This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/UzOrLWhUOmxJo-9-GopnHirI6rA.roa
File:                     UzOrLWhUOmxJo-9-GopnHirI6rA.roa (raw, json)
Hash identifier:          ivvlDNqDoglSy4St2MYsnKCj1fkTi6UxACy5meF4qEA=
Subject key identifier:   53:33:AB:2D:68:54:3A:6C:49:A3:EF:7E:1A:8A:67:1E:2A:C8:EA:B0
Certificate issuer:       /CN=12779763ad3f1f4b5a4a0552c6039496bcff3a54
Certificate serial:       019B78A36ED8C9E754EDEA81E79C074B00E8
Authority key identifier: 12:77:97:63:AD:3F:1F:4B:5A:4A:05:52:C6:03:94:96:BC:FF:3A:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EneXY60_H0taSgVSxgOUlrz_OlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/UzOrLWhUOmxJo-9-GopnHirI6rA.roa
Signing time:             Thu 01 Jan 2026 08:18:55 +0000
ROA not before:           Thu 01 Jan 2026 08:18:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48129
IP address blocks:        91.210.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EneXY60_H0taSgVSxgOUlrz_OlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:6e:d8:c9:e7:54:ed:ea:81:e7:9c:07:4b:00:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12779763ad3f1f4b5a4a0552c6039496bcff3a54
        Validity
            Not Before: Jan  1 08:18:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5333ab2d68543a6c49a3ef7e1a8a671e2ac8eab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:70:d6:a5:58:ed:26:9e:d9:a5:90:cd:4b:6e:
                    8a:07:6b:21:87:93:b6:9d:20:3b:2e:e9:5e:52:f2:
                    6f:ab:f3:1c:19:f0:6a:a2:6b:bc:b9:4e:c4:43:b7:
                    81:57:1a:1a:f4:7c:fe:9d:9c:7e:40:40:fa:26:28:
                    f1:8a:e3:51:4c:c6:f7:94:98:a1:9b:fe:fe:fb:6e:
                    be:a3:58:b3:2b:ed:af:9d:e3:91:aa:4f:c9:2d:2f:
                    d8:82:d7:f0:21:38:0b:90:ed:ce:7d:c0:ad:89:b3:
                    66:0e:07:d5:52:c3:ec:37:39:0a:1d:28:28:a5:10:
                    eb:d5:43:8a:1a:63:aa:97:3b:3a:bb:55:de:e8:3c:
                    ad:b5:f5:09:05:dc:96:6a:2c:fa:38:c5:eb:07:60:
                    ad:03:a6:2a:70:e2:34:15:31:2f:27:31:fa:b5:cc:
                    be:47:c8:52:4d:2f:d6:bf:0f:7b:7d:e0:bf:ce:38:
                    b6:32:a8:d1:68:90:02:c4:df:3d:33:bb:a0:51:83:
                    a5:5f:1e:b0:04:06:b4:3a:00:c6:68:c2:b9:2d:d5:
                    52:cf:be:0d:6e:27:17:b1:1e:86:91:66:08:6d:ad:
                    33:98:f8:7a:e1:92:96:01:aa:a7:12:86:82:9a:a0:
                    e3:c9:02:a2:99:7a:1a:a0:3e:a7:43:ea:df:a0:68:
                    7e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:33:AB:2D:68:54:3A:6C:49:A3:EF:7E:1A:8A:67:1E:2A:C8:EA:B0
            X509v3 Authority Key Identifier:
                keyid:12:77:97:63:AD:3F:1F:4B:5A:4A:05:52:C6:03:94:96:BC:FF:3A:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EneXY60_H0taSgVSxgOUlrz_OlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/UzOrLWhUOmxJo-9-GopnHirI6rA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.210.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:17:46:20:98:80:a9:5b:0d:3d:1b:1c:01:ec:d2:fe:fb:ea:
         46:4a:d5:92:0b:ff:87:b0:29:2c:70:a8:d8:4e:40:27:47:f9:
         22:26:9e:ee:14:a5:73:e6:24:db:6a:6b:0e:03:ff:db:6f:13:
         08:d0:96:cd:2c:76:3d:3b:71:8d:ef:c3:fc:bf:5e:be:6e:1c:
         a5:9c:b7:81:0a:b2:81:56:17:87:8b:9f:f5:e9:44:4f:83:58:
         94:b6:90:70:75:87:24:e9:6d:28:4a:18:dc:28:5e:b8:80:2a:
         8b:a3:ea:dc:66:30:17:13:7a:16:8a:55:0a:02:f0:d9:22:a2:
         f5:48:6a:30:90:81:46:bc:10:6d:6d:a5:7f:cb:2d:5a:65:ef:
         2b:64:10:9a:e7:48:a8:6d:b4:4d:09:fd:b9:e7:3d:3f:90:9c:
         ff:f9:0a:93:dd:9e:0f:94:6e:2f:fd:1e:3d:b0:b3:b3:9b:f1:
         b4:5a:49:e9:b9:2d:7c:c3:dc:16:3e:a4:7b:f0:3f:29:ca:86:
         3f:2c:22:98:57:81:81:e2:a1:cb:0c:22:a4:fe:a2:ef:18:85:
         c9:ac:da:25:5c:22:30:1f:d1:11:8e:36:f4:7d:cf:6e:50:ef:
         68:7d:48:1c:c9:8a:75:82:3e:e5:b0:0e:c8:28:8a:c8:9a:f9:
         08:8e:b4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:38:39 2026 by rpki-client