This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/uvizS4ukuC_gEdKACqyA3QErVlg.roa
File:                     uvizS4ukuC_gEdKACqyA3QErVlg.roa (raw, json)
Hash identifier:          7ZQzxgJlvYq7/1nZi/aQGYcGnnJ6bHEVEWXvW9zSYP8=
Subject key identifier:   BA:F8:B3:4B:8B:A4:B8:2F:E0:11:D2:80:0A:AC:80:DD:01:2B:56:58
Certificate issuer:       /CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Certificate serial:       019B7AC922826C158A0A5C46B0CE0A616A9B
Authority key identifier: F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/uvizS4ukuC_gEdKACqyA3QErVlg.roa
Signing time:             Thu 01 Jan 2026 18:19:20 +0000
ROA not before:           Thu 01 Jan 2026 18:19:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211194
IP address blocks:        2001:67c:b28::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:22:82:6c:15:8a:0a:5c:46:b0:ce:0a:61:6a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
        Validity
            Not Before: Jan  1 18:19:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=baf8b34b8ba4b82fe011d2800aac80dd012b5658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f9:9c:6e:a1:1f:fc:37:c3:4f:a9:02:64:23:
                    b3:18:3a:ed:62:f4:42:79:1e:8a:1f:3b:f9:52:45:
                    44:00:62:c2:5c:13:93:2c:77:23:bc:39:5a:ad:e9:
                    c1:69:62:36:15:32:9d:ed:1b:a2:cc:1a:ad:6f:61:
                    52:9f:70:4e:53:91:f1:c0:4e:d6:3b:13:32:65:a0:
                    0a:eb:c3:6b:f9:eb:33:0e:18:bb:7c:1d:88:9d:85:
                    a4:42:1d:eb:85:bb:0b:03:72:58:f6:bf:13:e9:fe:
                    f3:45:55:08:b2:76:c9:ae:df:75:2a:98:b8:70:99:
                    6b:4a:c6:eb:73:19:ee:38:e1:91:10:a0:90:33:da:
                    20:bc:c0:6d:a1:18:c2:25:6b:f5:bd:a2:79:ff:e2:
                    0f:a2:3e:52:31:d8:ff:3b:01:f8:5f:75:a6:2b:ca:
                    d0:55:13:e7:60:2e:82:27:bb:94:95:9a:35:fb:1b:
                    d8:87:8c:bf:dd:02:b0:26:34:15:00:27:7f:9b:86:
                    fe:aa:b6:ad:cb:f1:8a:63:7b:d1:7b:69:39:b8:28:
                    b0:78:8a:cd:30:54:a7:92:46:f4:48:88:c2:20:9e:
                    16:c5:83:b4:8e:e6:9b:f2:1c:77:19:3c:7b:f2:d4:
                    01:f4:74:75:8f:27:ab:38:ff:06:8c:ca:26:dd:f4:
                    1d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F8:B3:4B:8B:A4:B8:2F:E0:11:D2:80:0A:AC:80:DD:01:2B:56:58
            X509v3 Authority Key Identifier:
                keyid:F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/uvizS4ukuC_gEdKACqyA3QErVlg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:b28::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:24:d0:83:43:d0:41:75:ff:c5:6d:63:4e:96:ca:7d:8d:d0:
         e9:ad:72:1e:ef:58:10:a5:56:6a:75:46:ff:bd:c6:08:c3:cd:
         c2:85:9e:ae:6e:76:b5:6e:f7:aa:8c:07:58:a5:06:ba:73:14:
         ed:c3:f1:63:74:b6:af:38:67:4e:3f:5a:44:34:44:d4:c4:2b:
         02:6d:3a:49:a6:3c:5e:dd:f6:c0:e5:bb:61:a9:fc:09:d6:75:
         92:82:20:7a:e7:d3:55:dc:6f:6a:f8:38:b0:81:90:b3:fb:a8:
         bc:c5:ab:46:f2:55:16:10:c4:6b:3e:fd:b4:c6:b0:fd:dd:59:
         b7:3d:d8:ab:5b:9b:65:da:3d:09:59:b6:c9:cc:ae:8a:24:39:
         0a:df:32:4f:cf:9d:6c:23:61:e7:9a:cc:56:84:d1:7b:4d:12:
         5b:6d:5b:63:8d:71:07:6f:91:f2:f1:db:f2:b4:47:02:c7:c7:
         7d:e9:e0:24:89:99:1b:75:23:d7:33:7e:85:1f:17:85:ce:40:
         fe:79:bf:ee:08:f2:b5:80:e9:f2:91:ec:dd:48:69:1b:90:c7:
         7b:9e:98:f2:a8:a3:8a:46:34:f2:1b:b7:65:fb:44:3b:1d:7b:
         ae:72:78:c0:23:fe:63:5a:5c:5e:f2:d3:05:bc:48:bf:36:03:
         24:db:b3:a9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt6ySKCbBWKClxGsM4KYWqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZmFjMmMyMWIyZGJjODEyZGQyNWQxY2I3OWMzZmJhNTQx
OWU1OTMwHhcNMjYwMTAxMTgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWY4YjM0YjhiYTRiODJmZTAxMWQyODAwYWFjODBkZDAxMmI1NjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfmcbqEf/DfDT6kCZCOzGDrtYvRC
eR6KHzv5UkVEAGLCXBOTLHcjvDlarenBaWI2FTKd7RuizBqtb2FSn3BOU5HxwE7W
OxMyZaAK68Nr+eszDhi7fB2InYWkQh3rhbsLA3JY9r8T6f7zRVUIsnbJrt91Kpi4
cJlrSsbrcxnuOOGREKCQM9ogvMBtoRjCJWv1vaJ5/+IPoj5SMdj/OwH4X3WmK8rQ
VRPnYC6CJ7uUlZo1+xvYh4y/3QKwJjQVACd/m4b+qraty/GKY3vRe2k5uCiweIrN
MFSnkkb0SIjCIJ4WxYO0juab8hx3GTx78tQB9HR1jyerOP8GjMom3fQdGQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLr4s0uLpLgv4BHSgAqsgN0BK1ZYMB8GA1UdIwQY
MBaAFPf6wsIbLbyBLdJdHLecP7pUGeWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOV9yQ3doc3R2SUV0MGwwY3Q1d191bFFaNVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82YWY2YjItNTc4Yy00YTI1LWEyY2Mt
ZmZhZDRmYjBhNzEzLzEvdXZpelM0dWt1Q19nRWRLQUNxeUEzUUVyVmxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS82YWY2YjItNTc4Yy00YTI1LWEyY2MtZmZhZDRmYjBhNzEz
LzEvOV9yQ3doc3R2SUV0MGwwY3Q1d191bFFaNVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAso
MA0GCSqGSIb3DQEBCwUAA4IBAQAhJNCDQ9BBdf/FbWNOlsp9jdDprXIe71gQpVZq
dUb/vcYIw83ChZ6ubna1bveqjAdYpQa6cxTtw/FjdLavOGdOP1pENETUxCsCbTpJ
pjxe3fbA5bthqfwJ1nWSgiB659NV3G9q+DiwgZCz+6i8xatG8lUWEMRrPv20xrD9
3Vm3PdirW5tl2j0JWbbJzK6KJDkK3zJPz51sI2HnmsxWhNF7TRJbbVtjjXEHb5Hy
8dvytEcCx8d96eAkiZkbdSPXM36FHxeFzkD+eb/uCPK1gOnykezdSGkbkMd7npjy
qKOKRjTyG7dl+0Q7HXuucnjAI/5jWlxe8tMFvEi/NgMk27Op
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:12:03 2026 by rpki-client