This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/urqr3QuscnM9Gexd4HqCzda04Hs.roa
File:                     urqr3QuscnM9Gexd4HqCzda04Hs.roa (raw, json)
Hash identifier:          +eFtvrmvtLAGjqTjuO2JbNNCYDwjSBJV6qDXXX+HoPY=
Subject key identifier:   BA:BA:AB:DD:0B:AC:72:73:3D:19:EC:5D:E0:7A:82:CD:D6:B4:E0:7B
Certificate issuer:       /CN=255876412d20fbb6cab823481782ac47703b4404
Certificate serial:       019B7B36C84DDB6E37E22BE1035199E8FBF5
Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/urqr3QuscnM9Gexd4HqCzda04Hs.roa
Signing time:             Thu 01 Jan 2026 20:19:06 +0000
ROA not before:           Thu 01 Jan 2026 20:19:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204901
IP address blocks:        2a01:ffc6:8000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:c8:4d:db:6e:37:e2:2b:e1:03:51:99:e8:fb:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255876412d20fbb6cab823481782ac47703b4404
        Validity
            Not Before: Jan  1 20:19:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=babaabdd0bac72733d19ec5de07a82cdd6b4e07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:97:56:71:c8:99:b2:0f:3c:3b:62:fd:de:e8:
                    58:7b:88:db:c8:89:3e:97:ea:4e:b6:cf:83:9d:1d:
                    64:c4:fa:a0:e3:e5:94:b8:6c:29:eb:4d:75:38:1f:
                    dc:10:e5:1b:6c:d2:36:35:a7:ee:47:b8:6b:97:b0:
                    59:dd:d3:a2:1f:45:7e:7f:93:ae:8e:4a:e6:75:b8:
                    79:65:c1:0c:b1:ba:c6:3e:ad:06:7a:bb:bd:81:3e:
                    1d:00:5d:e4:ed:1b:44:10:e2:0b:7e:82:fe:44:fd:
                    ba:3b:27:81:29:3d:d6:3f:56:c1:8e:5c:51:f6:b0:
                    99:75:f1:91:6f:81:7c:1d:5b:76:cf:0c:2c:67:0b:
                    56:d8:5d:66:71:1e:80:9f:ce:ba:54:70:a8:42:43:
                    c2:cc:e8:fc:41:42:58:09:d6:90:31:47:de:9a:8e:
                    8c:9b:e1:3e:2d:d3:20:54:8b:a3:4e:e9:44:26:48:
                    7f:b1:ad:f0:68:d6:df:9b:2e:45:fc:00:51:f1:e5:
                    ee:b0:dd:4d:15:b2:c6:30:fa:10:1d:a0:61:ab:e7:
                    fd:39:49:2e:0a:db:db:ab:66:88:4a:84:dc:d3:05:
                    6b:43:b4:6f:90:67:18:3f:74:e2:09:65:7f:83:d6:
                    75:b1:1f:05:23:2c:d2:8d:31:6d:1d:e7:5e:2a:13:
                    14:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BA:AB:DD:0B:AC:72:73:3D:19:EC:5D:E0:7A:82:CD:D6:B4:E0:7B
            X509v3 Authority Key Identifier:
                keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/urqr3QuscnM9Gexd4HqCzda04Hs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:ffc6:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b5:4d:b4:93:47:64:ac:52:a5:ad:a4:28:7c:2b:71:9a:f1:5d:
         16:37:04:27:34:79:48:bf:9f:7e:df:9c:7d:81:bc:66:a6:5a:
         7e:29:14:72:1d:12:3d:72:50:60:80:90:89:33:35:94:f3:f6:
         41:0e:59:a8:7f:4f:2d:89:84:5a:5f:d3:a0:7a:2d:79:37:3c:
         0b:fc:17:76:aa:38:2e:19:3e:45:c7:87:61:95:9a:20:58:6b:
         ca:30:b7:90:d8:e6:64:60:1c:3a:61:bd:e6:27:e8:7e:01:04:
         79:b2:15:83:fc:32:6c:9c:a8:2a:13:fe:6e:56:99:ac:5a:7d:
         f4:a0:ea:93:7d:5e:7b:3d:6f:fe:79:66:0d:99:17:b7:df:e7:
         3e:0d:e7:ff:07:82:73:6e:c2:5c:b4:60:cb:aa:45:06:66:ec:
         78:44:43:70:60:0f:bc:c4:20:cd:09:8c:87:0f:f5:d2:01:b6:
         e6:93:1e:01:3f:ac:6a:a7:7d:51:64:19:dd:50:58:53:94:38:
         15:e5:63:7c:c5:59:80:3a:ca:ac:2d:7a:fd:d7:78:5f:16:97:
         fe:bd:de:6c:98:f7:f9:34:85:85:74:af:1d:e5:6b:42:f2:49:
         85:3b:3c:ab:07:25:4e:d1:2b:13:d2:4e:9f:f0:45:bf:3c:34:
         07:7f:49:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:16:45 2026 by rpki-client