This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/uEDcfQUKjvJ-T6m4BFBmAxGw1pE.roa
File:                     uEDcfQUKjvJ-T6m4BFBmAxGw1pE.roa (raw, json)
Hash identifier:          RPlWNsPzW+HTVReSUqehc6xhgHlJTXox9YoPdrDPgvw=
Subject key identifier:   B8:40:DC:7D:05:0A:8E:F2:7E:4F:A9:B8:04:50:66:03:11:B0:D6:91
Certificate issuer:       /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial:       019B7C801D422572E2794468F7ABEF316CC9
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/uEDcfQUKjvJ-T6m4BFBmAxGw1pE.roa
Signing time:             Fri 02 Jan 2026 02:18:49 +0000
ROA not before:           Fri 02 Jan 2026 02:18:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39931
IP address blocks:        83.206.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:1d:42:25:72:e2:79:44:68:f7:ab:ef:31:6c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
        Validity
            Not Before: Jan  2 02:18:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b840dc7d050a8ef27e4fa9b80450660311b0d691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e4:19:a0:3f:8b:f4:ed:aa:8b:ad:bf:cf:9b:
                    3e:98:ee:3d:d1:27:5b:c6:54:d3:f7:06:1d:02:12:
                    9a:28:a2:03:c7:84:92:7b:ee:cd:12:a0:ed:48:bc:
                    70:12:49:c5:44:64:09:de:a3:70:a7:62:bc:88:11:
                    d8:4a:ba:ac:40:6c:db:ba:1b:4e:76:c7:e2:b6:b6:
                    28:54:bc:35:55:0c:22:40:8a:27:51:12:3e:a0:32:
                    8d:e8:dc:24:59:ef:c4:8f:55:43:f7:44:85:94:66:
                    34:cd:65:68:ba:a7:97:76:1d:72:61:97:33:20:28:
                    52:97:8e:5f:48:99:9c:e5:02:d4:f4:e6:df:07:2b:
                    95:63:b9:be:1c:f0:ea:5e:46:18:73:96:78:4f:a6:
                    08:e9:52:60:7a:bb:e6:3f:23:d3:86:5c:8b:d9:0f:
                    e3:61:13:78:8b:fa:d5:a0:5c:e8:18:bd:1e:56:bc:
                    c2:e1:f7:f9:a5:30:b9:e7:f2:a9:b5:4e:2c:ef:10:
                    74:28:34:82:49:6d:33:0c:2d:e7:79:a9:53:8d:64:
                    2c:dc:3a:f1:e7:56:64:8c:2c:cf:b3:aa:32:ed:ed:
                    22:88:d9:fb:56:b1:2d:12:f6:2d:67:68:6f:0c:72:
                    00:bf:c3:83:6f:fe:aa:b5:5d:6a:c9:96:8c:dc:ba:
                    2a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:40:DC:7D:05:0A:8E:F2:7E:4F:A9:B8:04:50:66:03:11:B0:D6:91
            X509v3 Authority Key Identifier:
                keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/uEDcfQUKjvJ-T6m4BFBmAxGw1pE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.206.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:c4:61:74:a1:79:bb:c2:dd:5c:8d:31:bc:77:22:d6:49:33:
         74:f5:f5:19:c5:77:10:e8:db:bf:f4:48:52:6b:70:b4:2c:54:
         4b:f7:e7:77:e5:60:6f:97:97:2e:a9:fb:ad:8a:b5:aa:03:48:
         a7:03:70:64:06:28:cc:d4:5e:29:e9:5e:30:a3:6f:35:53:da:
         2e:9a:9e:de:a1:67:b8:27:71:2c:63:45:a2:9b:54:78:34:06:
         a1:08:53:5c:6f:33:e2:19:6f:e8:ec:e0:ef:d1:ea:51:2c:3d:
         68:18:6a:c2:cd:ce:b2:b2:80:85:9f:75:b1:3c:67:f8:01:76:
         5b:ab:28:82:af:5f:3e:34:00:05:24:4b:8f:9e:f4:0b:68:06:
         4b:1e:86:06:fa:22:db:df:5d:0e:c4:bf:b9:ac:fa:f2:36:58:
         49:0b:91:37:9a:0e:b5:57:5c:b9:8e:c7:75:14:fd:b5:06:b9:
         1d:0c:d0:61:6c:c6:03:73:8b:70:4d:00:8e:a7:ea:b3:b9:23:
         a3:45:5e:c7:9a:56:24:d2:a4:e6:14:93:e6:2e:ce:73:06:0f:
         4e:21:e3:00:aa:e2:b7:93:e4:f3:04:62:0a:20:3e:2d:e7:1c:
         3f:5a:ef:f3:b0:58:40:cc:a9:8a:69:b3:45:67:e4:9f:62:a1:
         ea:cc:92:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8gB1CJXLieURo96vvMWzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjYwMTAyMDIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODQwZGM3ZDA1MGE4ZWYyN2U0ZmE5YjgwNDUwNjYwMzExYjBkNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+QZoD+L9O2qi62/z5s+mO490Sdb
xlTT9wYdAhKaKKIDx4SSe+7NEqDtSLxwEknFRGQJ3qNwp2K8iBHYSrqsQGzbuhtO
dsfitrYoVLw1VQwiQIonURI+oDKN6NwkWe/Ej1VD90SFlGY0zWVouqeXdh1yYZcz
IChSl45fSJmc5QLU9ObfByuVY7m+HPDqXkYYc5Z4T6YI6VJgervmPyPThlyL2Q/j
YRN4i/rVoFzoGL0eVrzC4ff5pTC55/KptU4s7xB0KDSCSW0zDC3nealTjWQs3Drx
51ZkjCzPs6oy7e0iiNn7VrEtEvYtZ2hvDHIAv8ODb/6qtV1qyZaM3LoqbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLhA3H0FCo7yfk+puARQZgMRsNaRMB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvdUVEY2ZRVUtqdkotVDZtNEJGQm1BeEd3MXBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU868MA0G
CSqGSIb3DQEBCwUAA4IBAQAxxGF0oXm7wt1cjTG8dyLWSTN09fUZxXcQ6Nu/9EhS
a3C0LFRL9+d35WBvl5cuqfutirWqA0inA3BkBijM1F4p6V4wo281U9oump7eoWe4
J3EsY0Wim1R4NAahCFNcbzPiGW/o7ODv0epRLD1oGGrCzc6ysoCFn3WxPGf4AXZb
qyiCr18+NAAFJEuPnvQLaAZLHoYG+iLb310OxL+5rPryNlhJC5E3mg61V1y5jsd1
FP21BrkdDNBhbMYDc4twTQCOp+qzuSOjRV7HmlYk0qTmFJPmLs5zBg9OIeMAquK3
k+TzBGIKID4t5xw/Wu/zsFhAzKmKabNFZ+SfYqHqzJI3
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:31:51 2026 by rpki-client