This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/ueTmjKOROZKAhLV8jths8Q6e78A.roa
File:                     ueTmjKOROZKAhLV8jths8Q6e78A.roa (raw, json)
Hash identifier:          6PfU2zb4bTAWv3KqbocQXZb/J47X9GEj5J06gcSrAUE=
Subject key identifier:   B9:E4:E6:8C:A3:91:39:92:80:84:B5:7C:8E:D8:6C:F1:0E:9E:EF:C0
Certificate issuer:       /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial:       019B77C770B839261600ED814064C85BFE3A
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/ueTmjKOROZKAhLV8jths8Q6e78A.roa
Signing time:             Thu 01 Jan 2026 04:18:37 +0000
ROA not before:           Thu 01 Jan 2026 04:18:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60877
IP address blocks:        194.92.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:70:b8:39:26:16:00:ed:81:40:64:c8:5b:fe:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
        Validity
            Not Before: Jan  1 04:18:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b9e4e68ca39139928084b57c8ed86cf10e9eefc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:41:66:42:ef:f6:3e:c0:5c:b8:78:2d:b3:b4:
                    a8:1c:03:89:7b:c4:38:66:27:be:3a:45:7c:e2:3d:
                    cf:30:7a:bb:35:51:28:a1:72:2e:8d:9b:6b:cc:b1:
                    9d:c2:86:0d:84:eb:4d:d9:a7:86:01:24:89:8b:ed:
                    ee:24:df:ab:92:34:fd:20:19:09:81:71:d5:84:39:
                    9b:a6:66:d0:a6:4d:5a:e2:6f:e1:9c:19:0b:b2:37:
                    ed:41:ef:d5:ce:3b:f7:a4:57:03:0b:73:dd:d3:8a:
                    18:58:c3:db:e0:92:7b:da:8b:5f:f4:c2:16:09:4d:
                    3c:43:9f:bc:4b:94:55:95:56:70:32:98:8d:7e:d3:
                    bb:4e:a5:0f:5e:33:31:b2:26:c1:78:1c:51:9b:ac:
                    c7:11:c9:b5:34:6e:2c:48:1f:86:10:5a:70:b1:64:
                    e5:32:bc:84:78:6a:e3:bf:99:99:a5:53:d0:5e:ee:
                    73:b3:44:f3:c6:45:28:aa:14:64:f0:ec:84:d1:79:
                    fd:17:f1:15:1a:c8:a5:18:e8:a0:0a:5d:8c:e3:8a:
                    44:f7:bf:b0:11:fd:0d:6a:01:35:11:9f:2b:99:1b:
                    90:b1:42:e4:fc:f1:bc:ae:be:a3:92:53:ba:a5:c6:
                    df:ef:54:62:6d:3b:86:00:68:a0:c2:e5:68:f1:d6:
                    47:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E4:E6:8C:A3:91:39:92:80:84:B5:7C:8E:D8:6C:F1:0E:9E:EF:C0
            X509v3 Authority Key Identifier:
                keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/ueTmjKOROZKAhLV8jths8Q6e78A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.92.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:f5:1f:43:be:58:62:d6:e1:18:ed:10:66:66:28:5a:fe:5b:
         da:33:73:b3:e0:34:89:3c:bc:61:7e:54:f2:95:83:11:3b:33:
         fd:11:21:46:0f:3f:ea:06:b5:ab:db:d7:2f:62:42:e3:dc:c5:
         7e:d9:60:08:d1:81:7c:f9:ce:ba:4b:df:9b:ea:9d:b1:01:2a:
         5d:aa:5a:43:6a:cc:1e:43:79:19:ae:38:df:7d:53:fe:bc:a1:
         1e:b3:27:68:ac:1e:82:93:a8:61:ee:95:e3:1c:89:6a:37:00:
         50:55:e0:6c:c7:55:6e:c2:2b:62:50:7a:0f:4d:58:56:a1:bd:
         48:02:c7:d2:41:71:df:13:05:12:47:d9:65:4b:bd:3b:49:41:
         8e:a7:a7:68:d9:19:00:bc:3d:dc:99:c6:c2:1e:65:ea:db:97:
         25:6a:ca:54:ad:08:79:2f:0a:c6:7f:9c:22:46:48:e7:6c:a4:
         7b:7b:93:02:a5:6e:b9:8e:72:8d:e7:9c:3b:44:ed:3e:e1:b2:
         14:8d:16:d4:2e:1c:bc:5d:a4:0d:66:62:88:78:43:10:82:23:
         c1:8b:f3:1a:51:42:eb:94:37:98:48:12:e4:49:2b:6d:7b:03:
         34:4d:91:51:e9:2e:3a:ba:4f:18:f0:27:e2:fd:d4:29:b4:be:
         e0:0e:70:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:43:12 2026 by rpki-client