This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-uetEJBUFWGRGSNJ4_guHGYM9gs.roa
File:                     1-uetEJBUFWGRGSNJ4_guHGYM9gs.roa (raw, json)
Hash identifier:          xm2rAyteuNYqYgOOCtOdXTDRLeHx1vQxgx4K4LA/4+Q=
Subject key identifier:   FA:E7:AD:10:90:54:15:61:91:19:23:49:E3:F8:2E:1C:66:0C:F6:0B
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019B08452D71BD45DB5B8F4BEE3D5F67E562
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-uetEJBUFWGRGSNJ4_guHGYM9gs.roa
Signing time:             Wed 10 Dec 2025 12:38:29 +0000
ROA not before:           Wed 10 Dec 2025 12:38:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     12389
IP address blocks:        2a06:a600::/29 maxlen: 29
                          2a06:bf40::/29 maxlen: 29
                          2a07:95c0::/29 maxlen: 29
                          2a09:17c3::/32 maxlen: 32
                          2a0c:d380::/29 maxlen: 29
                          2a0d:8f80::/29 maxlen: 29
                          2a0e:2440::/29 maxlen: 29
                          2a0f:3d83::/32 maxlen: 32
                          2a0f:3d86:11::/48 maxlen: 48
                          2a0f:7d01::/32 maxlen: 32
                          2a0f:bc05::/32 maxlen: 32
                          2a0f:ee00::/29 maxlen: 29
                          2a10:3140::/29 maxlen: 29
                          2a11:4e80::/29 maxlen: 29
                          2a12:d100::/29 maxlen: 29
                          2a13:2bc0::/29 maxlen: 29
                          2a13:8f00::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 12:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:08:45:2d:71:bd:45:db:5b:8f:4b:ee:3d:5f:67:e5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Dec 10 12:38:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fae7ad109054156191192349e3f82e1c660cf60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:18:db:84:52:6c:1d:c0:67:97:59:53:f0:75:
                    6b:66:2c:99:3f:86:36:04:fa:49:70:d1:86:92:1d:
                    a1:b3:01:ff:77:5e:bb:b7:53:e6:93:f6:2b:fa:ee:
                    43:11:7f:27:05:d3:12:43:11:7d:e4:eb:90:c2:cc:
                    88:32:52:45:60:53:b1:70:82:ba:23:e1:10:e2:94:
                    3f:d0:e0:9f:17:73:18:96:66:7d:ab:8b:0f:39:3a:
                    bf:57:3e:35:26:ee:de:c6:57:41:14:b1:09:b1:b6:
                    19:bc:cc:41:5f:87:58:ba:55:20:a8:bf:87:63:bc:
                    e1:f0:bf:4a:9c:15:06:39:78:1b:25:34:8d:fa:c3:
                    a6:70:f8:21:c6:63:18:aa:07:ec:fa:80:da:7f:90:
                    2e:6b:96:7e:4e:9b:20:88:ca:05:35:27:34:7c:ce:
                    ba:9e:cf:56:fc:75:a4:ce:3b:f1:66:4e:d0:35:32:
                    3e:33:25:1b:46:f3:83:57:f6:a0:2e:1f:14:50:05:
                    be:66:d9:85:2a:7b:24:d7:fa:a3:eb:09:2a:40:d2:
                    72:0b:ff:b8:27:42:ac:63:86:5b:f9:10:10:a7:10:
                    5f:0e:04:17:53:e6:2b:72:b7:73:59:ff:cd:74:e5:
                    93:41:25:d7:fe:e1:63:92:84:17:8d:8f:02:f3:ba:
                    a5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E7:AD:10:90:54:15:61:91:19:23:49:E3:F8:2E:1C:66:0C:F6:0B
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-uetEJBUFWGRGSNJ4_guHGYM9gs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a600::/29
                  2a06:bf40::/29
                  2a07:95c0::/29
                  2a09:17c3::/32
                  2a0c:d380::/29
                  2a0d:8f80::/29
                  2a0e:2440::/29
                  2a0f:3d83::/32
                  2a0f:3d86:11::/48
                  2a0f:7d01::/32
                  2a0f:bc05::/32
                  2a0f:ee00::/29
                  2a10:3140::/29
                  2a11:4e80::/29
                  2a12:d100::/29
                  2a13:2bc0::/29
                  2a13:8f00::/29

    Signature Algorithm: sha256WithRSAEncryption
         60:e5:4e:9b:b8:85:43:be:03:b2:05:86:3c:5d:3c:da:0f:c6:
         dd:a3:dc:81:bf:f5:55:4c:f5:31:1c:6c:af:4c:36:b2:06:b2:
         9f:3f:e9:91:65:af:32:2f:0a:15:3a:0f:c9:c9:d9:1b:00:1e:
         d3:15:7a:d3:b6:7a:0e:35:5c:fd:7e:f8:43:9c:b8:fd:25:ef:
         70:84:d5:fb:49:e1:c0:45:ec:a7:0b:52:39:37:48:ad:85:9e:
         17:37:a4:34:b2:a5:75:84:98:b6:13:97:8e:ea:f4:aa:e6:39:
         81:c7:15:fd:2d:9b:34:de:93:84:b5:88:7d:55:ea:36:5b:73:
         fc:3c:13:2c:45:56:0a:d5:3f:69:f5:ed:43:f0:8a:d7:c2:c2:
         f1:ba:2d:16:84:4d:d6:a3:4a:f0:17:85:b8:78:0c:e5:64:93:
         5f:75:a8:d4:0f:11:da:2d:6a:a9:1d:4d:5e:a6:6f:d9:12:5d:
         75:84:84:79:38:13:4b:eb:9d:28:c9:b8:17:6a:8e:24:b5:97:
         46:60:2e:49:38:32:31:c4:b5:e0:5c:5b:d1:d9:cf:12:0a:81:
         dd:14:f2:1c:7a:29:d9:32:15:cc:58:13:c2:d9:28:ec:57:bf:
         fd:b5:52:23:22:64:fd:02:95:35:e1:47:c2:78:21:e6:65:9a:
         b3:63:1a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 19:10:01 2025 by rpki-client