This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/UV5sC4K1_1F-z4dW9PMgPKHi4iw.roa
File:                     UV5sC4K1_1F-z4dW9PMgPKHi4iw.roa (raw, json)
Hash identifier:          1nK47WRZwAvKB9ouMkN1V/iLxMpccr6CTRWd93nbh9I=
Subject key identifier:   51:5E:6C:0B:82:B5:FF:51:7E:CF:87:56:F4:F3:20:3C:A1:E2:E2:2C
Certificate issuer:       /CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
Certificate serial:       019B7BA52272332784C46E99A5580CD62971
Authority key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/UV5sC4K1_1F-z4dW9PMgPKHi4iw.roa
Signing time:             Thu 01 Jan 2026 22:19:38 +0000
ROA not before:           Thu 01 Jan 2026 22:19:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197889
IP address blocks:        89.107.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a5:22:72:33:27:84:c4:6e:99:a5:58:0c:d6:29:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
        Validity
            Not Before: Jan  1 22:19:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=515e6c0b82b5ff517ecf8756f4f3203ca1e2e22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d5:f6:07:0f:27:2b:b7:c1:36:4e:6b:76:46:
                    49:24:7f:47:95:6b:76:9d:00:a4:58:2b:5a:c7:da:
                    64:e8:9c:07:0c:c3:f1:a6:6b:d7:8e:10:23:98:fb:
                    76:29:d0:08:9a:0e:a8:ba:45:c9:38:fd:22:5c:87:
                    01:c5:97:27:63:11:01:79:9e:4c:a3:10:52:45:12:
                    ac:bd:60:6d:0a:6d:11:46:3e:67:d7:12:67:02:8a:
                    a0:47:80:45:2f:4f:2c:b6:54:6f:d8:c4:bf:6a:e7:
                    1d:06:57:74:29:a7:05:7b:02:eb:fd:ce:a3:89:9a:
                    ae:d5:95:36:bb:7c:18:e8:5d:4a:08:fd:4f:ec:4c:
                    b9:c6:71:13:28:62:7f:1c:03:db:3b:7a:ee:fd:7b:
                    fd:bf:ea:1e:16:c6:38:2f:70:d1:d8:3c:91:56:60:
                    d2:d9:a6:ab:5c:3d:44:10:7d:e8:93:dd:da:c7:d9:
                    37:0e:8f:8c:ef:99:d8:37:ee:cb:07:d7:23:da:01:
                    86:91:d1:20:41:59:1a:4f:4c:26:b7:a0:1b:6f:d0:
                    a4:da:4a:ad:79:0a:a1:09:e4:fa:aa:8e:d9:7d:d4:
                    3e:67:11:3e:db:6b:38:f1:8f:52:f0:b5:cf:4e:92:
                    1e:a9:76:d0:69:45:98:68:22:f2:6f:c2:73:4f:0f:
                    3f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5E:6C:0B:82:B5:FF:51:7E:CF:87:56:F4:F3:20:3C:A1:E2:E2:2C
            X509v3 Authority Key Identifier:
                keyid:B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/UV5sC4K1_1F-z4dW9PMgPKHi4iw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.107.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:67:87:29:c5:af:66:2b:70:71:b6:17:c0:cf:5c:5c:78:2a:
         4d:81:ce:3e:da:75:27:0d:ed:d9:21:06:71:4d:32:95:33:6d:
         37:ee:58:c3:e4:9a:03:3d:e2:36:aa:5f:bf:74:42:50:98:d7:
         31:63:7b:67:bd:31:b8:4f:c4:aa:fe:78:d0:46:64:6a:a2:8c:
         30:65:4d:c2:2d:8d:62:be:1e:31:33:56:4c:fa:db:69:50:43:
         7f:d6:4f:be:11:26:81:65:8e:d9:51:d2:62:d7:e9:42:6f:08:
         1d:12:e1:a7:11:a9:3a:75:29:3b:c5:b9:7c:8e:dc:55:d2:73:
         26:d1:34:b2:fe:ea:e3:c2:87:ac:bc:06:5e:d4:5a:94:af:2c:
         f8:c2:e9:a8:fb:71:09:71:32:73:84:34:77:90:bc:d7:09:5e:
         d4:83:bf:ff:32:45:59:16:2b:a7:5e:53:0f:50:8d:10:e1:12:
         27:78:64:22:63:f9:fb:8c:9d:2a:02:20:29:d4:1d:c4:09:5f:
         6b:42:65:f5:85:e0:5a:24:12:34:cb:3f:1b:d7:6d:1b:31:79:
         f8:84:4d:cf:2c:02:a9:12:f3:0b:54:fd:25:23:64:57:50:90:
         42:5d:04:0a:e2:77:01:0d:cd:dd:08:6a:df:b6:78:12:c0:66:
         05:fe:ae:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:35:31 2026 by rpki-client