This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Uwap_5QTseg9qxMEbFXdm-IWxOE.roa
File:                     Uwap_5QTseg9qxMEbFXdm-IWxOE.roa (raw, json)
Hash identifier:          T7xynhxjJFiMbYbvQU4V5wYc52UWGFb5cfwBwai4vE0=
Subject key identifier:   53:06:A9:FF:94:13:B1:E8:3D:AB:13:04:6C:55:DD:9B:E2:16:C4:E1
Certificate issuer:       /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial:       019B7C8011A4556E15C32A94C70400160677
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Uwap_5QTseg9qxMEbFXdm-IWxOE.roa
Signing time:             Fri 02 Jan 2026 02:18:46 +0000
ROA not before:           Fri 02 Jan 2026 02:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     21304
IP address blocks:        194.3.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:11:a4:55:6e:15:c3:2a:94:c7:04:00:16:06:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
        Validity
            Not Before: Jan  2 02:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5306a9ff9413b1e83dab13046c55dd9be216c4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ab:9f:6d:8e:f7:10:a3:f3:9f:87:65:54:21:
                    e4:db:b3:6f:da:a4:c4:f8:07:bc:30:51:48:9a:c8:
                    53:1e:fa:d7:12:ee:0d:1d:f3:02:6a:2a:18:96:d4:
                    43:a4:8d:de:b0:be:a2:9b:eb:61:3d:f7:f8:c5:46:
                    ea:93:8d:eb:8a:65:56:e8:66:37:8d:78:e2:a8:7e:
                    0a:a9:ba:b0:b3:14:c3:c3:f4:d8:1f:e2:11:6f:00:
                    62:fb:da:de:74:1a:82:3b:e1:4c:16:70:15:57:70:
                    18:76:38:12:1f:2a:4d:38:22:8f:5c:6a:63:d1:a4:
                    17:0d:60:63:74:c0:31:71:d7:1d:c8:40:40:fb:05:
                    0c:87:fe:47:ff:91:2b:20:2d:4f:47:83:8c:2f:2b:
                    c8:66:35:ca:2d:2e:40:91:45:1b:e5:3f:47:c8:c2:
                    b9:5d:45:24:26:b0:2a:3a:f7:30:a0:e4:98:7a:db:
                    38:27:8f:68:32:a2:c5:a8:2b:47:c3:85:21:3b:12:
                    82:5a:5d:90:14:da:49:8a:85:68:27:0c:8d:60:c1:
                    e7:3d:e3:51:75:ea:43:e0:22:e3:2b:04:59:7a:67:
                    c8:af:b0:de:55:70:3d:16:ba:46:7b:92:ef:de:d8:
                    53:aa:b0:63:fe:38:04:96:b0:5d:ad:bf:62:e5:6b:
                    0a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:06:A9:FF:94:13:B1:E8:3D:AB:13:04:6C:55:DD:9B:E2:16:C4:E1
            X509v3 Authority Key Identifier:
                keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Uwap_5QTseg9qxMEbFXdm-IWxOE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.3.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:9a:e0:e1:69:f9:c2:93:97:3e:23:42:16:82:16:11:05:41:
         af:dc:5c:38:36:a5:45:17:0e:27:39:66:c0:4b:af:23:f7:49:
         4f:d5:34:54:bd:24:4b:fd:d5:bd:bb:59:d7:6d:92:71:9c:a2:
         27:91:74:00:d2:36:ae:f1:9f:a3:e9:f8:1b:55:ad:68:3d:ad:
         5c:87:f6:7e:1a:ef:54:73:cf:f8:8c:da:fd:6a:a7:a6:eb:ef:
         08:f2:22:2f:db:d0:ec:3c:03:34:ef:d2:db:89:3c:74:24:f9:
         bd:ba:86:8d:65:96:da:82:dd:8a:38:50:11:a6:85:ba:bb:df:
         9a:56:8b:81:13:1c:8b:d0:a8:d7:a3:3f:38:77:f2:7c:c8:c0:
         ce:40:b5:ed:18:18:48:d3:ec:8e:c2:79:cd:ab:7a:fc:03:1f:
         28:41:b8:47:3c:be:e6:31:52:9c:c8:9e:68:fb:30:21:ac:27:
         42:58:72:11:b2:9e:3f:b5:81:53:d8:a4:97:6a:f3:af:86:e0:
         b4:74:62:51:c1:18:d0:f8:9a:31:ee:07:ee:43:3d:d7:5b:71:
         6f:86:ef:42:d2:6f:bd:51:42:47:e0:71:42:c4:b0:b1:f8:df:
         6f:57:48:34:7d:ea:ef:5e:76:a6:df:36:3e:52:1e:f0:de:4c:
         d4:ca:4d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:01:36 2026 by rpki-client