This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/A2uu_VkECN7Wivk8Q3Y5wWZgdfA.roa
File:                     A2uu_VkECN7Wivk8Q3Y5wWZgdfA.roa (raw, json)
Hash identifier:          TKnnwgB4D2OW3syeJW6W6YQDxOjqWLylQxuIymjfrLw=
Subject key identifier:   03:6B:AE:FD:59:04:08:DE:D6:8A:F9:3C:43:76:39:C1:66:60:75:F0
Certificate issuer:       /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial:       019ACBCDC5D3505BA7BE58415210F9D5375A
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/A2uu_VkECN7Wivk8Q3Y5wWZgdfA.roa
Signing time:             Fri 28 Nov 2025 18:50:51 +0000
ROA not before:           Fri 28 Nov 2025 18:50:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     59802
IP address blocks:        2a05:19c0:2::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:cb:cd:c5:d3:50:5b:a7:be:58:41:52:10:f9:d5:37:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
        Validity
            Not Before: Nov 28 18:50:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=036baefd590408ded68af93c437639c1666075f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:7f:2d:8d:ae:8f:19:35:5f:71:2c:11:d6:
                    ea:8b:0a:67:8c:0a:43:76:59:0c:7d:04:93:20:0c:
                    26:b4:2d:ef:08:7d:15:7b:63:ab:7f:30:15:7d:af:
                    96:8d:78:94:51:b6:0a:ac:75:0a:55:6b:09:d2:a2:
                    7c:d1:c8:94:85:88:59:2f:c7:ca:67:74:c4:65:43:
                    ba:22:3c:43:eb:c4:b0:56:99:23:50:73:34:a4:db:
                    0c:85:3e:58:2b:d3:e1:bb:02:93:f6:60:2d:33:9a:
                    18:e0:8f:4e:42:de:41:c1:f9:4b:f6:e8:97:2a:49:
                    01:c7:61:d5:c4:af:a6:47:62:93:8f:40:80:66:40:
                    35:15:6e:0a:55:65:1b:ac:88:ab:b5:60:a8:c5:15:
                    d4:9f:df:82:22:99:5b:a7:e5:9b:1e:66:63:3e:92:
                    b4:9a:b9:ab:35:70:66:6f:a6:7a:a5:55:9e:7f:3f:
                    62:02:46:30:e5:ce:14:0e:bd:25:bc:9c:be:07:cd:
                    59:fd:9c:5c:61:9b:d7:45:b4:5b:8a:d3:2d:5e:9e:
                    c8:72:4f:66:2f:79:4b:89:c0:c3:7c:4f:9c:29:ad:
                    f4:11:2f:3f:0e:fe:a7:59:1d:50:02:7d:6a:83:c4:
                    27:44:22:00:b6:77:b0:d4:27:05:4b:be:e3:67:d6:
                    f4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6B:AE:FD:59:04:08:DE:D6:8A:F9:3C:43:76:39:C1:66:60:75:F0
            X509v3 Authority Key Identifier:
                keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/A2uu_VkECN7Wivk8Q3Y5wWZgdfA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:19c0:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         65:93:86:60:b1:86:59:54:e3:af:40:8b:6d:f6:3b:d4:6e:61:
         48:99:d9:62:44:0a:da:40:d9:76:2d:bc:d5:b3:82:85:97:2e:
         5a:d2:be:f1:2b:7e:ab:42:30:49:99:cd:34:2c:a0:9c:0d:b4:
         ea:7b:c0:32:53:ce:67:fb:5e:93:36:f7:ac:8e:e1:ee:97:25:
         53:fb:28:fa:b1:66:39:b2:3d:14:d4:86:74:5c:6e:3c:46:a5:
         cd:9d:02:9b:1d:e8:9a:c9:db:8a:12:e0:c2:3d:19:87:fb:c4:
         bf:6c:26:dd:d3:98:9d:07:cc:17:83:de:d5:3f:17:00:8b:eb:
         3b:4c:78:1d:de:70:c4:76:a6:c6:30:c4:b1:8d:7a:33:b0:94:
         50:d9:8e:e0:e4:9e:2b:a2:0e:5f:bb:1b:50:76:d8:7c:d5:3b:
         18:bc:f9:d4:2e:8e:0b:a8:9f:df:b3:5b:5f:8b:ce:c1:4d:f0:
         c2:a8:a9:3d:b5:03:75:c6:ac:97:5a:9e:c4:13:18:4f:b1:52:
         cc:76:8d:d1:57:27:d3:b4:33:67:f1:1a:be:28:a1:d7:11:14:
         91:91:bf:7f:9f:23:72:26:1c:41:86:a6:d1:56:4c:9c:7b:f1:
         c3:4c:10:eb:da:82:72:57:0f:7f:04:4c:db:cd:6e:4d:ec:94:
         f5:0a:23:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:45:21 2025 by rpki-client