This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/Uxtr-atmnNBITnladLThcv7huIU.roa
File:                     Uxtr-atmnNBITnladLThcv7huIU.roa (raw, json)
Hash identifier:          n7M6NPbamAy18kfeXWpn06XaPUvf5LbKfUxiapVP6+w=
Subject key identifier:   53:1B:6B:F9:AB:66:9C:D0:48:4E:79:5A:74:B4:E1:72:FE:E1:B8:85
Certificate issuer:       /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial:       019B7F156DA584907D37D0C299166252E367
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/Uxtr-atmnNBITnladLThcv7huIU.roa
Signing time:             Fri 02 Jan 2026 14:21:09 +0000
ROA not before:           Fri 02 Jan 2026 14:21:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60789
IP address blocks:        193.100.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 13:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:6d:a5:84:90:7d:37:d0:c2:99:16:62:52:e3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
        Validity
            Not Before: Jan  2 14:21:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=531b6bf9ab669cd0484e795a74b4e172fee1b885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b4:78:9c:25:b8:21:97:1e:74:70:df:68:cd:
                    1c:67:50:90:23:ce:af:3f:58:48:ea:36:ef:fa:b4:
                    0d:76:e1:f2:88:fb:fd:a3:21:fe:b9:c8:f3:b4:1a:
                    40:a0:3c:5d:cc:f8:df:e1:c5:33:1d:32:ee:4d:a9:
                    78:05:96:f7:d3:ab:e6:c1:35:f7:f2:89:e9:59:eb:
                    54:bc:d1:61:df:00:da:1a:59:49:51:1d:d7:9c:d8:
                    e5:55:c2:42:98:8e:84:c6:71:0b:22:8c:1b:61:6d:
                    2c:6e:a4:11:40:fc:39:58:d7:8e:fa:91:7f:a0:32:
                    8d:7a:f3:3b:94:28:c4:5d:61:d8:e9:71:83:1a:7b:
                    5b:79:ce:19:57:39:5a:41:29:af:6a:78:42:05:31:
                    7c:c4:dc:05:25:81:97:e1:d7:55:23:5e:83:84:10:
                    01:14:fa:c0:4c:8f:14:05:3f:a2:27:9a:f8:f5:39:
                    a5:3e:80:ac:06:6d:7e:fa:2a:b4:2b:98:8a:18:0d:
                    b7:0e:cd:29:04:00:bf:88:00:f0:a6:37:97:21:c2:
                    db:a7:bc:7d:74:b4:d2:60:d5:e4:29:29:97:8f:3e:
                    d0:9f:23:da:0e:d6:52:35:c9:3e:35:83:05:ee:d6:
                    51:22:2b:2c:9a:44:b8:53:23:1e:45:4c:59:5f:7f:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1B:6B:F9:AB:66:9C:D0:48:4E:79:5A:74:B4:E1:72:FE:E1:B8:85
            X509v3 Authority Key Identifier:
                keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/Uxtr-atmnNBITnladLThcv7huIU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.100.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:06:36:08:d5:d5:99:e4:90:2e:fb:20:3a:49:8c:0f:86:0a:
         e1:49:c8:7c:a6:8c:b1:e2:25:a4:a0:eb:9c:8d:0d:77:5e:a4:
         60:03:8c:70:03:50:33:59:b0:25:c8:50:e9:49:a9:94:0f:cc:
         5c:09:56:a1:bd:c4:fe:26:91:20:5b:ae:b8:ea:e4:5b:3d:ff:
         c3:44:1a:0e:39:b9:f1:12:26:ac:d6:22:df:18:58:9e:12:8f:
         f2:b4:16:e5:3f:2f:56:ae:2b:2b:a2:8b:1b:4d:1a:10:3a:d6:
         66:13:03:60:61:0a:a5:0d:3b:e0:8b:d2:25:db:fe:83:0d:4f:
         2c:48:29:1c:5b:56:b2:62:47:31:55:96:4b:36:a1:97:91:a1:
         89:38:af:9d:75:90:c4:42:c9:c8:a4:ce:8e:26:88:9d:5f:a4:
         a9:09:eb:d5:bd:b7:36:40:53:91:2d:f3:e5:d2:f0:bf:62:fb:
         1f:ca:71:1c:8b:45:da:ff:79:09:81:32:b2:ff:f6:8d:81:ea:
         c6:38:0b:e6:e9:02:4c:24:3e:e8:6b:1d:24:b5:5f:7c:3c:20:
         03:98:18:1d:b4:df:30:9f:22:8c:6f:ea:e5:f5:98:fd:1c:63:
         95:f5:96:42:9d:e5:d5:8b:14:54:08:94:19:f1:ba:72:a8:b1:
         b1:15:e3:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FW2lhJB9N9DCmRZiUuNnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MWI5ZGY3NDVjMzJkZjI3ZGYzM2ViY2ZkNTM2ZjE5ZTEz
NDc0ZmUwHhcNMjYwMTAyMTQyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzFiNmJmOWFiNjY5Y2QwNDg0ZTc5NWE3NGI0ZTE3MmZlZTFiODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrR4nCW4IZcedHDfaM0cZ1CQI86v
P1hI6jbv+rQNduHyiPv9oyH+ucjztBpAoDxdzPjf4cUzHTLuTal4BZb306vmwTX3
8onpWetUvNFh3wDaGllJUR3XnNjlVcJCmI6ExnELIowbYW0sbqQRQPw5WNeO+pF/
oDKNevM7lCjEXWHY6XGDGntbec4ZVzlaQSmvanhCBTF8xNwFJYGX4ddVI16DhBAB
FPrATI8UBT+iJ5r49TmlPoCsBm1++iq0K5iKGA23Ds0pBAC/iADwpjeXIcLbp7x9
dLTSYNXkKSmXjz7QnyPaDtZSNck+NYMF7tZRIissmkS4UyMeRUxZX38C6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFMba/mrZpzQSE55WnS04XL+4biFMB8GA1UdIwQY
MBaAFJYbnfdFwy3yffM+vP1TbxnhNHT+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGh1ZDkwWERMZko5OHo2OF9WTnZHZUUwZFA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lODQ5MjAtZjVjYi00NmQ3LWJjOTkt
ZmU1MzIxMGI1N2I2LzEvVXh0ci1hdG1uTkJJVG5sYWRMVGhjdjdodUlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9lODQ5MjAtZjVjYi00NmQ3LWJjOTktZmU1MzIxMGI1N2I2
LzEvbGh1ZDkwWERMZko5OHo2OF9WTnZHZUUwZFA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWRAMA0G
CSqGSIb3DQEBCwUAA4IBAQAJBjYI1dWZ5JAu+yA6SYwPhgrhSch8poyx4iWkoOuc
jQ13XqRgA4xwA1AzWbAlyFDpSamUD8xcCVahvcT+JpEgW6646uRbPf/DRBoOObnx
Eias1iLfGFieEo/ytBblPy9WrisroosbTRoQOtZmEwNgYQqlDTvgi9Il2/6DDU8s
SCkcW1ayYkcxVZZLNqGXkaGJOK+ddZDEQsnIpM6OJoidX6SpCevVvbc2QFORLfPl
0vC/YvsfynEci0Xa/3kJgTKy//aNgerGOAvm6QJMJD7oax0ktV98PCADmBgdtN8w
nyKMb+rl9Zj9HGOV9ZZCneXVixRUCJQZ8bpyqLGxFeO+
-----END CERTIFICATE-----
Generated at Sat Jan 10 22:32:55 2026 by rpki-client