This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/C29RUK-qTDoRIZIVb7crIuPreWM.roa
File:                     C29RUK-qTDoRIZIVb7crIuPreWM.roa (raw, json)
Hash identifier:          mdSn+zkOr0EwMF5gIU0hQilaSvKGXBzAoemCMvqxqC4=
Subject key identifier:   0B:6F:51:50:AF:AA:4C:3A:11:21:92:15:6F:B7:2B:22:E3:EB:79:63
Certificate issuer:       /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial:       019B7EA6CF38BF66DEC9856649C34626F96D
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/C29RUK-qTDoRIZIVb7crIuPreWM.roa
Signing time:             Fri 02 Jan 2026 12:20:19 +0000
ROA not before:           Fri 02 Jan 2026 12:20:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     12552
IP address blocks:        193.53.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:cf:38:bf:66:de:c9:85:66:49:c3:46:26:f9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
        Validity
            Not Before: Jan  2 12:20:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0b6f5150afaa4c3a112192156fb72b22e3eb7963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:72:2a:d3:00:23:7e:94:51:1c:47:1b:00:9f:
                    42:85:2a:69:43:86:c4:51:46:14:4d:4b:c0:04:fc:
                    14:b5:3a:b3:4e:ab:9b:ea:b1:40:25:db:3e:14:52:
                    d4:14:5c:7a:24:27:60:e5:4b:a2:cf:9b:60:55:a6:
                    0d:24:e3:5b:52:c9:6a:ab:e5:95:68:b0:1b:35:19:
                    66:d1:d1:fe:a6:04:64:38:64:fd:bd:76:40:0c:7e:
                    99:36:dd:cf:d0:b7:31:44:6d:57:0c:37:c2:65:f6:
                    46:00:15:43:10:2a:9c:05:c7:f5:4a:74:60:94:05:
                    e0:b7:49:ec:e7:e5:49:4c:28:aa:90:08:98:5e:70:
                    55:fa:e9:26:b4:3a:bd:fc:2e:6c:17:80:af:54:96:
                    6a:18:5b:6b:11:91:bc:cc:46:8b:00:45:d6:e5:2e:
                    8d:50:36:9e:d7:40:98:6f:37:bd:68:27:83:ea:43:
                    5f:61:4e:95:3f:7d:14:71:32:d0:6a:f6:58:f5:9c:
                    08:2b:91:ab:74:49:85:db:12:39:21:1c:4f:20:06:
                    d2:ac:37:b3:ae:3d:ed:49:6e:bd:73:41:c8:5d:66:
                    d0:14:63:9f:92:f0:9f:c0:d4:f8:20:b9:5a:05:c5:
                    26:44:60:62:ac:5c:b5:58:c2:46:7d:e7:52:47:3e:
                    fb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6F:51:50:AF:AA:4C:3A:11:21:92:15:6F:B7:2B:22:E3:EB:79:63
            X509v3 Authority Key Identifier:
                keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/C29RUK-qTDoRIZIVb7crIuPreWM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.53.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:c1:c2:f5:f1:08:3b:db:19:07:67:8e:8b:3e:85:39:6d:5c:
         7a:ee:e9:66:1a:69:13:1f:88:6d:57:73:82:2c:0f:85:e6:0a:
         30:66:2f:b1:79:bf:d6:5e:1e:97:9c:87:44:69:77:a1:4b:56:
         d1:32:1e:f9:d6:f0:59:11:0e:cd:1c:0d:75:9f:ce:20:85:18:
         d8:c1:db:3b:89:f3:1e:9f:91:8f:c4:0b:f2:e3:f8:53:62:d7:
         e3:02:91:bd:1b:af:8c:f0:7e:30:d0:3a:81:d4:61:eb:ca:69:
         fd:4d:78:93:52:37:0c:d8:a6:1e:d1:78:d7:1b:0b:52:cc:39:
         b2:ef:10:42:f3:48:be:a4:dc:bb:21:6f:e9:5b:e8:f1:74:f6:
         87:26:a0:b5:e0:c4:9e:1f:fd:af:e1:d6:25:0c:84:ba:7b:26:
         2f:a3:40:71:65:bd:b0:cb:32:38:67:67:11:41:64:74:52:8f:
         88:74:52:cc:6d:ad:39:a1:cc:77:8d:a5:1d:19:22:bf:5c:cb:
         65:e2:8c:8d:9c:92:a5:7b:76:b9:d3:cb:e6:01:d7:6b:e7:49:
         2b:ab:0a:ce:33:57:d3:7f:40:e6:1a:2b:6c:ce:4b:0e:21:c4:
         ec:b9:27:a4:79:54:f8:21:13:60:86:38:17:45:e1:c2:6a:c5:
         9f:dc:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:36:41 2026 by rpki-client