This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/UikTrUC-2DsDHw5Izq7A013vsK4.roa
File:                     UikTrUC-2DsDHw5Izq7A013vsK4.roa (raw, json)
Hash identifier:          WWeo5jlTxNVbDlt52GNnE81h3OK/EnTtfPjD3xyIbrg=
Subject key identifier:   52:29:13:AD:40:BE:D8:3B:03:1F:0E:48:CE:AE:C0:D3:5D:EF:B0:AE
Certificate issuer:       /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial:       019BEFC6EEE7EBB7D513FAC3FB830C3A479E
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/UikTrUC-2DsDHw5Izq7A013vsK4.roa
Signing time:             Sat 24 Jan 2026 11:32:30 +0000
ROA not before:           Sat 24 Jan 2026 11:32:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216157
IP address blocks:        2a05:f684::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ef:c6:ee:e7:eb:b7:d5:13:fa:c3:fb:83:0c:3a:47:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
        Validity
            Not Before: Jan 24 11:32:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=522913ad40bed83b031f0e48ceaec0d35defb0ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:96:e6:41:2b:2a:6a:b9:00:10:b9:d2:66:72:
                    32:cd:7e:bb:33:6a:05:9b:31:96:34:43:e0:dd:2f:
                    f3:a7:41:38:ac:1f:7e:43:7b:e0:36:ce:55:58:8b:
                    3c:66:34:e6:f6:15:03:af:2e:02:87:e8:30:df:b8:
                    a8:ac:4b:b6:6f:20:80:1b:f0:70:e7:83:46:c2:ba:
                    62:0e:9c:3c:49:6e:a0:c8:4d:4f:82:f0:40:7c:47:
                    64:62:d5:2c:9c:67:2f:bf:92:02:a9:1b:87:9d:22:
                    e1:93:aa:60:be:34:17:dd:5d:4f:a3:fb:23:dc:5f:
                    99:97:b5:c6:aa:84:ca:5a:3b:60:d6:4f:49:3b:11:
                    29:35:11:dd:aa:c8:0a:b8:1f:71:1c:3e:7c:ea:c3:
                    a4:ef:60:20:e8:78:16:fb:7e:2c:bf:7c:d6:cf:41:
                    de:c0:ba:a4:ef:83:38:45:7c:37:8c:91:4d:98:38:
                    37:68:71:20:82:f8:0d:60:00:d2:1a:e0:0c:87:c8:
                    a6:c4:91:ae:85:08:80:c7:8d:fa:2e:b0:9a:f6:ce:
                    0d:a1:11:14:e4:86:69:b8:d0:4a:46:d4:95:5c:34:
                    ac:4b:79:02:1d:9e:91:1d:cd:44:3e:25:89:3d:ce:
                    8d:bc:1a:68:20:86:60:8b:59:45:23:b4:04:05:1e:
                    9a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:29:13:AD:40:BE:D8:3B:03:1F:0E:48:CE:AE:C0:D3:5D:EF:B0:AE
            X509v3 Authority Key Identifier:
                keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/UikTrUC-2DsDHw5Izq7A013vsK4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:f684::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:9d:7b:7c:9e:ef:f2:ca:db:38:cb:a7:7d:40:f1:43:14:6e:
         e3:33:74:2d:6d:bf:8a:93:70:f4:2a:d1:f9:09:c6:e2:f9:42:
         89:bc:2f:b4:76:9c:ae:51:8a:f9:8b:c6:17:35:aa:03:3b:38:
         38:cc:53:f8:e9:f8:ea:2a:d1:c2:dd:ae:e3:cd:f5:e0:03:29:
         d2:ec:70:97:9b:04:64:94:65:4a:f7:bc:b8:fa:fa:e2:c8:cf:
         84:63:2f:82:10:a3:22:b1:2a:5d:b4:3f:98:7f:b1:41:d5:50:
         c6:a5:41:1c:0a:2c:90:64:83:66:93:d2:f7:fc:19:c8:f4:f0:
         93:1d:7e:30:d7:7e:53:6b:20:7a:45:80:aa:84:a2:bf:71:c1:
         d1:29:14:6e:74:65:da:d9:38:b9:18:33:ae:f0:af:0e:b9:1f:
         01:ab:2f:a8:dc:bf:4d:6c:b3:99:7c:11:e6:d9:bb:7a:d1:cc:
         fd:6d:17:68:5c:b2:58:f3:17:80:58:b5:4e:03:59:ed:ad:e5:
         6c:7b:22:1b:07:b9:cc:c0:c2:43:bf:99:c9:a6:59:92:f0:9e:
         2d:16:e9:3c:b3:d1:69:38:53:ca:21:e8:fe:9e:4a:9a:10:87:
         27:cd:6f:a7:07:30:49:b3:3c:2d:4e:f3:44:b6:06:a3:70:b5:
         fe:1b:04:42
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZvvxu7n67fVE/rD+4MMOkeeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy
ZmY0MTQwHhcNMjYwMTI0MTEzMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjI5MTNhZDQwYmVkODNiMDMxZjBlNDhjZWFlYzBkMzVkZWZiMGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppbmQSsqarkAELnSZnIyzX67M2oF
mzGWNEPg3S/zp0E4rB9+Q3vgNs5VWIs8ZjTm9hUDry4Ch+gw37iorEu2byCAG/Bw
54NGwrpiDpw8SW6gyE1PgvBAfEdkYtUsnGcvv5ICqRuHnSLhk6pgvjQX3V1Po/sj
3F+Zl7XGqoTKWjtg1k9JOxEpNRHdqsgKuB9xHD586sOk72Ag6HgW+34sv3zWz0He
wLqk74M4RXw3jJFNmDg3aHEggvgNYADSGuAMh8imxJGuhQiAx436LrCa9s4NoREU
5IZpuNBKRtSVXDSsS3kCHZ6RHc1EPiWJPc6NvBpoIIZgi1lFI7QEBR6aTQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFIpE61Avtg7Ax8OSM6uwNNd77CuMB8GA1UdIwQY
MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt
Y2ZjNDZhNzZlYzc4LzEvVWlrVHJVQy0yRHNESHc1SXpxN0EwMTN2c0s0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4
LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgX2hDAN
BgkqhkiG9w0BAQsFAAOCAQEAD517fJ7v8srbOMunfUDxQxRu4zN0LW2/ipNw9CrR
+QnG4vlCibwvtHacrlGK+YvGFzWqAzs4OMxT+On46irRwt2u48314AMp0uxwl5sE
ZJRlSve8uPr64sjPhGMvghCjIrEqXbQ/mH+xQdVQxqVBHAoskGSDZpPS9/wZyPTw
kx1+MNd+U2sgekWAqoSiv3HB0SkUbnRl2tk4uRgzrvCvDrkfAasvqNy/TWyzmXwR
5tm7etHM/W0XaFyyWPMXgFi1TgNZ7a3lbHsiGwe5zMDCQ7+ZyaZZkvCeLRbpPLPR
aThTyiHo/p5KmhCHJ81vpwcwSbM8LU7zRLYGo3C1/hsEQg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:33:21 2026 by rpki-client