This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/UyjG7mUKw_csY7SyBZFvUhkSaPc.roa
File:                     UyjG7mUKw_csY7SyBZFvUhkSaPc.roa (raw, json)
Hash identifier:          n9HYRjqT7Yx/CpHx7zXXC15FE0G/joD1gI9dynyvC54=
Subject key identifier:   53:28:C6:EE:65:0A:C3:F7:2C:63:B4:B2:05:91:6F:52:19:12:68:F7
Certificate issuer:       /CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Certificate serial:       019B78A236E65EDA34D68D2B12782203777B
Authority key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/UyjG7mUKw_csY7SyBZFvUhkSaPc.roa
Signing time:             Thu 01 Jan 2026 08:17:35 +0000
ROA not before:           Thu 01 Jan 2026 08:17:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208710
IP address blocks:        45.66.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:36:e6:5e:da:34:d6:8d:2b:12:78:22:03:77:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
        Validity
            Not Before: Jan  1 08:17:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5328c6ee650ac3f72c63b4b205916f52191268f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:7c:8a:8b:5a:e6:69:c2:b9:1e:6f:58:f4:
                    81:46:3c:46:fa:f3:64:ed:06:bb:f7:ac:e0:06:78:
                    c8:0f:e6:6f:d0:a4:b7:a2:8c:d8:93:bb:b1:b5:3d:
                    34:7f:55:b6:3f:d1:d2:fe:be:a5:8b:8a:97:56:9e:
                    c5:f5:7d:93:bc:95:92:bf:13:26:fd:6b:91:db:e2:
                    11:f4:16:9e:4a:47:22:f8:6b:19:4b:8f:e0:a8:3f:
                    85:d2:c3:e9:6c:fa:9f:09:b4:a6:ae:01:21:a9:60:
                    82:59:74:02:f0:df:56:dc:2b:c1:01:e4:08:d5:1e:
                    18:52:ee:25:3f:90:48:32:64:51:15:4c:92:a1:38:
                    6e:60:7f:04:c2:fe:38:90:c6:50:14:d7:b9:53:3d:
                    8e:b1:c7:e6:e9:63:63:5e:d1:b0:d8:06:64:19:9d:
                    10:91:40:14:4c:fc:ff:0d:6c:f6:9a:37:e4:7f:59:
                    98:4d:e3:62:01:c6:fb:d4:dd:2b:b5:82:85:93:1a:
                    39:11:57:c2:52:c5:13:17:d9:5c:52:b9:46:f1:5a:
                    41:59:93:f8:dc:5d:dc:ad:46:ff:fd:ba:c7:c0:a7:
                    c4:6a:09:52:4e:f7:c9:98:1b:fc:a1:20:85:63:a4:
                    fb:6b:cf:6f:c5:66:a6:47:10:fd:e7:88:76:1e:a0:
                    9a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:28:C6:EE:65:0A:C3:F7:2C:63:B4:B2:05:91:6F:52:19:12:68:F7
            X509v3 Authority Key Identifier:
                keyid:9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/UyjG7mUKw_csY7SyBZFvUhkSaPc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:6c:81:6e:b0:0b:78:7d:03:5d:7d:10:51:ee:4e:df:4d:07:
         14:17:a7:15:b3:8c:60:7a:c8:8b:d4:3a:18:ba:1b:fd:ae:90:
         da:e7:a6:1d:7e:66:52:4c:88:76:16:c9:35:1a:bc:08:4d:92:
         36:88:dd:6a:0a:7c:d4:09:cc:4a:1e:31:ac:e5:37:3b:e9:f3:
         09:3d:5d:3e:ab:c2:ab:34:42:7b:9e:cd:14:80:d3:c1:09:5b:
         02:96:95:9b:6a:7e:e5:43:bb:22:c1:1e:9b:d0:f1:fd:3e:91:
         cb:7a:d7:57:3a:da:da:29:81:08:96:26:34:bf:67:1f:aa:b1:
         82:38:97:9e:63:36:86:25:0e:a0:ae:f5:ec:d9:85:24:29:71:
         5c:a6:6a:11:75:f7:5b:ab:6a:d8:b6:c6:56:ec:bf:43:53:f8:
         58:70:0c:df:73:76:4e:58:d8:71:9f:e0:92:c5:9c:f8:97:f6:
         5e:ff:f8:1b:e5:d8:81:04:0f:bf:a5:ea:30:5e:e1:fc:e0:01:
         f1:96:34:9d:0c:30:85:a5:bf:1a:ae:1e:a9:6a:f6:89:8b:15:
         3a:64:51:5b:14:2c:b2:1e:46:bb:3f:e0:80:70:42:8d:ae:35:
         ac:e9:8e:d0:7b:14:d7:e1:d8:91:cf:ea:28:01:bf:f3:ef:53:
         0f:e0:a8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:22 2026 by rpki-client