ3NWFjOWEy
LzEvejhBbHFkVmJfV1EzVjlwTlNaM09GeUFYZE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9QeMA0G
CSqGSIb3DQEBCwUAA4IBAQBxf0K0a6sLlD2MRXnByNdzsfkF342wujm9urdDCatn
ek+X+bZASX8xLitYnDh5KJI+NSu8SKO+B0CTTDKaJXVKcqyUzjSQmt8QTPflpJo7
0D4MgTezBdJzJJmhrOPv4HT6yIYKDpOB/rUT9A0Ve1Oz5gmu1aGFSeTzjP3nCqeT
3U1EJbD/2ddBlHp1ncgnfjvuKnw/RjotrV9nU4PNT6IGegOZvrlg3I29jmx7wZ6k
b/bRlf0h51UsalhWeDHBNXP+ryXP+iE75FwY2HNSU0fV0ZE32NdVsRWCjusSMMar
un9mVqLYG4igIyntpHVDNbMrTWaZJ1n/pMfOg0qIRM3f
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:32:11 2026 by rpki-client